Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: ef7AGVob8DWWyWK1FtJY/eLNTBugVTDvrj7fr9AZGh0=
Subject key identifier: D3:B4:0A:38:2E:12:F6:01:27:9F:3B:01:68:5F:03:16:88:6F:CF:71
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019FA82AF850EA4444A3DB687BEC6409B0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 10:00:16 +0000
Manifest this update: Tue 28 Jul 2026 10:00:16 +0000
Manifest next update: Wed 29 Jul 2026 10:00:16 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: ylBJibP48TzM90xESABw0c+m53NNYZQiwNBHgpmajGU=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2a:f8:50:ea:44:44:a3:db:68:7b:ec:64:09:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Jul 28 10:00:16 2026 GMT
Not After : Jul 29 10:00:16 2026 GMT
Subject: CN=d3b40a382e12f601279f3b01685f0316886fcf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:6e:1d:cb:8e:e7:9a:6f:b5:a5:d0:03:9f:
b4:97:27:6a:af:bf:96:f2:78:3d:53:8b:0c:76:a4:
d2:de:6c:2b:fe:f4:d4:0e:4e:aa:d2:31:eb:ed:bc:
27:53:37:be:2b:ea:af:97:25:3d:c5:ac:25:b5:3b:
96:bf:ec:79:20:59:55:94:76:e1:91:86:74:3e:f7:
03:bc:f0:31:ae:c3:56:d6:79:9c:1c:0c:72:a0:7e:
38:91:f4:c8:c4:cb:1a:1b:d4:16:30:1f:f8:45:5a:
27:08:5f:da:89:46:f8:b1:21:6e:e9:2d:d5:54:c0:
9b:79:b6:f4:aa:d3:31:8a:61:bc:fa:1d:98:9c:b8:
f0:61:2f:b3:ee:fc:04:6e:a8:e9:e3:19:c5:67:1d:
5c:a5:aa:b2:e8:4d:23:68:0b:db:10:41:21:41:74:
3b:9d:50:c3:00:e2:13:0d:2d:3f:1c:c6:ae:da:78:
43:f7:24:54:d9:80:00:4e:9a:a5:05:00:f1:b0:51:
69:bf:4c:f4:4b:31:9b:7c:70:79:59:58:b7:7c:c2:
0b:e4:54:35:a3:bc:a2:62:f2:49:64:74:fb:31:c6:
4c:bf:65:4e:27:e8:6a:71:a1:cd:68:8f:7c:e0:c7:
2b:66:8e:3a:36:e7:2f:bc:fe:91:01:f4:cc:0a:64:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:0A:38:2E:12:F6:01:27:9F:3B:01:68:5F:03:16:88:6F:CF:71
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:65:48:de:51:09:51:ee:e1:00:fe:79:65:f2:e8:74:69:a8:
de:9b:82:b6:ff:fb:e4:d5:d9:cd:40:c7:98:16:9c:b1:90:e2:
7b:5b:61:d2:55:a4:f8:46:b3:bf:ab:da:24:b2:3c:82:f3:78:
6e:04:df:7d:6d:d5:81:32:45:1c:cd:02:53:55:b3:e0:da:1a:
7c:00:f2:bb:60:f4:26:35:33:10:37:6a:c1:aa:bd:83:52:f2:
7a:72:1c:56:47:76:55:ff:14:72:6d:fe:d6:a3:39:96:27:91:
9b:d7:f4:8b:21:43:68:63:45:7b:f4:0a:99:6b:48:00:42:e6:
18:ae:80:82:91:28:5b:b2:0a:be:7c:cb:ee:83:61:7a:5b:26:
1f:cd:fe:d0:60:d6:03:69:0d:02:1a:3b:67:9e:3a:98:b3:d9:
09:db:39:d0:74:44:d6:80:68:17:80:5e:e7:f3:c6:3e:00:2c:
43:47:a2:f1:1a:d7:eb:ee:09:fa:e0:da:29:66:ee:92:5b:14:
85:8c:88:f6:cf:7d:30:ea:52:00:17:e6:f4:07:70:c7:93:1a:
3a:64:c4:06:ed:f2:99:ad:fe:f5:fe:27:89:e8:c5:d1:5f:f7:
40:81:d8:8b:9b:d7:74:8e:fe:02:b5:1f:17:42:52:e4:18:61:
ca:13:a4:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKvhQ6kREo9toe+xkCbCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjYwNzI4MTAwMDE2WhcNMjYwNzI5MTAwMDE2WjAzMTEwLwYDVQQD
EyhkM2I0MGEzODJlMTJmNjAxMjc5ZjNiMDE2ODVmMDMxNjg4NmZjZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd9uHcuO55pvtaXQA5+0lydqr7+W
8ng9U4sMdqTS3mwr/vTUDk6q0jHr7bwnUze+K+qvlyU9xawltTuWv+x5IFlVlHbh
kYZ0PvcDvPAxrsNW1nmcHAxyoH44kfTIxMsaG9QWMB/4RVonCF/aiUb4sSFu6S3V
VMCbebb0qtMximG8+h2YnLjwYS+z7vwEbqjp4xnFZx1cpaqy6E0jaAvbEEEhQXQ7
nVDDAOITDS0/HMau2nhD9yRU2YAATpqlBQDxsFFpv0z0SzGbfHB5WVi3fMIL5FQ1
o7yiYvJJZHT7McZMv2VOJ+hqcaHNaI984McrZo46NucvvP6RAfTMCmQ50wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO0CjguEvYBJ587AWhfAxaIb89xMB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWVI3lEJ
Ue7hAP55ZfLodGmo3puCtv/75NXZzUDHmBacsZDie1th0lWk+Eazv6vaJLI8gvN4
bgTffW3VgTJFHM0CU1Wz4NoafADyu2D0JjUzEDdqwaq9g1LyenIcVkd2Vf8Ucm3+
1qM5lieRm9f0iyFDaGNFe/QKmWtIAELmGK6AgpEoW7IKvnzL7oNhelsmH83+0GDW
A2kNAho7Z546mLPZCds50HRE1oBoF4Be5/PGPgAsQ0ei8RrX6+4J+uDaKWbuklsU
hYyI9s99MOpSABfm9Adwx5MaOmTEBu3yma3+9f4niejF0V/3QIHYi5vXdI7+ArUf
F0JS5BhhyhOkxA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:57 2026 by rpki-client