Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: d9QM07hIbrDVbqFG7f4cDLzqUIMGl8387mrZmHP3P/0=
Subject key identifier: 94:D0:AA:7D:E6:B7:89:7C:CC:E3:25:30:AE:58:7C:29:1B:27:0A:E0
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 019FA907AF311FE9E7AC325323A84AA3C61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0DF9
Signing time: Tue 28 Jul 2026 14:01:20 +0000
Manifest this update: Tue 28 Jul 2026 14:01:20 +0000
Manifest next update: Wed 29 Jul 2026 14:01:20 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: y6rtaIACKZExN4YnCeTR1RmVuu6sQpoOCnIesdUOrM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:af:31:1f:e9:e7:ac:32:53:23:a8:4a:a3:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Jul 28 14:01:20 2026 GMT
Not After : Jul 29 14:01:20 2026 GMT
Subject: CN=94d0aa7de6b7897ccce32530ae587c291b270ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:0d:1f:8e:db:bf:be:51:94:ae:97:62:54:
4c:51:dd:36:d2:bb:0b:19:ee:60:1f:52:44:95:e0:
44:a4:9e:16:8b:46:4a:84:be:de:09:5f:2b:1e:f5:
fb:d0:f9:0c:a3:90:e6:15:ea:2d:ad:6a:b6:18:61:
8e:39:fd:77:42:f3:16:08:51:87:b2:3d:df:15:5b:
bd:a7:8a:62:a5:7c:ff:a4:43:b3:d7:07:0d:06:ca:
b4:6c:ec:4d:b7:f5:d8:79:a7:ad:f5:eb:14:f3:48:
44:2b:9a:20:1b:b2:a4:2c:5f:80:ec:5f:4b:d6:93:
cc:99:d5:9b:d5:91:61:3c:32:d6:8b:bb:63:4b:ce:
a6:16:d3:01:c9:85:ed:9f:56:d1:0e:76:94:e2:cc:
fb:1c:b6:4e:ef:51:d2:d8:64:5b:0d:d6:7f:c9:ca:
de:fd:75:b3:9b:c9:7f:2c:e0:11:c4:e4:74:1c:98:
ff:ad:16:0f:bc:57:d2:a3:b0:ca:30:b5:47:5e:59:
63:23:60:26:88:f6:51:e4:49:04:26:7b:70:bd:81:
6b:c6:a4:47:d6:52:43:86:e4:d5:7c:49:4c:e4:10:
49:ef:fa:44:01:8a:ce:8f:3b:14:1b:21:c4:f9:ed:
7d:2e:59:46:d5:c5:ee:a2:bc:bc:a8:ff:02:3a:14:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:AA:7D:E6:B7:89:7C:CC:E3:25:30:AE:58:7C:29:1B:27:0A:E0
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:32:36:76:f7:3d:e7:b0:4f:f0:91:a1:21:f6:ed:2e:af:
54:4b:58:ec:50:6e:87:cb:82:d0:65:67:f7:1c:4f:78:af:fa:
c2:b7:b8:1d:99:2a:f9:37:b7:0f:85:51:94:e2:5d:e9:fb:38:
dd:d4:11:1c:d8:eb:54:81:c8:31:c9:45:46:b5:03:cd:51:39:
06:02:54:c0:ba:0d:11:86:e0:0b:e5:cf:14:89:df:f6:33:3f:
32:d8:1f:b9:60:79:83:a6:77:ed:93:9a:32:b1:56:59:a9:95:
31:65:cb:7d:42:ec:fd:0e:4b:b0:eb:6f:ce:c8:d8:f8:81:1c:
26:8c:fb:96:ad:44:ba:99:a8:c3:1a:69:04:01:c8:d1:2a:d4:
3f:24:28:a2:5f:75:6b:d5:19:b0:5a:f9:78:a8:95:49:ed:11:
a0:79:c2:39:64:61:4d:20:ea:3d:60:54:77:6a:f1:b6:df:76:
48:2e:5d:89:2c:3b:38:8f:d4:81:e9:96:21:c8:0c:1e:38:a6:
49:f0:a3:95:69:fb:6f:d1:42:b9:92:8a:e6:c1:89:db:03:e2:
cd:23:89:47:e7:d8:93:d8:a6:e4:c8:d7:55:04:0a:02:09:f6:
bc:25:ee:55:64:5d:24:21:5e:4f:8a:99:3c:09:99:62:20:6f:
40:cf:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:24 2026 by rpki-client