
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File: 7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier: 7HNUvicLHQvLumfb62AsxnldI4cUlwIyR301kKk5EIg=
Subject key identifier: 9C:EC:05:E5:B5:27:66:80:F6:E2:EA:2C:35:71:D6:F4:BD:D9:32:92
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer: /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial: 019FACE379A52E72A215390B80E60C10AC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number: D7
Signing time: Wed 29 Jul 2026 08:00:16 +0000
Manifest this update: Wed 29 Jul 2026 08:00:16 +0000
Manifest next update: Thu 30 Jul 2026 08:00:16 +0000
Files and hashes: 1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: 5WX13cvngNVmC4ANfNb7ACopGnkMJWpS1dU4W7WndPw=)
2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:79:a5:2e:72:a2:15:39:0b:80:e6:0c:10:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Validity
Not Before: Jul 29 08:00:16 2026 GMT
Not After : Jul 30 08:00:16 2026 GMT
Subject: CN=9cec05e5b5276680f6e2ea2c3571d6f4bdd93292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ef:e3:ed:2e:f2:2e:f4:f5:52:06:97:8d:e7:
e9:de:d6:b7:6d:a1:4b:2c:94:f5:cf:ad:f0:4c:2a:
d6:0e:cf:cb:43:e5:11:c4:47:fc:a7:b2:dc:7e:94:
40:39:e8:11:8e:d7:2d:05:e7:97:c5:b2:e5:9f:17:
9b:aa:05:b6:e3:d0:70:c6:98:46:81:cf:de:af:46:
7f:bc:77:bc:31:df:c9:0a:d4:34:e0:53:1d:bc:02:
ab:0b:ea:bc:0c:f6:33:2e:ca:aa:17:92:9a:a8:cd:
8a:84:32:86:b0:f1:aa:a3:3d:1b:9e:5a:ef:d2:e4:
05:be:fd:bc:a4:4d:42:ef:8a:be:a0:80:b7:0e:2f:
e6:66:5a:6d:c7:6c:17:a6:ef:bf:f3:4d:80:4c:66:
fb:51:88:09:fe:08:84:94:2c:17:97:fa:03:49:a6:
3f:ba:a8:22:4a:75:69:71:84:a3:10:76:50:e9:e6:
97:41:df:4a:e1:50:31:2c:17:6b:5a:4b:ff:61:85:
06:81:cf:06:67:2c:86:8a:64:fe:12:96:d0:d4:7d:
98:d3:0c:fd:83:b3:8e:e6:45:59:61:43:e5:c1:15:
b5:42:e7:b7:52:c6:9e:3b:79:5f:46:ba:4d:be:6d:
06:0c:e4:0b:8a:fd:49:96:40:b4:6e:b3:aa:b7:aa:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:05:E5:B5:27:66:80:F6:E2:EA:2C:35:71:D6:F4:BD:D9:32:92
X509v3 Authority Key Identifier:
keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:eb:13:a3:8c:8d:75:2a:45:06:c7:c0:91:d2:f7:55:25:64:
4f:e0:d7:2c:84:4c:ea:a5:73:3c:37:dd:a0:da:42:76:d4:ce:
f9:1c:6f:15:f3:40:43:cc:af:26:0b:fc:c2:ee:47:d0:d4:9f:
c3:1f:c3:73:8c:7d:2c:a2:29:f5:89:38:d0:ea:2c:12:5f:e5:
e6:37:10:6b:dd:0b:34:38:df:7a:ac:63:ee:31:ad:ad:46:02:
23:a2:02:2f:bd:62:90:c7:3f:5c:fd:e4:fa:15:86:5f:22:8d:
01:c3:8e:ff:a4:b3:8f:8a:ac:ac:47:12:a3:f9:a7:d5:ba:7e:
b6:be:fe:84:31:bc:c6:2c:56:47:29:1b:16:99:0e:38:78:44:
fb:9e:84:65:cb:d7:b7:4d:67:4c:08:8c:67:a9:97:1e:c0:26:
dd:5c:e9:61:92:12:ae:1a:46:8f:c6:4e:07:df:94:bd:c7:04:
57:6a:ae:f8:7f:72:61:4b:18:74:08:c9:13:35:43:1f:c7:36:
c7:7c:fd:4c:a4:d2:c9:ed:5d:64:ca:0a:77:74:5b:a3:d9:54:
90:6f:50:81:80:db:a1:14:b2:bb:f5:82:69:e5:00:d8:a4:86:
63:79:b1:5c:3d:23:a5:69:b2:5a:68:89:15:00:5c:94:0d:46:
93:53:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:49 2026 by rpki-client