Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
File: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft (raw, json)
Hash identifier: 7Jc0vxypXqBH0zCKgca1qFIkh34cX3Jyz5gvnx17n5Y=
Subject key identifier: 87:1D:7D:7F:FE:C9:CF:77:F3:B4:C6:EF:11:48:F6:44:B2:B2:C7:1C
Authority key identifier: EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
Certificate issuer: /CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Certificate serial: 019FAA889CE319201586CF1A4031CF4A52C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:47 +0000
Manifest this update: Tue 28 Jul 2026 21:01:47 +0000
Manifest next update: Wed 29 Jul 2026 21:01:47 +0000
Files and hashes: 1: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl (hash: EWIrs42+s+efjTI48mqWMrB2462jdOqAWo98zfhhGZ0=)
2: XbUrIbN32tx_I5q3CIy0eDpniyc.roa (hash: rSzXDaoG3c1rlucOs36GgG/tUP5/xd5PVZrM6moq2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9c:e3:19:20:15:86:cf:1a:40:31:cf:4a:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Validity
Not Before: Jul 28 21:01:47 2026 GMT
Not After : Jul 29 21:01:47 2026 GMT
Subject: CN=871d7d7ffec9cf77f3b4c6ef1148f644b2b2c71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:59:38:42:bc:20:8f:48:3f:d4:f4:13:8e:
d1:b5:29:ea:71:b9:78:89:10:bc:41:38:76:70:a8:
85:4e:6b:07:af:a7:02:12:9a:bc:11:6f:55:aa:4f:
ae:ec:92:12:8a:91:46:a9:36:3e:30:e8:78:1f:8a:
2e:86:f5:85:f9:e8:9c:f8:91:56:b8:b4:3f:7a:1e:
64:b7:be:fb:ef:5b:04:c2:58:6c:a8:5a:b3:be:6e:
dd:75:2b:80:e4:87:26:16:56:1f:6e:a8:f9:d5:a8:
bb:55:5b:d1:c1:cb:14:89:6a:0b:cd:17:d6:c3:18:
b1:6a:dc:d9:bc:5b:eb:04:7c:59:48:7f:7c:4e:b6:
65:b0:95:2a:8c:56:7f:1c:e3:9f:ee:8a:cf:0a:94:
f4:9f:49:d7:8f:fe:30:a1:fc:2b:b0:5f:48:68:d8:
9d:50:9c:2a:42:02:7a:32:e0:64:87:11:98:70:ae:
5e:4b:99:5a:8a:54:32:c3:b0:53:92:4f:74:be:b1:
9e:cf:81:1b:10:44:64:ff:4d:7d:8f:9e:0f:d8:a3:
f3:88:31:30:9f:db:f2:27:6b:d2:16:e4:77:3f:ce:
75:10:27:19:ea:d4:c3:e0:d4:32:42:1c:49:22:6c:
cc:d8:ae:6f:26:01:62:ab:a6:39:4a:c0:32:97:45:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:7D:7F:FE:C9:CF:77:F3:B4:C6:EF:11:48:F6:44:B2:B2:C7:1C
X509v3 Authority Key Identifier:
keyid:EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:78:98:0e:13:9d:32:7c:61:0f:ca:3f:c3:e9:42:b1:84:
f5:a3:bb:95:d8:6d:f4:98:d0:0b:7b:2c:49:56:19:0a:bb:fb:
19:f4:bf:e4:2d:7a:4e:12:c7:13:11:90:05:e2:ce:3e:8d:54:
d1:e2:d0:78:60:64:d9:aa:5b:16:70:92:68:4a:08:92:d6:72:
1d:e0:a2:ec:0e:70:8e:db:a8:92:2c:39:ac:91:4f:4e:ce:d0:
c0:ec:be:c2:5a:8b:2e:3c:79:f7:cc:47:c3:1e:5f:4d:2c:bb:
1f:5e:5b:65:f3:9f:a3:6a:1e:a0:6d:ea:77:0c:82:1a:3b:43:
8a:6f:e2:bf:62:7f:13:78:4f:88:09:c9:5b:41:61:0d:e8:a2:
33:f8:e7:e9:ef:53:86:4a:a3:e9:20:46:ef:bc:7e:b1:e1:49:
d9:5f:a6:bd:76:ce:69:83:86:35:a3:22:87:4c:5f:df:43:7b:
32:af:1c:bc:76:6e:1f:e0:5a:f6:53:be:2e:e6:cd:b6:ac:59:
74:e2:61:14:77:50:67:28:ea:82:c2:c5:09:8a:72:9b:cf:2b:
8f:94:63:99:99:2f:1f:dd:58:34:ef:9a:fa:86:75:aa:1a:1d:
49:b5:51:d0:cd:47:ae:1e:6e:6e:d7:bd:8e:40:81:00:88:02:
36:55:fa:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiJzjGSAVhs8aQDHPSlLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzMyMDdkMTQ0YTA5NDRmNTJlODY3MWE5MTgzOWE4M2Fj
OWE2ZmEwHhcNMjYwNzI4MjEwMTQ3WhcNMjYwNzI5MjEwMTQ3WjAzMTEwLwYDVQQD
Eyg4NzFkN2Q3ZmZlYzljZjc3ZjNiNGM2ZWYxMTQ4ZjY0NGIyYjJjNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprFZOEK8II9IP9T0E47RtSnqcbl4
iRC8QTh2cKiFTmsHr6cCEpq8EW9Vqk+u7JISipFGqTY+MOh4H4ouhvWF+eic+JFW
uLQ/eh5kt77771sEwlhsqFqzvm7ddSuA5IcmFlYfbqj51ai7VVvRwcsUiWoLzRfW
wxixatzZvFvrBHxZSH98TrZlsJUqjFZ/HOOf7orPCpT0n0nXj/4wofwrsF9IaNid
UJwqQgJ6MuBkhxGYcK5eS5lailQyw7BTkk90vrGez4EbEERk/019j54P2KPziDEw
n9vyJ2vSFuR3P851ECcZ6tTD4NQyQhxJImzM2K5vJgFiq6Y5SsAyl0UOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcdfX/+yc9387TG7xFI9kSyssccMB8GA1UdIwQY
MBaAFOwzIH0USglE9S6GcakYOag6yab6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt
ZjBjYWQ5ZmY2NWJlLzEvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl
LzEvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD894mA4T
nTJ8YQ/KP8PpQrGE9aO7ldht9JjQC3ssSVYZCrv7GfS/5C16ThLHExGQBeLOPo1U
0eLQeGBk2apbFnCSaEoIktZyHeCi7A5wjtuokiw5rJFPTs7QwOy+wlqLLjx598xH
wx5fTSy7H15bZfOfo2oeoG3qdwyCGjtDim/iv2J/E3hPiAnJW0FhDeiiM/jn6e9T
hkqj6SBG77x+seFJ2V+mvXbOaYOGNaMih0xf30N7Mq8cvHZuH+Ba9lO+LubNtqxZ
dOJhFHdQZyjqgsLFCYpym88rj5RjmZkvH91YNO+a+oZ1qhodSbVR0M1Hrh5ubte9
jkCBAIgCNlX67A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:17:27 2026 by rpki-client