Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: vOG9+kJPsFX9XRIvzRKccEdO8douzoP84Gk3WfO8Y0c=
Subject key identifier: E5:88:BA:13:61:FC:56:58:3E:C4:D4:5B:17:B3:57:C0:A7:00:16:63
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019FA907932A1C368D2AC2BDB3D8DDECA31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 133D
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: zzyt8Z/hz942ffWpGOUuvCGjWn3hkv3L8a4WHC0Sv1o=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:93:2a:1c:36:8d:2a:c2:bd:b3:d8:dd:ec:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=e588ba1361fc56583ec4d45b17b357c0a7001663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:5a:56:7a:1c:bc:aa:ea:81:74:ce:a2:5e:
02:9a:3e:cb:e3:7b:f2:45:74:5c:51:89:b4:f1:9d:
dc:cd:31:c8:5b:e5:99:1d:d7:f7:f5:70:fd:1c:24:
a0:4b:fb:c6:a2:a0:54:8e:4a:0a:7c:d5:5e:ea:40:
34:24:e1:43:8e:b6:83:59:46:ec:fa:02:b0:cb:60:
63:ef:1e:b9:10:32:54:94:11:81:35:17:36:9c:ef:
65:69:ff:cb:5a:c4:83:68:c9:06:11:47:9b:4c:82:
88:b5:3f:4b:d7:e8:f1:67:68:f6:53:77:29:4f:90:
0a:eb:95:d5:eb:9c:57:3d:80:f3:ce:11:95:98:08:
53:a4:23:7c:92:50:b7:4f:b2:e8:c9:e8:20:ea:73:
5a:82:74:23:51:52:bc:98:2a:33:a8:81:fd:ba:eb:
5c:67:3b:b8:2d:26:26:ba:59:eb:8a:d9:2f:86:dd:
78:1d:44:a4:02:f4:e9:c4:3a:e2:43:62:49:9b:5e:
c1:89:b0:9a:a9:97:d0:56:4c:a6:5f:04:fa:b1:11:
46:db:b3:88:e2:46:d9:4c:1c:22:16:84:54:73:49:
22:ae:0b:ad:d4:66:90:62:ec:ba:19:60:84:c2:5d:
89:a8:c0:b7:a2:41:a2:3b:a0:53:36:99:cc:cd:9d:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:BA:13:61:FC:56:58:3E:C4:D4:5B:17:B3:57:C0:A7:00:16:63
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:7e:14:20:b2:b1:41:53:0a:db:b1:ad:8d:98:8a:d4:4a:
37:02:db:5c:f5:5b:0f:e3:18:b5:58:69:b5:66:9f:ad:24:c8:
8c:d3:b0:19:44:a5:2f:e2:59:c2:8e:19:5e:70:66:94:52:cc:
bb:c2:f7:80:6d:f5:bb:db:d8:b3:29:71:a6:f9:d1:6b:7f:06:
7d:dc:a9:95:fd:36:67:94:bf:75:f4:43:e6:ac:65:fd:f3:97:
29:66:1c:d1:39:7f:ea:77:09:23:75:7a:53:e6:01:1c:d4:92:
9e:50:d5:7f:12:8e:e0:19:a0:d2:fc:e0:25:3b:23:57:ca:a0:
de:a3:f7:f9:77:28:84:90:5e:55:df:bb:4b:31:c7:0d:23:1c:
31:8e:f2:4b:d4:08:0d:00:93:32:de:58:b1:fe:9c:d3:0f:b4:
7c:47:eb:39:bf:9d:bc:1f:33:2a:fc:06:6d:93:a2:7e:5e:52:
28:fa:06:a7:be:48:17:c6:84:58:27:7b:e7:3b:94:a6:93:9d:
9b:e9:07:5a:3d:5a:02:cd:d3:83:c5:2b:61:c4:54:29:10:90:
73:36:7c:3b:05:a6:d7:cd:30:11:f7:d4:45:28:00:bd:5a:f4:
b1:d4:5d:61:1e:78:32:e5:e3:7a:f2:3e:cc:f6:75:ec:aa:9a:
3b:8e:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:36 2026 by rpki-client