Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: NPBxY8zHkU/qJ8AgEvhy3c8JpgZ638yGiZja91zA/7M=
Subject key identifier: BB:66:D8:22:A0:CF:94:CB:99:13:07:48:56:CB:EB:C5:A5:48:BD:E9
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019FA9754250946D399C7949D7D17C1E0200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0889
Signing time: Tue 28 Jul 2026 16:01:01 +0000
Manifest this update: Tue 28 Jul 2026 16:01:01 +0000
Manifest next update: Wed 29 Jul 2026 16:01:01 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: keiMDgCGOG2vl1RvvLajJx7qHTxCjzIWK5TwL0ev+ds=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:42:50:94:6d:39:9c:79:49:d7:d1:7c:1e:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Jul 28 16:01:01 2026 GMT
Not After : Jul 29 16:01:01 2026 GMT
Subject: CN=bb66d822a0cf94cb9913074856cbebc5a548bde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:ad:d2:9e:f0:81:94:23:6f:cf:60:b4:b1:
5d:e6:f6:60:62:bc:aa:b6:d3:72:44:79:8e:87:ed:
78:0a:64:9e:07:83:da:fd:26:97:5e:b1:28:79:42:
84:78:13:a0:31:36:8a:82:f7:22:4d:07:38:8f:64:
84:c7:0f:8f:50:28:bd:cc:60:bb:51:1a:0b:56:49:
af:a8:6e:ef:ea:b9:38:16:c2:a1:74:e2:c0:a1:9c:
fa:f7:e7:79:01:54:9d:dd:2c:3e:18:db:11:a9:71:
29:3c:40:b6:23:8d:dc:dd:7f:a0:ba:4a:17:e0:86:
32:1b:c2:ab:9e:0d:8c:43:78:fd:fd:04:5d:b3:f6:
ad:df:46:5a:0a:50:ba:55:d5:1b:7b:a4:9c:ec:8a:
d4:30:ac:48:63:5f:1c:eb:1f:af:85:f6:9a:d6:bd:
2a:9d:16:30:f6:ea:54:38:ba:b3:44:c8:3f:7a:b8:
9d:06:ac:c6:28:6f:e6:9d:9b:f6:93:65:88:4d:d5:
03:cf:05:8f:7a:8f:8c:d2:23:47:94:4f:72:ee:b9:
23:79:ed:ea:40:ab:9e:2f:60:54:05:15:34:5c:ca:
81:de:c6:05:43:2c:d5:16:52:8f:93:df:1f:9b:ab:
ac:68:8e:59:c0:e2:f8:62:24:37:1c:00:54:77:04:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:D8:22:A0:CF:94:CB:99:13:07:48:56:CB:EB:C5:A5:48:BD:E9
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:c3:8d:62:2f:c4:18:32:55:07:28:e9:97:15:db:90:88:
fe:3b:0f:95:be:48:c3:8a:29:4d:b2:a3:59:b7:4e:2d:c8:d2:
72:f5:9b:45:48:fb:4c:e1:a6:c1:08:96:ad:0c:f3:f7:c4:8e:
d7:a5:0a:56:9c:f4:4a:9f:0d:8f:74:98:c1:0a:7a:b4:6f:8c:
6c:ef:c2:c4:67:6d:67:70:9f:8d:74:23:d2:fd:67:61:c4:b9:
04:16:3d:5e:ff:16:1a:c4:ef:77:d3:80:48:5e:23:b4:be:58:
a2:df:a6:6e:a3:ce:b8:92:7a:4e:b7:52:21:34:5f:2d:70:36:
de:79:52:78:be:0b:34:98:5b:36:40:5a:78:90:64:1f:01:7b:
0a:d1:33:fa:76:21:c3:c5:9f:64:e4:3c:b7:95:a2:a6:a3:33:
65:7f:31:ac:a7:8e:d7:d1:4c:59:16:7e:56:14:c2:8f:a2:5b:
81:a6:81:61:a3:82:89:53:8a:32:db:ce:5c:37:1f:cf:18:9f:
4e:30:fe:78:1a:20:b3:31:01:f2:50:f7:bc:27:8a:9a:46:8d:
ef:0f:68:05:a4:fd:b4:11:30:31:6b:aa:3b:c3:63:a8:c3:e3:
15:db:14:f8:ef:bc:3d:97:12:8b:d3:66:44:14:68:85:7f:45:
61:33:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:24 2026 by rpki-client