Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: Ihca5GJIQs55Rvp89Hlo0CQnOqrgpaF9eMM8HD3ja6M=
Subject key identifier: 08:5A:8D:2A:45:90:9F:C0:B9:CD:B2:0C:B2:64:8C:0B:3E:36:87:97
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019FA9AC477D52BD9D952F2F50091B98CE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 19F3
Signing time: Tue 28 Jul 2026 17:01:07 +0000
Manifest this update: Tue 28 Jul 2026 17:01:07 +0000
Manifest next update: Wed 29 Jul 2026 17:01:07 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: NfALRaSihzGk9JE33RCbpoKNHbQL+3+8kJyh4ndwVnk=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:47:7d:52:bd:9d:95:2f:2f:50:09:1b:98:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jul 28 17:01:07 2026 GMT
Not After : Jul 29 17:01:07 2026 GMT
Subject: CN=085a8d2a45909fc0b9cdb20cb2648c0b3e368797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:91:24:4c:77:63:94:2d:0f:69:15:8a:99:
65:30:09:cb:36:ee:ec:e1:12:78:58:3b:47:f9:20:
ba:29:59:f7:fd:dc:a7:7a:ac:a5:a7:92:7b:40:d4:
c6:d1:f7:4e:b1:bf:57:c0:da:a4:27:60:8b:bd:6e:
53:b4:66:3d:75:07:77:3c:e7:3c:1a:ea:7c:6a:4d:
1d:44:d3:22:97:ef:06:cd:0e:11:00:7c:5d:46:94:
ac:04:bf:01:1b:d6:fa:9e:3a:bc:f1:cb:ab:a2:18:
a3:f3:52:3d:4d:fb:0e:c9:90:77:05:bb:59:68:5c:
df:65:2f:18:86:e8:aa:b3:f7:f4:80:b2:3a:d6:70:
97:63:17:c7:3d:9e:b2:08:46:11:74:ce:ba:13:fe:
43:81:10:55:a5:d2:c2:57:97:ff:a1:f8:8c:1f:e9:
36:ed:af:0a:ca:2d:46:09:92:3b:ee:36:4b:75:13:
f1:30:93:bb:1c:ca:ca:c4:5d:50:4f:1f:ad:f0:4e:
bd:29:4d:9f:81:e8:4f:5c:e1:ab:f4:c9:ef:44:28:
2e:6a:93:37:10:5c:d0:8f:e8:ec:83:81:ad:82:91:
7e:35:24:cd:83:7c:8e:30:04:c2:16:df:61:f8:52:
b5:67:af:c0:9e:51:a6:da:6c:51:f8:9a:d7:1a:12:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:8D:2A:45:90:9F:C0:B9:CD:B2:0C:B2:64:8C:0B:3E:36:87:97
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:98:cc:89:1a:69:64:69:54:1e:ba:70:51:64:e4:37:be:3d:
97:fc:ea:0f:e9:d1:e8:4b:d5:58:bd:c0:87:22:32:61:0d:05:
ec:13:68:6c:0d:e0:8d:8c:39:c5:13:f2:10:f0:c3:2f:22:99:
2e:dd:21:0b:a1:f6:cc:ad:5a:9a:a3:ae:1a:d4:a8:a6:38:34:
a4:94:5f:d9:dd:73:d7:ea:7b:e7:bf:fb:6c:d8:04:16:0c:0b:
31:63:97:5f:88:7c:8a:6b:71:25:cf:98:a3:1d:0f:20:ba:94:
2b:fe:83:d8:ff:7e:5e:54:32:16:bb:46:4a:f6:0a:49:cd:17:
78:d3:d2:cc:4c:90:ea:2a:2d:09:6d:0c:cf:c7:2d:e6:7f:68:
70:fe:ef:11:50:50:c3:12:66:41:2a:01:a8:ff:8b:95:78:1c:
df:fa:a9:9d:a3:33:3f:e1:ea:5e:cb:bf:f4:c5:56:75:47:eb:
1d:73:e4:e4:31:ca:80:86:54:cf:86:4d:25:0c:e0:66:c3:24:
18:c3:58:22:a3:7a:2c:81:fe:b9:30:ec:ba:42:5e:ca:c6:4f:
7a:41:b4:57:eb:cc:1c:b0:07:07:8e:a8:60:d8:60:6c:3b:70:
30:6d:b2:87:88:c5:15:bc:b5:a2:4b:33:a2:2b:2d:54:46:8e:
b2:9c:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:54 2026 by rpki-client