Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: M3diIQRjMFljFOXizfAXGhl1gukyQO+S+3Wx2tqK5XI=
Subject key identifier: 81:41:A9:5B:EC:51:78:76:28:A0:E3:FD:41:BC:18:4F:E5:04:47:AC
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019FAC3EF6E3E46E833F9E576A790A8B7C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1460
Signing time: Wed 29 Jul 2026 05:00:35 +0000
Manifest this update: Wed 29 Jul 2026 05:00:35 +0000
Manifest next update: Thu 30 Jul 2026 05:00:35 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: EJcTrmUsGdlUoNSH4uKqFjX/C0LvRaBiinjxoXTcSx8=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f6:e3:e4:6e:83:3f:9e:57:6a:79:0a:8b:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jul 29 05:00:35 2026 GMT
Not After : Jul 30 05:00:35 2026 GMT
Subject: CN=8141a95bec51787628a0e3fd41bc184fe50447ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:2a:c7:82:29:9b:04:47:37:27:2f:20:46:
0e:90:6a:6a:8b:9d:cd:41:b0:85:7a:2e:67:01:fe:
03:61:58:80:d0:a3:e6:d6:be:f5:90:08:52:23:98:
9e:7c:63:ba:e9:a8:05:05:4d:99:e3:47:56:6e:34:
25:da:4a:d8:53:83:5b:03:67:0a:e2:7f:b0:9e:58:
c5:93:06:c9:1a:f3:15:a3:29:f4:0f:27:9c:a0:9f:
8d:d1:b0:8c:86:59:20:29:f7:e0:64:76:c2:f2:07:
5b:4f:25:65:09:bc:18:ed:04:d1:00:a3:9b:ce:73:
a5:e7:4c:24:93:61:3a:92:a3:18:61:a0:30:93:92:
51:5e:9b:5c:d6:de:4e:8c:a9:01:8b:d6:e9:e0:cf:
df:7a:43:c0:38:de:e9:45:66:8d:b8:63:86:e3:c5:
98:ab:1c:9c:3e:1f:5b:ba:a9:6a:50:42:c3:7e:9d:
d8:3f:0a:60:f6:0a:12:09:2a:2b:93:7b:1c:14:e2:
3e:8f:78:15:cc:36:f7:65:3d:2b:a4:64:82:b0:25:
00:78:e5:60:63:90:5f:0a:7b:80:aa:05:9f:ac:3d:
e5:69:6a:d3:d8:45:ac:83:fc:bb:f0:8e:c4:8a:14:
48:1d:bc:0e:02:e8:d5:2f:02:9e:57:4a:e3:7c:04:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:A9:5B:EC:51:78:76:28:A0:E3:FD:41:BC:18:4F:E5:04:47:AC
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:c5:b0:a3:73:89:b1:f5:3c:43:d7:ce:bd:09:48:79:29:
23:8d:37:15:58:d3:a3:ca:26:02:d3:6a:0c:6d:3c:c4:90:ba:
44:1d:0a:5b:83:bc:91:d7:57:c8:df:6e:10:88:c0:1c:88:39:
d9:78:0f:6b:1e:9b:4a:df:5f:3d:31:ee:25:1f:25:cc:cb:a4:
20:fb:51:32:9d:fd:b0:6c:cd:eb:50:c4:5e:cf:07:1e:7e:e9:
e9:51:6c:3a:26:52:23:52:51:b5:91:20:a8:ba:a0:47:bc:90:
72:9e:00:4b:10:dd:45:4b:27:8f:f2:55:83:ca:0d:95:f3:98:
29:15:38:69:67:f3:18:e7:43:7f:c6:ad:5a:a7:7f:fe:a7:7d:
b6:86:b1:e8:07:89:70:eb:0e:4c:11:12:f4:fb:a8:5f:74:03:
27:18:5a:4c:71:a4:83:02:0e:9a:98:7f:15:17:32:59:ce:1b:
4c:ce:b8:8a:fd:d9:03:d9:df:ff:1b:ba:9f:11:45:a7:15:94:
f1:f2:51:88:9c:31:34:3c:91:85:83:90:b4:8d:f1:5f:db:50:
e1:50:1f:11:18:5e:71:7d:eb:8b:b5:f4:84:5b:4d:b7:14:4c:
7d:50:57:14:e7:00:fb:ed:2f:2e:56:a3:ad:78:6a:6f:9c:67:
17:8f:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:28 2026 by rpki-client