Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: Zu0kTPar3D+VqtuN8VxvgO7CTle4bVGPevk1um8DDQE=
Subject key identifier: 47:42:AF:36:3D:2E:81:B3:97:2C:32:6A:31:D7:0D:D3:A6:6A:EE:79
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019FA9AB7ECC3010E9DE1DFEB617947CB3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 17:00:16 +0000
Manifest this update: Tue 28 Jul 2026 17:00:16 +0000
Manifest next update: Wed 29 Jul 2026 17:00:16 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: 8WQCb3raxt62+DLD5WwejZLeoPcNBpOxQ9ps4N/mb9k=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:7e:cc:30:10:e9:de:1d:fe:b6:17:94:7c:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Jul 28 17:00:16 2026 GMT
Not After : Jul 29 17:00:16 2026 GMT
Subject: CN=4742af363d2e81b3972c326a31d70dd3a66aee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:76:23:f7:6b:e5:a7:e0:00:cf:13:4f:7c:
8e:8e:5d:a9:36:57:10:7b:72:ed:ec:52:be:99:9a:
56:44:f0:22:8d:dc:46:23:b9:2b:b8:4a:86:8a:3e:
b8:54:76:f8:ea:72:9a:0a:b5:5b:08:36:b5:fd:d8:
84:9c:bf:03:ee:76:44:2d:98:6b:9a:e9:d3:ad:da:
ed:65:fa:6f:82:94:75:29:eb:d9:5e:c6:ff:b7:0d:
f0:b6:59:37:47:d8:ba:d9:fc:65:1d:40:94:19:bc:
20:87:ee:33:ce:a3:10:ad:2f:b6:d4:20:7c:74:4b:
5c:56:26:e5:91:9e:c0:77:ff:a6:cc:07:4f:39:ee:
19:a1:e3:f8:2a:c4:a7:a5:91:57:20:6a:10:c4:91:
46:c2:d0:4a:a1:cd:51:0e:24:25:c3:9b:21:3f:2c:
07:8a:f1:c3:03:e1:79:92:73:3f:0a:2c:03:81:bb:
c1:5c:c4:3a:2e:8c:f8:24:40:ec:d5:17:07:b1:f3:
a6:61:73:55:7c:f9:46:ac:80:19:b8:dc:e4:b6:74:
4a:b6:5c:d3:66:2a:5f:06:7f:8e:0b:63:9e:e9:98:
be:17:0c:ea:90:7b:eb:5b:58:15:2b:c2:41:fc:e8:
1e:47:78:c8:57:20:35:d4:2c:b2:02:a6:53:a7:7b:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:AF:36:3D:2E:81:B3:97:2C:32:6A:31:D7:0D:D3:A6:6A:EE:79
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:1b:f2:1d:ad:9b:69:a8:f3:2a:4d:1f:b2:8a:d4:33:e1:
81:81:39:c5:12:26:d2:cc:72:76:76:1e:15:59:c4:4d:c4:4d:
72:37:34:df:09:97:14:d8:05:28:50:5a:12:8b:6c:a9:36:0c:
d5:7c:14:2e:8a:07:50:b0:f7:ba:61:5b:e9:b6:2b:b0:2a:fe:
e5:5b:3d:0b:bc:60:02:64:33:ce:14:b0:43:91:b7:77:e5:bd:
34:f0:e7:39:b7:a5:04:3e:9e:ad:be:35:56:42:bb:ef:a8:01:
a1:59:b0:ff:2c:ed:93:2a:87:6c:c9:bc:73:13:09:fe:a0:97:
36:c9:fe:0f:74:eb:a5:53:ce:61:cb:56:f1:2e:86:54:09:b5:
28:ea:3d:58:a4:0a:67:29:50:49:df:4c:79:7a:7d:b6:5c:27:
2f:fe:61:ed:a0:a0:88:9c:06:58:e5:23:8c:63:d6:93:7b:42:
7c:37:36:0b:f2:70:00:e0:8b:33:e2:16:63:8c:d4:32:99:06:
3f:57:6a:75:4f:64:6f:61:3c:7f:f2:65:c5:8b:5d:49:a4:6c:
c5:eb:92:1f:fe:fc:78:14:0c:10:fb:8c:9b:f1:a4:84:ef:8b:
bd:e7:a1:66:45:87:71:c7:57:62:e8:da:fe:28:b0:32:26:60:
49:17:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:49 2026 by rpki-client