Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: gXzz3ST9h9+YmiGHCmMrqFZzn7tKkWvjzoo7tzFb6yU=
Subject key identifier: AF:91:D7:6B:45:4E:D6:8A:B6:41:3E:ED:92:E1:B4:1D:F9:B2:13:8F
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 019F83B0CD3AAE4B9EE31EB19BE3EF45D75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 0677
Signing time: Tue 21 Jul 2026 08:00:29 +0000
Manifest this update: Tue 21 Jul 2026 08:00:29 +0000
Manifest next update: Wed 22 Jul 2026 08:00:29 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: nlSQvcb6JgJfN641Jxb2cvK6RsdQLDBMsWMMzdp4jYY=)
2: E0RxxjzRl6KI64LFqtZcLSw2L2k.roa (hash: +o4tGG4s2zr/f/sl2ZygwSP9jX+reoSK5d2HJjcm+m4=)
3: z6fjFNC5yY7s5rVC_18gdfOPVm4.roa (hash: UsutNgSzfSxKpzDA+6kQmVSCK+R6MBOFNeCYRGmkXwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:cd:3a:ae:4b:9e:e3:1e:b1:9b:e3:ef:45:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jul 21 08:00:29 2026 GMT
Not After : Jul 22 08:00:29 2026 GMT
Subject: CN=af91d76b454ed68ab6413eed92e1b41df9b2138f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:a5:bd:e6:32:86:76:5a:d0:bf:eb:e7:7f:
c4:7b:50:39:df:50:39:24:d5:68:39:ea:bd:6f:68:
83:78:e0:89:a9:84:b6:aa:3b:81:3a:44:8e:1c:79:
27:66:fa:3a:3e:0e:74:89:cf:0b:c4:51:67:fa:a7:
6b:cc:ab:77:3c:d3:89:ee:46:2c:45:90:c8:e6:4d:
36:71:9a:f4:b3:2b:3a:6b:fe:01:cf:8f:61:af:f0:
da:b7:16:7f:b7:7f:8a:cd:07:e0:99:46:df:0d:3b:
82:14:f1:3f:24:63:23:a3:fb:7e:e3:25:e0:b6:66:
ad:40:a3:b3:53:33:8d:4d:a5:ae:34:68:46:75:6a:
d5:94:9d:15:f2:50:f1:97:69:ca:0b:cd:92:2c:7b:
cd:fd:83:11:03:e3:b3:de:b8:4d:1a:47:06:ae:27:
93:6f:0e:80:1b:ec:aa:be:f4:21:6c:ac:ca:10:34:
d8:aa:92:dc:1a:97:86:e2:3c:f8:e7:77:6b:1f:44:
cf:56:db:90:18:06:2d:9c:a8:ae:8b:7f:11:d0:45:
85:81:c8:b6:c3:80:dc:84:71:c4:73:bf:29:5d:94:
65:89:87:72:c7:ce:62:63:2a:38:4e:53:3d:b4:be:
f7:05:23:37:a9:4a:6b:da:4f:41:a3:cd:02:4f:3a:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:D7:6B:45:4E:D6:8A:B6:41:3E:ED:92:E1:B4:1D:F9:B2:13:8F
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:02:f4:b7:50:73:84:1b:42:a8:e0:15:e9:9d:1e:21:fe:ad:
75:a9:6d:38:33:19:e6:7a:61:ef:70:36:12:f3:e2:bb:51:65:
31:8f:3a:94:ba:5a:dd:cc:f0:1a:8b:94:f0:da:2f:57:e9:4b:
0b:19:4e:60:f7:d8:88:06:64:26:e9:4b:08:04:83:9a:35:23:
06:d0:c2:2d:fc:c2:8b:06:12:2e:3d:34:01:38:91:99:23:bd:
25:1b:d2:60:93:71:e4:fe:0c:3c:a7:85:9b:93:a2:30:5b:7e:
9e:8e:3c:55:27:d5:5d:42:7e:cb:56:da:74:ea:e9:03:79:71:
35:7a:01:74:2f:ef:2b:36:2a:e6:3c:b6:d6:1f:af:be:6c:37:
c1:00:77:9e:0f:df:e5:70:9f:e2:dc:43:aa:4d:1c:fe:aa:71:
72:7c:67:c9:44:50:fb:3c:40:60:04:1d:6e:98:3e:fa:ea:d8:
96:fb:27:35:4f:b8:e0:f5:de:22:72:6b:e2:86:de:dc:4f:a0:
0b:99:c1:3b:d8:fb:7d:f1:27:90:ed:18:bb:51:68:79:be:12:
f6:82:4c:55:2d:ac:7e:ff:d7:5c:8b:9c:7f:67:7c:cc:9d:28:
83:b7:b4:f2:94:75:5e:05:db:2e:5c:8a:3b:ec:74:e6:46:17:
6f:4f:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:58 2026 by rpki-client