Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: AvZ5hTzUO2KB/C+YIisPHlX3FBhpFF8f6dxRl2jdLQo=
Subject key identifier: A3:CA:97:5B:2E:D4:DA:3A:5D:94:48:5D:31:9B:C6:A5:1E:30:D2:07
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019FA8D06C80D45B4485560EA43498A9312C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0B11
Signing time: Tue 28 Jul 2026 13:00:59 +0000
Manifest this update: Tue 28 Jul 2026 13:00:59 +0000
Manifest next update: Wed 29 Jul 2026 13:00:59 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: OnZDblJEmwKGk1xix8bybwZUieOr8cvCLhB7RiG7QUg=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:6c:80:d4:5b:44:85:56:0e:a4:34:98:a9:31:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Jul 28 13:00:59 2026 GMT
Not After : Jul 29 13:00:59 2026 GMT
Subject: CN=a3ca975b2ed4da3a5d94485d319bc6a51e30d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:af:72:c6:a2:4a:1d:76:7d:5e:64:6e:76:
fa:ff:7b:c3:7b:3f:c0:09:40:99:9d:1c:80:80:e8:
8c:00:4e:91:4a:7c:e9:e5:aa:64:85:24:a3:e0:18:
c9:54:6f:12:dc:78:18:43:51:08:42:47:4f:83:51:
51:02:0c:6b:f8:a7:91:ad:d9:a8:24:39:30:74:87:
02:ab:de:ca:2d:e5:43:06:89:16:59:56:a8:44:56:
44:a1:31:13:31:ff:d8:6e:71:8f:63:6e:f8:de:16:
ef:43:a0:50:f7:a3:63:93:35:f6:38:76:c7:44:76:
7b:5c:73:e9:35:66:44:a5:63:11:fa:16:7b:81:56:
45:69:6e:f9:7c:62:f0:26:c3:b9:05:6d:42:6a:0f:
f1:75:82:a3:42:c0:b6:f8:28:bb:35:4b:9f:5c:e5:
e3:10:e8:43:cc:53:2b:3c:9b:49:b6:c7:dc:e5:8e:
ff:e3:73:56:97:f3:2b:b9:74:c3:82:8e:a1:fe:89:
97:70:71:9b:27:4f:6d:ca:f1:6c:30:a7:4d:7f:94:
e4:03:e5:57:50:e4:25:62:96:03:c5:f1:11:8b:53:
e3:67:34:76:16:ac:e7:6c:bc:8d:34:12:e6:41:59:
28:43:02:75:bf:f7:57:7a:9e:7b:a4:92:1f:8e:fa:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:97:5B:2E:D4:DA:3A:5D:94:48:5D:31:9B:C6:A5:1E:30:D2:07
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d7:42:88:28:86:b5:45:fb:45:28:e7:66:43:49:9e:22:1b:
8d:7a:02:03:12:d6:50:fd:d5:b7:0f:55:45:da:fd:88:a4:28:
ce:7e:1b:d2:26:4b:45:8d:d5:e2:45:bf:43:92:55:14:fb:ff:
6a:09:e7:dc:58:92:aa:89:61:d9:d5:fe:91:9a:f7:87:f9:25:
b0:5a:4b:ee:c4:af:f3:7d:3b:16:dd:9f:bd:13:2d:1d:3c:39:
d0:d4:37:ee:a1:e2:9d:38:06:35:75:8f:29:38:c6:81:29:28:
65:a2:15:47:44:d1:66:2b:fb:01:14:29:85:03:b1:f3:a8:8b:
05:de:6c:29:61:a8:b0:9b:41:9f:78:98:b8:b1:4a:da:56:d6:
80:66:f1:6f:d7:d5:3f:6c:b8:40:c1:ec:fa:e7:f1:07:bf:96:
e0:51:06:63:86:66:18:1a:fd:23:63:80:73:e1:8e:83:75:da:
47:9f:46:6e:c5:6b:c5:a8:f0:47:ed:75:23:eb:37:22:17:48:
d2:29:25:6c:5c:41:2c:66:8b:6b:8a:e4:6f:ef:d3:01:7b:97:
e7:32:52:8b:ce:2c:51:66:b5:62:9d:33:e9:e1:7a:80:76:ed:
9e:42:16:fd:9a:17:b3:39:ec:d0:af:6a:96:4d:c5:4c:1a:e2:
29:8b:2e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0GyA1FtEhVYOpDSYqTEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx
YzhkMzQwHhcNMjYwNzI4MTMwMDU5WhcNMjYwNzI5MTMwMDU5WjAzMTEwLwYDVQQD
EyhhM2NhOTc1YjJlZDRkYTNhNWQ5NDQ4NWQzMTliYzZhNTFlMzBkMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma6vcsaiSh12fV5kbnb6/3vDez/A
CUCZnRyAgOiMAE6RSnzp5apkhSSj4BjJVG8S3HgYQ1EIQkdPg1FRAgxr+KeRrdmo
JDkwdIcCq97KLeVDBokWWVaoRFZEoTETMf/YbnGPY2743hbvQ6BQ96NjkzX2OHbH
RHZ7XHPpNWZEpWMR+hZ7gVZFaW75fGLwJsO5BW1Cag/xdYKjQsC2+Ci7NUufXOXj
EOhDzFMrPJtJtsfc5Y7/43NWl/MruXTDgo6h/omXcHGbJ09tyvFsMKdNf5TkA+VX
UOQlYpYDxfERi1PjZzR2FqznbLyNNBLmQVkoQwJ1v/dXep57pJIfjvrojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPKl1su1No6XZRIXTGbxqUeMNIHMB8GA1UdIwQY
MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt
YTdlYjM4ZDQ4Yzc4LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4
LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNdCiCiG
tUX7RSjnZkNJniIbjXoCAxLWUP3Vtw9VRdr9iKQozn4b0iZLRY3V4kW/Q5JVFPv/
agnn3FiSqolh2dX+kZr3h/klsFpL7sSv8307Ft2fvRMtHTw50NQ37qHinTgGNXWP
KTjGgSkoZaIVR0TRZiv7ARQphQOx86iLBd5sKWGosJtBn3iYuLFK2lbWgGbxb9fV
P2y4QMHs+ufxB7+W4FEGY4ZmGBr9I2OAc+GOg3XaR59GbsVrxajwR+11I+s3IhdI
0iklbFxBLGaLa4rkb+/TAXuX5zJSi84sUWa1Yp0z6eF6gHbtnkIW/ZoXszns0K9q
lk3FTBriKYsuOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:03 2026 by rpki-client