Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: MpzpF8PJrQDqDLBGmB4zuCTUitTN8iHAYs/Xc1XvbrI=
Subject key identifier: 27:39:AE:7D:9C:B0:03:3A:EF:9F:56:DA:61:12:58:27:1E:D5:49:D8
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019FAA1A2A38BD084F22816C342BA23170D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 19:01:09 +0000
Manifest this update: Tue 28 Jul 2026 19:01:09 +0000
Manifest next update: Wed 29 Jul 2026 19:01:09 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: brjlcxpHtWrGSUxxg4GZTKfHGv2s+bKPcfGGPQEPHUA=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2a:38:bd:08:4f:22:81:6c:34:2b:a2:31:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jul 28 19:01:09 2026 GMT
Not After : Jul 29 19:01:09 2026 GMT
Subject: CN=2739ae7d9cb0033aef9f56da611258271ed549d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:11:72:df:21:3c:19:9e:e4:c5:36:24:4d:
ea:a3:cb:d6:14:83:ad:ab:ae:e4:45:6b:00:f0:7d:
04:7d:76:de:cc:93:c1:bb:ba:65:23:5d:59:5a:25:
0c:2f:5d:03:37:76:bf:eb:1d:05:d7:62:84:15:c5:
3b:84:52:a0:dd:6c:a8:68:23:57:79:d1:27:e4:c7:
c7:3a:5f:0c:8c:89:50:55:4b:30:83:d8:a2:bf:3c:
11:c0:8e:bf:d8:0c:28:d3:05:23:f0:4a:7d:e0:2e:
77:94:80:28:ee:d6:a2:10:02:ea:4f:28:b6:af:e6:
75:0e:c5:ea:ab:c7:40:c5:37:d3:fd:44:ed:68:8b:
b3:cd:45:33:ec:e3:0f:3e:b5:8b:8a:12:96:cf:ec:
6e:2d:b2:61:d8:75:a0:6b:98:97:44:f0:03:a4:27:
10:19:98:ef:e4:37:a5:62:e9:05:d6:b5:57:e9:0d:
0e:08:d0:7a:ff:72:32:dc:ad:ab:bb:2d:8c:6f:46:
57:4f:e9:02:de:8d:79:47:22:31:44:17:5a:f0:19:
4b:5f:dd:62:af:46:a0:f0:98:07:9f:be:ac:2b:7e:
7f:37:f5:22:ea:67:0c:11:b2:e6:62:2c:5e:cd:ff:
4a:65:a9:b0:37:ff:e6:e0:dd:71:20:b4:96:3c:b5:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:AE:7D:9C:B0:03:3A:EF:9F:56:DA:61:12:58:27:1E:D5:49:D8
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:93:a0:ae:f3:05:f3:0a:56:53:82:2b:fe:f9:ca:3a:cc:21:
51:0b:27:e2:2d:03:75:fe:7c:f6:61:f4:60:2e:ac:5e:80:28:
84:44:a0:6f:75:81:be:f2:4f:fb:55:2e:7b:6b:1f:db:e9:59:
e7:71:42:a5:3f:3f:7e:e3:5d:b3:ac:c7:87:dd:29:45:eb:24:
bd:98:b3:2e:8c:8c:c0:f9:d6:e4:b6:d9:f5:1d:c3:e8:b7:21:
7b:83:c9:3b:7f:c0:37:3b:26:7d:78:9b:61:a2:d9:b3:e4:a3:
3a:8b:f4:50:9b:a3:f0:c6:43:78:3e:2a:e9:d0:cc:95:f5:f4:
f1:a0:c0:dc:b7:ac:b1:c5:2e:e0:45:1d:3c:ab:0c:d0:84:ec:
87:aa:a9:dc:29:64:09:f3:1c:33:87:45:f5:a1:33:23:71:29:
57:80:9a:f6:f6:87:e5:dd:20:0e:62:8c:e6:3c:b5:ea:b1:f8:
47:92:5a:81:88:13:6c:de:19:1e:97:4e:6a:7f:fa:65:ba:9c:
3a:7d:9d:a0:ae:5d:ac:42:8f:0c:c4:e4:58:47:3b:7b:14:85:
a9:f9:99:c7:05:99:8e:45:59:2d:57:4e:1a:03:0a:b2:f1:b2:
fa:f9:f7:56:d3:f6:12:fc:89:5e:4e:cc:ec:7a:cb:95:e6:a2:
ed:36:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:02 2026 by rpki-client