Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: u6rt2zIq22q/5tbAlGGMRurtm1bpP1yPMR6usoB18/0=
Subject key identifier: 9C:6E:FF:94:87:44:BB:6A:00:40:FF:41:E6:B1:02:FB:26:48:86:17
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019F17545A8CCFC59B55FD7F977772798DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0D0B
Signing time: Tue 30 Jun 2026 07:00:31 +0000
Manifest this update: Tue 30 Jun 2026 07:00:31 +0000
Manifest next update: Wed 01 Jul 2026 07:00:31 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: 3ANH+R0koFXt+mtT12UxW1o+O4ed3I1jB3POGlDkYXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:5a:8c:cf:c5:9b:55:fd:7f:97:77:72:79:8d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Jun 30 07:00:31 2026 GMT
Not After : Jul 1 07:00:31 2026 GMT
Subject: CN=9c6eff948744bb6a0040ff41e6b102fb26488617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:a2:26:1f:51:47:c0:7e:c4:ed:52:f9:cc:
db:55:c3:3b:f4:54:f9:dc:f7:2c:c7:c7:e4:36:50:
8c:c8:37:2b:ad:71:07:8e:95:43:0f:4a:fc:02:b3:
88:c9:bb:5d:2a:a2:b0:a7:a3:57:79:66:05:8c:75:
e6:45:ea:f8:f2:51:a7:50:11:c6:36:6c:19:9b:2c:
69:0b:1d:9d:4a:0f:be:3f:92:74:20:36:24:63:34:
00:cc:b2:0c:29:40:5b:13:4d:17:a9:d3:98:a1:bf:
87:43:1b:3c:3b:02:ed:fa:f6:cc:c2:8c:8d:22:64:
2d:9a:7e:4b:f0:9e:62:d4:ef:ed:89:39:9f:2d:0e:
36:86:29:ac:b6:4c:98:f0:b9:dc:b2:3a:82:98:a8:
cf:2e:53:92:51:f8:51:22:19:01:e8:f0:b4:75:1c:
99:ee:dd:f0:5f:19:bb:77:05:0d:0b:38:30:1b:5e:
6f:b0:e2:bc:6d:75:43:fb:de:9d:77:e0:24:3f:d0:
ea:fe:a7:29:80:93:e6:0e:42:41:74:7e:f7:b2:04:
7c:2b:ed:61:00:46:a3:56:2e:8f:30:70:6d:f3:ec:
35:75:e6:84:3b:de:8f:e7:dd:ca:da:ea:e3:44:a8:
85:b6:fc:38:f7:be:a4:77:75:af:da:e4:45:78:41:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:FF:94:87:44:BB:6A:00:40:FF:41:E6:B1:02:FB:26:48:86:17
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:c1:c1:7d:11:e3:5c:ac:95:e5:ae:34:a1:ba:f9:fb:c1:
e9:bd:09:d3:9c:3e:bd:89:11:93:dc:ca:55:14:cf:e1:da:e6:
1f:72:d3:1b:b9:00:bc:98:55:e4:6d:6e:39:58:9d:6f:b2:5a:
ea:62:23:ba:44:bb:e9:e9:91:36:73:fa:d4:0f:8f:aa:12:0f:
1c:42:bc:f4:c9:ad:49:c6:13:97:d1:95:d3:b6:b3:41:f0:56:
3b:d3:59:4d:e6:d7:37:19:b9:5a:18:02:4e:88:36:7e:98:32:
10:45:04:7b:ae:ae:29:8f:0b:cf:b1:63:e1:70:bf:2d:db:83:
ff:e3:44:00:ec:8e:c6:9a:0a:8a:26:f8:e0:a2:4a:da:4b:c7:
89:27:9c:1a:d2:ad:c5:83:d5:ab:cb:e4:d1:a4:66:29:7a:b8:
d6:b8:15:83:29:2e:e4:01:bf:59:b5:59:59:e7:52:93:89:96:
be:cc:91:32:78:9e:9c:5d:36:e4:03:46:22:fe:8a:f8:ba:b4:
8f:cc:9e:f0:89:2d:e0:7f:02:84:88:49:4c:aa:b6:a0:3a:cd:
87:2a:12:d4:5a:d1:1b:a1:52:9c:68:95:6f:64:37:14:8f:ad:
5b:cf:63:b8:0e:4b:fb:b8:a6:e0:d5:b6:91:dc:9c:aa:a0:19:
39:44:a1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XVFqMz8WbVf1/l3dyeY3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOThkYzI1YWJkN2FiNjNlMzViNjI4ZWFhYzJhNTRkOTQ5
YTlmNDYwHhcNMjYwNjMwMDcwMDMxWhcNMjYwNzAxMDcwMDMxWjAzMTEwLwYDVQQD
Eyg5YzZlZmY5NDg3NDRiYjZhMDA0MGZmNDFlNmIxMDJmYjI2NDg4NjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HCiJh9RR8B+xO1S+czbVcM79FT5
3Pcsx8fkNlCMyDcrrXEHjpVDD0r8ArOIybtdKqKwp6NXeWYFjHXmRer48lGnUBHG
NmwZmyxpCx2dSg++P5J0IDYkYzQAzLIMKUBbE00XqdOYob+HQxs8OwLt+vbMwoyN
ImQtmn5L8J5i1O/tiTmfLQ42himstkyY8LncsjqCmKjPLlOSUfhRIhkB6PC0dRyZ
7t3wXxm7dwUNCzgwG15vsOK8bXVD+96dd+AkP9Dq/qcpgJPmDkJBdH73sgR8K+1h
AEajVi6PMHBt8+w1deaEO96P593K2urjRKiFtvw4976kd3Wv2uRFeEEixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxu/5SHRLtqAED/QeaxAvsmSIYXMB8GA1UdIwQY
MBaAFOyY3CWr16tj41tijqrCpU2Ump9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEt
ZDViM2Q3ZmNjZmU0LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEtZDViM2Q3ZmNjZmU0
LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM87BwX0R
41ysleWuNKG6+fvB6b0J05w+vYkRk9zKVRTP4drmH3LTG7kAvJhV5G1uOVidb7Ja
6mIjukS76emRNnP61A+PqhIPHEK89MmtScYTl9GV07azQfBWO9NZTebXNxm5WhgC
Tog2fpgyEEUEe66uKY8Lz7Fj4XC/LduD/+NEAOyOxpoKiib44KJK2kvHiSecGtKt
xYPVq8vk0aRmKXq41rgVgyku5AG/WbVZWedSk4mWvsyRMnienF025ANGIv6K+Lq0
j8ye8Ikt4H8ChIhJTKq2oDrNhyoS1FrRG6FSnGiVb2Q3FI+tW89juA5L+7im4NW2
kdycqqAZOUShmg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:56 2026 by rpki-client