Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: fw3Mt1CNUHnCzYqus3zZ1qQT0bpZ8nMArg9NobTt18U=
Subject key identifier: 8C:AD:A8:B9:CA:C4:D7:A8:A9:4B:E1:4B:97:6B:66:E3:33:6A:60:C0
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019F18D67CC5F98923CDBA639EDA4A477466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 115D
Signing time: Tue 30 Jun 2026 14:02:17 +0000
Manifest this update: Tue 30 Jun 2026 14:02:17 +0000
Manifest next update: Wed 01 Jul 2026 14:02:17 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: n8W2xFbwtjhK4eWQyETGpbacsPFJDlnv7LylfJLpqnY=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:7c:c5:f9:89:23:cd:ba:63:9e:da:4a:47:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jun 30 14:02:17 2026 GMT
Not After : Jul 1 14:02:17 2026 GMT
Subject: CN=8cada8b9cac4d7a8a94be14b976b66e3336a60c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:dd:ee:30:62:e2:bb:da:73:96:94:ed:ac:
d9:dd:5f:c2:50:d2:cf:48:49:d6:58:2c:8e:7c:b9:
cf:6b:f8:30:b7:7b:34:1e:3b:5e:67:19:ac:fe:9d:
82:6a:48:53:19:30:be:aa:96:a0:cb:37:87:c4:d7:
38:d3:b7:a1:cb:ad:e1:d5:57:32:de:05:2e:16:f4:
6a:ee:5b:cb:76:89:98:66:d3:6c:b2:73:a1:b6:69:
52:df:19:29:c7:33:65:1e:9d:1d:07:30:1d:0e:bc:
69:c8:74:90:83:1e:7f:74:e9:a1:ae:22:8a:9d:54:
60:36:98:94:37:5b:64:04:a0:dc:03:27:ad:15:60:
98:c7:d6:bd:c5:00:b9:0f:57:e1:b8:76:d3:21:79:
3d:0c:d2:1f:99:96:82:64:52:18:d2:f1:61:a3:db:
f5:d0:50:6d:ae:60:e5:45:ca:2a:44:e1:3e:ac:ff:
a0:96:28:bb:2b:08:58:0d:ac:d2:d0:67:17:bf:17:
d8:eb:74:ae:31:32:38:4e:d0:5d:cd:b9:cc:ff:d4:
45:4d:1e:e9:40:b7:e0:22:27:6a:1e:df:aa:6b:f0:
9a:21:d0:fa:a7:58:59:7f:0a:39:c5:17:42:39:63:
18:a6:6a:59:31:20:bd:be:3d:68:e8:fb:23:a9:91:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:A8:B9:CA:C4:D7:A8:A9:4B:E1:4B:97:6B:66:E3:33:6A:60:C0
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fc:cd:cc:98:9b:d6:ae:b6:0d:52:a0:ab:52:8c:3e:66:e2:
02:93:48:55:64:b1:85:da:f8:00:1e:d8:23:be:6c:88:26:b7:
87:49:85:2e:5d:74:77:63:6d:c8:ee:36:e0:51:9b:09:2a:64:
6b:08:a0:b8:e5:a6:06:2a:ae:df:33:35:80:bd:5a:9e:90:17:
4d:2c:d6:4d:3d:97:06:96:70:16:94:5e:43:74:9a:11:09:68:
af:2e:8a:42:df:6f:e6:f7:9c:08:4e:77:a3:d1:a3:cc:95:24:
23:96:fc:73:8f:95:1a:38:1a:e2:99:55:34:ee:07:61:0a:dd:
4b:fa:3a:74:6d:cb:a8:67:6f:c2:59:c1:d3:7a:bf:0d:35:ee:
3e:dd:60:bb:75:37:a6:0a:f7:96:69:bc:d6:a1:c7:e9:81:dd:
58:7a:36:77:2a:b5:b2:25:0d:cf:b5:6c:59:b4:3a:19:61:4e:
2d:85:a4:09:79:c6:9e:f1:24:18:8a:be:f0:41:70:fd:fa:db:
c4:36:4a:9c:5c:49:2a:f8:52:b6:3b:02:4f:90:ff:7a:97:38:
e8:dc:94:2b:a3:0e:20:bf:ad:bf:45:1a:85:d2:53:4e:4d:fa:
7a:cd:70:df:9c:b3:62:a1:cf:a4:36:5c:ae:7a:d4:87:3d:87:
dc:00:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:47 2026 by rpki-client