Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: EjJPImLVmOWyfF/0OsPRKcFQZlydVX3Edon10XGPHoE=
Subject key identifier: 1A:B7:12:FA:F4:D1:EA:8B:86:5F:6E:E3:94:78:89:5D:8A:92:3C:DB
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 589F6D3E8AF67620601722DF878C92829925C409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 02B0
Signing time: Tue 21 Jul 2026 06:15:04 +0000
Manifest this update: Tue 21 Jul 2026 06:10:04 +0000
Manifest next update: Wed 22 Jul 2026 09:27:04 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: CwKRfGc4WXtM3mZFR1xCiJy48wfI89DYySPfa/uLhGs=)
2: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9f:6d:3e:8a:f6:76:20:60:17:22:df:87:8c:92:82:99:25:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Jul 21 06:10:04 2026 GMT
Not After : Jul 22 09:27:04 2026 GMT
Subject: CN=1AB712FAF4D1EA8B865F6EE39478895D8A923CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:17:2e:12:e1:f3:0e:3c:52:f7:56:28:63:
35:14:af:01:86:73:d3:7d:45:15:32:94:4b:7d:5d:
0c:4f:85:43:19:8c:a8:60:af:9a:8b:5b:01:3b:4b:
60:50:9f:d3:28:47:60:49:f9:7f:04:c1:69:80:b2:
40:09:80:9b:a8:cc:15:63:2c:1b:59:16:c5:e3:18:
2c:b7:97:f1:15:1c:02:81:1b:ab:88:b1:0c:5d:74:
52:82:ed:a3:95:3d:6c:18:af:85:d0:f7:e5:e7:ed:
2a:cd:23:3f:07:8c:55:92:0f:6e:d2:d7:a6:25:19:
9c:1a:19:7b:d6:35:22:37:c1:c1:69:fa:c7:bd:e1:
e6:0d:b5:b4:fc:33:55:dd:d9:8a:1f:33:8b:5f:27:
df:74:30:f2:c7:ce:bc:bd:86:14:8c:2a:16:79:1b:
19:b5:41:5e:7e:e3:34:59:03:de:4a:16:05:73:fe:
14:04:7c:a9:f2:fe:33:6a:59:55:82:bb:e2:4e:c9:
aa:c8:55:1a:16:4e:07:0b:5b:65:7f:2e:20:a4:b2:
43:38:e1:12:df:03:ae:5b:81:85:96:00:44:4d:d9:
61:2d:51:67:8c:9f:df:39:ea:2e:e7:3f:51:60:fb:
93:ed:2e:25:de:46:db:07:d8:1b:2d:dc:7b:a6:64:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:12:FA:F4:D1:EA:8B:86:5F:6E:E3:94:78:89:5D:8A:92:3C:DB
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:64:2d:3c:97:e2:69:71:a1:3d:0e:53:2c:fd:e0:80:27:
21:5f:01:db:c5:a9:57:00:9a:34:52:80:56:33:82:57:cb:18:
5b:a3:15:56:b2:b7:af:68:96:53:a0:f5:f8:ec:b6:61:9f:d6:
04:4b:59:be:92:f5:8f:be:33:84:86:2c:88:92:72:1d:d0:49:
8f:b6:3d:a9:22:7a:79:51:59:5b:7b:38:d9:23:6e:5f:39:8d:
3c:2a:d7:a4:9c:bc:bc:4f:1c:b0:33:9b:ca:a7:e5:71:2a:01:
46:59:85:b6:e6:b1:bc:1c:12:69:60:da:fa:31:f0:6e:ad:69:
d7:fc:51:50:27:3c:d3:c6:e6:77:96:ea:5c:76:fd:7d:e5:f5:
87:6b:b9:58:1a:34:3c:31:5f:0b:c3:ed:07:6f:50:9d:19:39:
86:75:27:ee:75:df:ab:58:bd:ae:bb:36:50:0a:ed:b1:67:c1:
7f:9e:39:2f:b9:4d:3f:97:2a:05:75:bb:6f:37:f7:be:21:ef:
57:91:e3:07:0b:cf:d6:00:ef:38:80:2d:e2:ce:f1:4b:f1:c4:
c7:3a:d5:4b:ce:bf:18:89:ea:46:e4:70:f8:e8:91:8b:9f:fc:
b0:11:f8:ba:bf:4a:c6:fc:30:27:de:0a:d0:a3:cf:28:0e:2f:
58:b3:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:24 2026 by rpki-client