Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
File: n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft (raw, json)
Hash identifier: 8OQ7C8FC/37UoGm2harYEHNJ2SjJBQnAog+IBecR9sY=
Subject key identifier: 68:6A:D3:9D:E6:A8:C6:A5:B7:35:78:E8:9F:89:F1:82:AB:53:39:AA
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Certificate issuer: /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial: 019FAA884AC9474BC2928B52A101F1DD062E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:26 +0000
Manifest this update: Tue 28 Jul 2026 21:01:26 +0000
Manifest next update: Wed 29 Jul 2026 21:01:26 +0000
Files and hashes: 1: Ts__go_5kraAxg_xlkVG1jwWF4s.roa (hash: SzNoYDdJ9H0cE2yBXjlxrXi58YXnSypRhyX9GFV3rA4=)
2: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (hash: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=)
3: n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl (hash: Ys6JM5ticDUezw/224pBNhi2RXxvy68QzHWi28GdPkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4a:c9:47:4b:c2:92:8b:52:a1:01:f1:dd:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
Validity
Not Before: Jul 28 21:01:26 2026 GMT
Not After : Jul 29 21:01:26 2026 GMT
Subject: CN=686ad39de6a8c6a5b73578e89f89f182ab5339aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:7b:47:08:71:01:a7:f1:4b:58:f9:cf:09:
e9:3c:fe:e7:2f:0c:a3:7c:a7:28:e9:a5:e4:6f:8d:
c2:63:35:77:11:d9:98:e0:37:21:d1:21:31:05:3b:
ec:9d:93:16:65:39:b2:0c:46:87:76:c9:b4:5c:9a:
14:38:35:76:f8:46:84:d7:ef:51:4a:f0:60:a6:57:
dd:77:5a:66:9c:1b:15:18:22:bb:b7:79:6a:d9:bf:
37:8d:f8:c2:f2:d2:c0:bf:50:c0:45:be:65:1e:61:
fd:1e:4b:b7:96:6a:a7:45:b9:9a:ef:4b:5e:4e:a7:
29:ff:ff:6a:54:26:ac:83:b9:ff:81:6c:68:d5:01:
f2:62:a5:30:9d:71:8f:97:9f:f7:be:64:d8:d7:24:
4a:05:fd:fe:24:e0:74:44:c3:1f:b2:d3:5f:a6:cd:
bb:61:37:d6:8d:d9:5f:d1:e0:70:93:56:0c:0b:17:
56:39:1d:78:13:32:11:84:7a:40:99:99:f8:a7:b9:
f5:91:68:c5:4e:f7:38:1c:50:ed:56:a6:c2:31:c0:
3a:b1:34:b9:d3:55:56:14:66:47:b1:3b:16:e6:02:
5e:af:65:51:33:2f:29:2b:f0:f1:fb:05:e0:cd:fd:
6f:5f:45:62:b5:7e:d3:67:92:69:8f:9e:91:a4:ad:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:D3:9D:E6:A8:C6:A5:B7:35:78:E8:9F:89:F1:82:AB:53:39:AA
X509v3 Authority Key Identifier:
keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:49:da:99:6d:33:44:f9:74:ba:05:5a:9b:ba:7d:67:ee:9b:
8b:3a:3e:aa:9c:10:97:2e:fe:b4:b9:f9:7f:bc:38:91:e1:28:
a1:65:74:35:8d:d3:96:fb:4b:16:dc:d1:29:6e:3b:83:72:0e:
c5:b4:28:4a:ea:e2:0c:4f:1a:4a:45:3f:9e:a0:d5:14:5b:ca:
de:fc:94:e3:a4:58:a9:0c:47:3d:fe:1f:50:aa:60:b6:0a:36:
0e:41:35:a4:6d:0a:40:1e:5b:f7:ae:51:c5:5f:49:a6:db:7a:
39:39:2f:32:a0:74:da:4e:d1:e2:d0:4d:39:a6:ec:84:ad:0e:
00:85:6c:4f:37:b5:d4:b3:75:b5:2e:8a:76:0e:c0:88:99:b9:
65:71:85:c6:7e:99:b8:62:36:47:d4:9d:76:8f:f5:e8:4c:a0:
e0:07:83:ad:3c:36:e3:bb:32:3c:09:70:d7:06:d2:fb:19:05:
83:56:51:77:80:9a:78:d1:86:94:89:7a:3f:21:f6:32:d6:10:
63:f5:af:08:60:b0:18:40:66:b4:65:d4:f2:03:c3:d4:57:e8:
3c:35:2b:b0:d1:9d:06:8a:8b:09:80:55:89:65:c1:15:e1:06:
70:77:2d:1d:41:e2:32:39:17:da:a0:3e:5f:a1:5d:cd:48:ca:
79:a1:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:35:46 2026 by rpki-client