Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: TmwSa4qwR15gImFBtFDQ+zVz3wWYAZIBjveJkXd5uAY=
Subject key identifier: 0F:1D:22:08:F8:C4:0D:6A:4F:B2:AF:62:0E:42:65:81:E0:D4:E9:64
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019FAABEBC1B3EA1245E1C2863E1A36B1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0C46
Signing time: Tue 28 Jul 2026 22:00:54 +0000
Manifest this update: Tue 28 Jul 2026 22:00:54 +0000
Manifest next update: Wed 29 Jul 2026 22:00:54 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: htFTxvl2JYCVaIILt7pdXONubKxXEsd2KUsEO+WMPQI=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:bc:1b:3e:a1:24:5e:1c:28:63:e1:a3:6b:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jul 28 22:00:54 2026 GMT
Not After : Jul 29 22:00:54 2026 GMT
Subject: CN=0f1d2208f8c40d6a4fb2af620e426581e0d4e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:94:1a:9b:27:e5:42:9e:3c:41:e0:16:37:
ff:ea:b1:3c:5c:1b:1f:17:ab:dd:9b:b1:18:1c:43:
81:d3:1a:2f:f9:29:3d:0e:09:0e:5b:66:44:f3:41:
11:8a:08:55:25:19:10:9c:e2:f9:95:d1:0f:8e:1a:
56:65:60:50:ba:7b:71:1a:45:78:e4:47:f2:21:a0:
5b:82:a8:6a:05:3a:61:ba:2c:b8:1c:c8:23:37:a0:
ad:48:f0:b5:10:f8:a9:17:bf:b3:01:f0:f7:70:72:
5a:db:1d:6d:42:b0:41:5b:ad:c7:33:a9:2b:19:02:
ca:e6:c4:0e:e3:aa:89:a3:2a:ec:9a:9b:f0:47:59:
8d:f3:82:40:1a:d3:0d:cf:5d:f3:02:a5:f6:71:99:
1e:70:ce:f0:47:af:bf:fa:65:9f:d6:4c:3d:33:f8:
00:90:cd:92:55:08:e7:2e:ee:d0:6f:ac:62:ba:39:
52:60:43:80:02:41:7a:7b:d5:74:fe:29:33:8c:b1:
3d:5a:36:c2:19:18:26:f6:87:5c:7b:f9:b1:7e:2a:
4d:9c:64:e4:f8:1a:38:05:8d:ab:d8:9e:e8:db:8a:
95:17:32:2f:b2:0b:a7:15:b3:33:ad:8f:32:0e:43:
1d:5f:97:2e:7d:6b:b2:4f:30:db:32:aa:23:6a:d6:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:22:08:F8:C4:0D:6A:4F:B2:AF:62:0E:42:65:81:E0:D4:E9:64
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:f2:18:6e:96:d3:44:40:8e:2c:ef:28:ad:0c:09:f3:e4:
07:07:f6:92:b0:7a:67:29:95:7e:74:41:e9:d4:4a:3f:56:ea:
32:46:3f:df:82:29:aa:98:a8:e4:d8:3c:64:ef:e0:dc:19:f3:
f1:9c:4b:b8:fa:05:43:49:10:48:5b:d5:3a:c2:6f:62:38:e4:
db:5b:02:a0:15:2a:ba:dd:f2:6b:cb:b5:1f:e9:96:19:b2:de:
68:15:b4:ba:aa:50:b4:48:86:73:b1:6e:c3:31:e9:4f:7c:1c:
48:79:e4:42:38:3f:9c:c4:97:34:3b:36:a7:95:3b:fe:65:81:
e6:83:1e:d6:9b:5e:e4:4e:d4:0b:6b:dd:f6:ad:56:43:9d:16:
e6:20:c5:9d:27:31:12:2b:89:d9:45:49:1e:9c:6b:ad:34:5e:
e8:f4:ed:59:53:da:71:a5:d3:cd:ba:22:05:2a:ec:c2:0e:5f:
42:e2:a4:32:be:40:3c:1f:93:1a:6d:24:4a:8d:c9:0a:f5:14:
45:82:47:f6:c1:d5:ec:f7:61:34:1d:41:f4:dc:f3:26:a7:13:
6a:ed:50:c4:cb:5c:07:2b:13:e6:d6:49:90:b1:06:29:c1:18:
20:d1:83:5a:98:7f:18:f4:6a:7b:57:17:ef:9a:7e:5c:69:97:
91:62:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:16 2026 by rpki-client