Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: NPK74+Bpnxv0V8fT0dFtlZfsK/pV8NLoMtQh9lLDee0=
Subject key identifier: 8C:EB:8A:9B:2C:83:7B:B3:67:B9:47:C0:3B:A6:91:8E:69:B7:04:29
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 019FA9ABD1476CE457F4CA64301B68FF493B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 130A
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: 60/vNp9MYgw3TCniRTMIGyg7HAImrTEjbxcMn8FB+sE=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d1:47:6c:e4:57:f4:ca:64:30:1b:68:ff:49:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=8ceb8a9b2c837bb367b947c03ba6918e69b70429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:9a:7d:ca:f7:c9:e8:84:03:c3:32:27:14:
cd:43:76:39:f5:ac:c6:8f:de:05:d1:a9:9c:bf:f4:
6f:d2:a5:6a:a5:a6:44:81:0b:16:34:6d:a4:ab:3d:
1d:c3:ed:fb:aa:f1:af:e5:c1:c2:27:58:9f:96:b9:
fc:72:80:27:7e:35:77:a2:41:23:94:69:5c:0e:1f:
cb:91:94:cd:b5:9c:67:a5:f4:7b:eb:e9:4a:c7:81:
08:c8:62:0a:b8:9e:12:20:cd:ef:8b:2f:44:43:a2:
22:6f:63:9b:b6:5a:e9:42:4a:90:c7:67:24:80:70:
35:4c:ff:10:4b:64:f4:de:3f:bb:f0:d1:55:97:91:
82:b3:76:66:74:da:3b:a0:75:20:9f:19:33:58:cb:
f0:18:28:1b:64:78:a1:71:bc:7f:0e:4e:52:7c:b4:
00:f1:07:e5:19:b0:c9:1e:6d:2d:5a:10:e2:13:bd:
9c:de:6b:36:be:b3:25:b1:e1:25:65:f3:41:7d:52:
ca:e8:01:68:a6:4a:44:6b:08:be:e6:78:8b:1b:60:
0e:fd:f5:2d:04:50:70:34:d3:b1:8f:a7:fa:97:09:
e4:80:64:d9:dc:77:7a:5c:ab:13:40:6b:5c:6a:28:
47:2b:57:1a:a3:32:bf:6b:3d:fa:10:f2:da:aa:4b:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:8A:9B:2C:83:7B:B3:67:B9:47:C0:3B:A6:91:8E:69:B7:04:29
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:47:f4:6b:e7:01:03:03:dc:1e:33:bf:f0:d2:03:b2:ee:1f:
d6:59:84:12:8a:38:dc:79:41:c5:41:43:f9:7f:24:3d:08:0c:
52:51:ed:ef:64:d9:87:4d:63:90:4c:5e:6d:46:82:bb:71:2b:
e7:63:e2:2e:8a:cf:db:e8:50:89:24:09:64:0e:65:3f:5f:9e:
e2:af:ca:fa:2f:0c:d4:7f:d0:38:47:f2:05:29:2f:c5:b2:1e:
be:f8:a9:40:40:20:e4:97:c7:ec:59:70:51:25:2e:c1:dc:ee:
1e:66:3c:74:cc:5a:55:48:fc:88:2b:36:c6:55:7f:72:f9:e2:
04:dd:1d:ad:c3:8c:c0:05:3e:e4:91:5f:cd:3b:42:db:8d:67:
9c:73:db:36:e3:e6:92:b2:cd:76:26:ce:3e:18:07:93:9d:40:
12:19:b7:47:ad:99:45:59:64:cf:a5:d3:87:67:57:9e:67:ea:
74:6e:e0:b9:83:ef:5d:22:3e:f5:cc:e8:de:a0:95:76:dc:9d:
2d:0b:8e:80:69:51:e8:34:52:48:05:08:b5:9e:da:ce:8b:94:
de:42:21:1a:9b:0b:41:e5:c1:c6:f8:89:9a:c1:71:fe:c6:7a:
94:8e:61:1b:3a:c3:33:3b:64:5a:6a:df:39:92:a2:a6:5b:3d:
a0:14:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:30 2026 by rpki-client