Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: YGaDG6BCWnfIeiZAnpsRhHfseUgr2bPlUT9YWtbS2TE=
Subject key identifier: 07:C7:3D:A7:01:92:29:CC:D3:42:C8:44:7E:BD:41:01:FD:E3:33:34
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01A000937C203A70D9B68618A2C1C8B8764E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 11D5
Signing time: Fri 14 Aug 2026 14:01:00 +0000
Manifest this update: Fri 14 Aug 2026 14:01:00 +0000
Manifest next update: Sat 15 Aug 2026 14:01:00 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: mHCKPbsxqvHAQOgyW9iP/C2DkbBD+avs3Kb3+gUaxSw=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:7c:20:3a:70:d9:b6:86:18:a2:c1:c8:b8:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Aug 14 14:01:00 2026 GMT
Not After : Aug 15 14:01:00 2026 GMT
Subject: CN=07c73da7019229ccd342c8447ebd4101fde33334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:43:39:9e:7c:c6:17:dc:36:cc:1e:83:85:
ae:ef:d6:6b:32:ff:a8:b9:83:21:25:ca:db:21:5c:
1a:ab:47:ee:23:06:79:2b:3b:07:5a:74:dd:98:0b:
63:1e:84:0a:a1:b7:57:e0:6b:6c:b7:aa:58:09:0d:
23:dd:c3:c7:20:01:6c:5a:b0:16:1d:f9:59:e3:9f:
05:1b:8a:3c:07:ae:37:ba:a6:06:cb:1d:4a:58:68:
d6:30:75:5e:08:8a:d9:cb:f0:9c:0c:58:04:9f:61:
6d:cd:8d:aa:79:74:47:5c:35:1f:31:88:aa:ca:25:
78:da:41:b1:2c:4a:c6:7c:31:40:b5:68:81:01:81:
bf:b1:4f:b0:3f:d6:4e:bb:6a:d0:44:c2:5e:f6:67:
00:c0:49:c0:c7:a2:f0:5f:d8:aa:7b:17:5c:d3:f8:
00:58:c0:f3:d1:89:bf:e5:26:45:e1:d6:58:b1:10:
fc:37:ca:22:12:70:3d:4d:94:95:5b:d4:59:78:a4:
0c:b0:20:76:8c:10:97:b3:76:a1:8c:2c:ca:fc:31:
6b:d9:e3:87:c8:04:c4:7c:3a:48:a5:ba:8b:b4:79:
46:c7:ac:5b:98:0a:2c:33:7f:93:1e:dc:58:36:a8:
5f:c9:af:a9:99:1f:fe:5a:9a:15:1d:61:b3:85:3c:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:3D:A7:01:92:29:CC:D3:42:C8:44:7E:BD:41:01:FD:E3:33:34
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:4b:7b:63:f0:b8:01:3c:1c:74:e2:67:55:1c:fe:42:b8:
3b:dd:c9:fc:4d:1d:ca:a6:7b:53:1c:3e:85:e4:06:95:37:6b:
d1:ee:bd:0a:2d:69:69:43:d6:9f:d7:ef:d8:26:f1:d1:d0:cd:
2c:d8:09:7c:e6:33:b1:a2:c2:b3:91:73:17:54:b8:66:d5:ab:
42:fc:6f:9b:fb:e2:a2:02:60:4f:01:3b:94:21:82:81:af:2d:
67:38:76:0a:74:24:18:5e:44:de:d8:59:19:40:e5:6f:10:92:
18:00:95:4f:b5:0d:a7:79:80:9a:f1:bd:35:f6:db:29:05:1d:
b3:ba:7d:fe:c5:8e:e0:b5:51:07:24:b7:ad:ef:5a:d9:9d:1f:
fb:cf:a7:bb:37:d0:e2:48:72:e6:ef:2f:cf:e4:3c:ac:fc:92:
8b:c4:18:dc:10:33:ed:a8:0b:1b:50:81:05:62:d2:ac:28:f0:
ac:ac:c1:21:26:ff:3b:82:30:27:15:f2:39:43:24:cb:45:82:
e7:32:3b:d9:09:67:8b:77:0d:36:5d:88:59:93:c1:d1:8d:5b:
7c:9d:2e:cc:2d:5f:70:8c:28:4e:78:58:6c:70:80:91:2f:e1:
24:71:92:06:dd:52:a8:99:ad:4e:ab:79:63:42:fa:55:23:02:
78:7b:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:50 2026 by rpki-client