Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: vkkneE8qBq/Vykc7gB95YTIO+2jRInZuk7Aec92Gtpo=
Subject key identifier: 0A:D3:89:51:4D:AB:5F:A9:41:96:59:3A:F3:0D:F3:DB:4A:D0:42:C4
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019FAA196F948599491D66A20E11C021117D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 0867
Signing time: Tue 28 Jul 2026 19:00:21 +0000
Manifest this update: Tue 28 Jul 2026 19:00:21 +0000
Manifest next update: Wed 29 Jul 2026 19:00:21 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: 533904uN+ynPcXHjL2nokRaAgxXg9pbWlXADVMLKU4U=)
2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:6f:94:85:99:49:1d:66:a2:0e:11:c0:21:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Jul 28 19:00:21 2026 GMT
Not After : Jul 29 19:00:21 2026 GMT
Subject: CN=0ad389514dab5fa94196593af30df3db4ad042c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:9b:b0:56:ed:f6:fa:40:19:2f:72:11:80:
17:f4:60:dc:ac:f0:05:c6:ce:ab:2a:63:b0:e7:be:
ad:82:42:a6:2f:b6:a2:d7:df:7e:eb:93:39:f1:bc:
dd:95:68:ac:c5:1b:14:ae:70:9d:1d:96:0e:47:6c:
09:69:82:0a:ba:00:6b:1a:d6:e7:c0:2b:c7:67:5c:
ae:ce:71:af:97:10:58:12:51:79:28:1f:e9:b4:35:
e6:87:f7:5b:ad:8b:86:e9:74:6f:9d:0c:af:09:af:
cc:2a:2d:60:4b:1d:91:fa:a6:1e:9d:ff:3b:1b:c0:
af:b5:a6:79:1c:6e:c1:bb:a3:8d:a8:9b:7a:6c:e9:
d2:4b:2a:7f:0f:57:52:97:53:13:61:b9:31:4c:22:
3b:8d:87:aa:70:22:61:14:cf:3d:7c:a3:c8:f2:ff:
94:2d:aa:0c:15:b6:e2:5f:ed:34:1c:e0:1d:15:6d:
b7:8d:14:98:04:68:91:a7:15:8c:57:75:9c:0e:51:
3c:d1:83:fa:01:bc:95:d5:65:df:13:71:3a:5d:29:
1e:4e:d4:24:e8:a3:88:5c:e9:10:08:fc:43:6e:b0:
11:03:6b:71:78:dd:99:47:2b:0c:d1:a4:f9:18:fb:
a7:78:dd:37:43:55:52:89:ab:e3:13:96:e7:0c:44:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:89:51:4D:AB:5F:A9:41:96:59:3A:F3:0D:F3:DB:4A:D0:42:C4
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:e7:4e:08:a2:6c:14:8f:8e:2c:2d:37:47:9d:c7:0e:6f:
ad:e1:44:81:ed:77:79:4a:13:cb:5d:93:1f:7b:04:1b:10:03:
67:f7:f6:d2:62:c3:c2:d9:c3:1d:0c:2e:79:f2:29:ea:6c:2a:
ad:1e:24:b7:85:84:91:34:40:f1:64:61:dd:74:35:12:2c:f7:
04:34:20:c3:72:fe:f9:f6:b9:bd:ee:44:0d:67:ed:7b:e4:57:
a1:9e:96:8d:f4:c0:b0:0c:aa:1e:8c:0d:c0:77:22:a9:97:5f:
ff:6e:f4:d3:ae:d5:ba:1f:a3:99:e5:69:08:22:8d:ee:ba:ec:
7d:59:4c:50:9f:7e:25:d4:8b:2a:2d:78:25:ee:97:55:c3:d3:
ca:e1:b4:46:18:70:62:d0:ee:7d:e1:d4:a7:28:a4:9f:37:ac:
d7:05:3e:a4:58:f6:97:65:c5:03:6e:b9:9d:38:e9:96:f9:8d:
36:03:7d:62:18:43:fd:7a:6f:38:d7:81:c6:33:c2:80:8f:5d:
0e:c7:8a:b6:0a:d4:5c:3e:d2:5f:c3:f3:71:04:2e:7a:6f:6c:
78:dc:2e:91:82:8d:3b:e1:76:cf:c6:a2:fc:89:58:98:af:c0:
33:f5:9a:f3:46:c1:db:6e:25:ea:37:db:b0:fe:92:55:8f:34:
6a:36:36:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:15 2026 by rpki-client