Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier: +V5Qc5v5hAy4OjnQE4vUFNGMv5qey7u0mAfsd7TNGzg=
Subject key identifier: 8A:99:0A:27:B2:56:DA:95:A6:62:97:4C:D0:D5:9E:05:02:46:CE:01
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 019FA93DD2D7C8686A162EE4138E8C48697B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:00:28 +0000
Manifest this update: Tue 28 Jul 2026 15:00:28 +0000
Manifest next update: Wed 29 Jul 2026 15:00:28 +0000
Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: pD2EpXIxe+QYaso9ZywOY7xiPoK1prg13BdUSzCWz9c=)
2: k3rcd9_oiuyqOXe7tvQN4s3OkzY.roa (hash: 8Ucz5n58a7R/iiCnVXCx8gUj5T7bha8LHYWdK87ZAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d2:d7:c8:68:6a:16:2e:e4:13:8e:8c:48:69:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Jul 28 15:00:28 2026 GMT
Not After : Jul 29 15:00:28 2026 GMT
Subject: CN=8a990a27b256da95a662974cd0d59e050246ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:cf:d9:f5:f1:ab:28:d7:18:14:11:47:a7:
ec:b9:cb:25:d3:f6:9f:a3:7c:52:65:fe:1b:f7:30:
1c:54:a6:0a:77:9f:ff:08:77:6c:c3:cf:11:b2:a9:
f8:0a:ee:a8:de:25:63:da:35:ff:e6:b1:86:60:b3:
33:21:f0:97:54:74:d8:d7:df:63:ef:42:06:a4:db:
35:6c:ae:fd:85:3e:d6:17:d1:78:5e:1c:96:e0:b2:
3c:6c:ae:77:bd:78:d0:8b:36:4b:49:17:36:be:7e:
5c:ce:14:29:9e:c7:2a:49:73:8c:0b:ef:ab:f7:df:
27:fa:a0:fc:42:41:fa:b2:40:ae:34:d0:9f:ad:2f:
c1:1c:92:6a:82:29:2d:74:78:39:0a:bc:ee:7c:47:
40:bc:40:31:8f:81:6b:bc:1e:45:9f:e0:ee:72:f6:
45:2b:46:1c:8d:99:52:c6:cb:da:f8:26:0a:7f:58:
f3:b8:6a:37:f7:9a:57:c3:ae:aa:29:d1:ba:d0:d1:
3b:ce:d9:97:fb:05:42:4f:9e:29:14:86:38:0e:18:
ed:70:be:15:a0:01:4b:14:03:65:5b:af:32:2f:ef:
97:0d:50:f1:2f:58:cd:75:55:51:ca:c8:a6:57:ea:
f4:4c:67:fa:2d:ac:5d:33:3c:b3:39:6c:0c:67:2a:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:0A:27:B2:56:DA:95:A6:62:97:4C:D0:D5:9E:05:02:46:CE:01
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7b:ba:8a:88:31:d7:a1:2a:74:e2:90:c7:a0:b1:eb:f8:e7:
48:1e:cf:9c:98:1d:62:23:1d:98:a6:ea:c7:e8:f6:bf:90:da:
c6:7e:c1:86:ab:0e:19:37:c0:88:6b:d7:5c:c1:47:7b:70:21:
14:60:4c:49:3a:00:1d:f4:c2:f7:bc:3f:69:08:c8:27:57:60:
66:00:45:52:af:49:33:85:23:d7:b0:b5:99:23:77:b2:1c:76:
ac:78:1c:99:e4:fd:0d:9c:2d:65:35:26:2b:7b:c9:f3:16:4c:
46:f8:70:19:96:ca:a1:7d:95:51:dd:9d:69:2b:63:8f:d7:4e:
3e:fa:e7:3c:9a:d7:ed:8a:53:46:4b:0f:5f:f1:a8:22:72:8f:
cf:6a:23:d5:76:a0:dd:89:f2:87:b2:8d:69:14:41:5c:5a:24:
4e:5e:cb:82:c3:bc:35:44:66:3a:f2:1c:71:e5:1b:dd:c6:5a:
72:42:7e:da:4c:e7:81:a0:ca:b3:49:77:16:b4:89:13:8e:3b:
10:f2:1d:16:b2:01:be:16:58:29:1f:a5:e5:8d:38:59:16:ec:
c7:90:ba:b1:82:00:2e:50:f0:e2:00:28:45:7d:2d:e1:31:57:
60:93:a6:d9:af:6d:7f:27:e7:d8:d8:8e:62:d8:c8:d1:5d:85:
03:2b:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:48 2026 by rpki-client