Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: EBR3Xk/SCDWIywxe3+UY1JKO3S5kY06uFF+jP2XjUFI=
Subject key identifier: 7B:32:23:D2:53:BA:E9:AE:30:36:94:42:B5:18:1F:09:69:3D:F4:3F
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019FAB9AA6EA365743C9B5EB01285BE2E657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:01:06 +0000
Manifest this update: Wed 29 Jul 2026 02:01:06 +0000
Manifest next update: Thu 30 Jul 2026 02:01:06 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: ept3sxIlt2o/DfR7HNDS3wVw9ALrR9blAV7IiUreDXw=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:a6:ea:36:57:43:c9:b5:eb:01:28:5b:e2:e6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jul 29 02:01:06 2026 GMT
Not After : Jul 30 02:01:06 2026 GMT
Subject: CN=7b3223d253bae9ae30369442b5181f09693df43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:c6:a8:10:46:81:ae:bc:8f:f0:9e:4b:5e:
68:a5:06:9c:66:2c:ac:60:48:3a:e9:2d:1f:d7:38:
5e:6a:a3:0f:41:b6:04:36:89:64:77:52:67:66:79:
a1:b7:50:d5:fa:33:7b:f7:2c:2e:24:5b:32:d2:85:
32:40:50:c4:dc:ff:30:e8:52:b5:af:d8:e9:5b:ec:
05:b0:7f:b6:c8:fd:5f:09:73:6d:a3:1a:36:81:c3:
56:5d:11:c0:cb:df:ff:3a:78:09:c5:e9:bf:53:59:
83:6b:f5:2b:f7:fa:34:e1:84:63:89:ae:1c:1e:19:
97:a7:0a:3c:b4:44:a8:0c:78:66:e2:8c:5e:27:c1:
4a:be:27:b3:66:06:d3:cc:0c:53:9c:9b:dd:ba:12:
ec:8e:d2:d7:d3:b6:85:83:0e:6d:fd:af:bc:52:47:
33:89:2f:3a:ef:f6:01:16:20:48:43:e8:80:22:73:
f7:d1:5e:3e:6c:97:59:3d:65:7c:60:77:bb:56:24:
e8:8b:69:9f:04:cf:8f:f4:13:85:fc:4a:28:71:fb:
e3:d9:9a:ef:19:63:60:fa:bc:9a:8a:48:a1:b0:30:
6d:2f:e3:1d:98:50:4b:f7:4f:1e:8e:05:3c:59:cd:
e5:67:d1:04:46:8e:8a:ed:7e:19:20:b1:ee:35:2b:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:23:D2:53:BA:E9:AE:30:36:94:42:B5:18:1F:09:69:3D:F4:3F
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:be:d6:f2:0c:1a:ed:12:60:4b:b0:66:87:1b:87:59:68:97:
93:1f:14:e1:32:ad:d6:e8:ec:9e:8c:69:a8:c4:a2:de:fc:88:
43:9f:d1:28:17:a5:fc:61:d6:70:41:c0:aa:4b:f0:dd:f6:b1:
d3:03:c0:a2:19:ab:a6:b1:fe:f9:e4:5b:a7:dd:3a:07:ca:41:
9f:e5:18:f5:04:31:b2:56:d1:24:04:79:22:08:a7:28:77:02:
e1:03:71:b5:38:2c:a3:9d:87:8c:59:f6:79:75:83:c8:60:cb:
8f:6d:ac:bf:f4:34:ea:56:3a:4d:57:68:81:15:a6:11:77:f4:
b1:8d:80:b4:4f:4c:45:35:d5:68:81:a4:cd:f8:c2:22:17:cc:
2e:5d:b3:e3:01:f1:6a:d3:cb:43:d4:47:69:25:90:01:4b:ed:
f9:fd:1c:fa:cd:d1:af:9a:d0:7a:70:1d:ca:92:ad:c1:78:2d:
76:21:c4:da:ec:c9:b6:36:9c:27:07:2c:f1:c1:88:01:0c:09:
b8:f4:79:21:2c:ee:e0:02:16:2c:92:e8:6e:9a:74:17:29:a1:
cb:87:e2:d1:88:85:2f:88:af:07:f2:37:a2:60:61:83:08:3d:
59:47:02:73:5b:c8:22:b5:20:d3:73:92:47:c8:7a:fc:f0:07:
58:46:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:51:25 2026 by rpki-client