Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: d6UMLCUQEjWzvYdTFAIoE/gKbLLrK9mANidAZ31CeiM=
Subject key identifier: 55:F7:B0:1A:38:DC:EE:C1:31:52:7A:A8:F1:3A:16:D3:DE:0A:30:F8
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019FA9E2CFC55796482ABD77F38474DB75D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 17BC
Signing time: Tue 28 Jul 2026 18:00:41 +0000
Manifest this update: Tue 28 Jul 2026 18:00:41 +0000
Manifest next update: Wed 29 Jul 2026 18:00:41 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: VE4alZAzMupr1Y/BMtMVTdCPlWd8XT4u97id5NAt5/8=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:cf:c5:57:96:48:2a:bd:77:f3:84:74:db:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jul 28 18:00:41 2026 GMT
Not After : Jul 29 18:00:41 2026 GMT
Subject: CN=55f7b01a38dceec131527aa8f13a16d3de0a30f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:ed:f3:7f:e3:df:18:93:51:aa:c6:86:c0:
cc:f4:f2:18:a2:d6:28:53:b2:d3:b1:4f:a3:20:05:
01:8f:84:fb:da:25:c0:b1:42:83:8c:d2:69:33:12:
31:2a:3d:cb:ee:3f:ab:57:f2:97:08:f8:a4:73:bb:
41:85:78:8a:c2:14:f9:1a:91:76:01:1d:64:75:ca:
ff:ab:7f:02:ff:cf:31:d9:29:2f:b0:55:93:69:83:
75:c3:ed:76:c4:0e:3c:53:04:af:24:a9:6d:fa:ac:
f7:b1:b7:35:6d:bc:e4:24:e0:68:7d:c8:4d:7b:27:
0a:71:c5:7e:b7:2a:99:6d:68:07:76:a1:b6:62:64:
30:c3:17:ec:95:db:85:2e:04:f8:78:3c:15:ec:b2:
2f:a1:a6:28:22:8d:46:d4:50:16:7f:a4:f2:ad:1d:
af:42:a8:09:95:f0:40:ba:e9:b1:cc:6a:e5:41:93:
17:3a:cc:dc:c1:44:9a:d2:dc:cd:8f:07:f6:24:06:
3b:29:d7:75:8b:96:2e:77:2a:09:ff:2e:7c:0b:ba:
6b:aa:08:37:96:cf:de:29:66:4e:7c:50:da:6c:7f:
f6:f5:b1:93:31:e8:18:6e:6c:25:fe:ca:39:60:cb:
c4:17:22:5b:e4:14:60:5c:ab:e3:62:61:7b:e4:28:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:B0:1A:38:DC:EE:C1:31:52:7A:A8:F1:3A:16:D3:DE:0A:30:F8
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:17:41:71:d0:50:69:82:9c:34:39:a9:e5:a0:c1:95:21:
73:8f:a6:c1:2f:54:5b:7d:d5:0c:a6:f4:7d:d2:83:23:b7:0b:
cd:78:bb:1f:dc:8b:dd:a5:43:40:10:e1:ab:a6:b2:b1:8a:7c:
45:52:19:23:9a:e0:cc:54:79:da:04:98:f1:b7:07:f7:36:91:
e6:7a:f1:51:a2:22:e1:2b:79:53:48:00:fc:8b:e6:0b:8d:07:
46:59:4a:cb:b3:4c:d2:ae:69:60:73:07:7d:b8:be:f6:85:29:
fb:eb:ff:3d:22:de:ce:74:7c:a7:69:0f:4d:62:28:40:07:91:
f0:cd:33:21:51:d8:19:a4:39:1f:ab:42:81:d2:22:a3:fe:4b:
a6:61:8d:dd:d0:ce:d8:5e:be:10:2c:04:69:a2:c9:8f:9d:1f:
fe:22:52:ce:3a:61:a5:24:32:5b:cf:52:85:ab:e4:f0:58:53:
d0:f4:6a:a7:ee:54:4f:90:78:b7:0f:4d:93:66:7d:53:76:43:
59:fb:f9:d7:5f:3c:cf:fe:1e:ac:32:c3:9b:f2:28:43:bf:42:
29:b2:dc:24:52:17:83:59:00:1c:40:4e:28:e3:c1:9c:01:10:
99:04:2d:40:fc:73:5b:7c:a4:3b:f5:d1:33:93:13:25:d5:47:
71:fd:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:53 2026 by rpki-client