Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: FWJpR0tg4/TKoSVHKRy+qJcQwLbC22ef9b95dw0IyEk=
Subject key identifier: 92:21:06:23:7A:97:AA:59:6A:FE:19:1A:25:D6:4E:EF:DE:FA:D6:30
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019FA86274560163C71F814B22B0B47419E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 11:00:52 +0000
Manifest this update: Tue 28 Jul 2026 11:00:52 +0000
Manifest next update: Wed 29 Jul 2026 11:00:52 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: 3UKj1JGWDouMCCxhPmP9WRxu7g/Q3gXbDHLiF0tC3GQ=)
2: R-TR2lMlqd-ajoqANh8z83K14Gg.roa (hash: LL4D//R1+/zSqsNzLuVii4RDHBXLV7iA5YOQo+LHbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:74:56:01:63:c7:1f:81:4b:22:b0:b4:74:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Jul 28 11:00:52 2026 GMT
Not After : Jul 29 11:00:52 2026 GMT
Subject: CN=922106237a97aa596afe191a25d64eefdefad630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:08:18:9c:3d:06:26:d3:39:b9:45:b9:a1:
1a:32:ae:39:43:c5:be:94:e7:7a:78:17:63:06:c0:
d6:bc:fa:21:70:9a:90:c5:18:9a:7d:04:45:c3:4e:
1a:5d:1a:39:8d:33:50:57:03:9e:dc:02:75:e6:e3:
a6:26:a4:92:fd:eb:1c:9a:8c:11:ac:6d:55:ee:9e:
2c:37:dd:56:15:ae:65:6f:70:9a:fe:97:4e:b6:e8:
fb:a9:00:51:86:91:7a:74:f0:85:e9:64:25:85:5c:
30:33:bc:49:e5:b8:4a:30:c8:ce:9c:4a:e0:da:c5:
12:c6:7d:89:b6:ff:ab:74:7f:fc:e5:ba:63:cb:e8:
63:22:57:cf:e9:67:38:9e:cf:ac:37:33:f3:91:c6:
57:d2:52:21:94:28:f5:be:25:db:53:f4:4d:07:4a:
3a:f5:9d:ce:a4:9c:b1:c2:12:6d:be:9f:aa:02:d5:
21:1e:fe:3a:e3:b4:fb:67:13:ca:02:f3:ac:71:06:
71:4b:70:ea:9a:f2:d1:cf:ab:88:f1:f7:5f:4f:de:
3a:35:7e:66:b2:af:19:48:f6:c5:c1:81:6a:73:b1:
40:02:fc:6f:4d:85:d1:5c:c6:b2:4b:71:ed:2e:e8:
e9:a5:27:a1:7e:00:3a:92:dd:2c:c7:1b:05:57:74:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:06:23:7A:97:AA:59:6A:FE:19:1A:25:D6:4E:EF:DE:FA:D6:30
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:bb:7f:0b:e0:29:77:36:d8:44:4c:fd:c3:60:a0:80:a5:
ac:9c:97:b5:b8:b2:2c:b9:e9:5a:33:dc:32:22:07:3e:78:c3:
94:b1:be:f5:d8:49:02:b3:ec:0d:a5:35:1b:ef:b2:a2:8b:2a:
11:a2:3a:35:7c:b5:4a:13:7f:ac:8d:26:99:7f:eb:c3:69:ac:
8a:ba:e9:1d:f6:06:86:ef:62:1a:32:10:21:23:f7:dd:ce:b2:
e2:8e:d2:4b:30:0f:2d:23:c2:d6:61:aa:f8:32:32:f9:67:11:
d6:ba:16:36:42:2d:68:b3:1e:c9:81:53:1a:56:46:1e:72:0f:
6c:51:40:24:60:51:d8:1a:8e:ea:63:d7:e7:d5:d6:c8:e4:8a:
1e:8f:62:5d:7a:ef:33:3d:07:03:d0:ab:f3:a7:03:07:66:ee:
f2:97:c8:43:4a:18:63:2a:bb:d2:60:6e:1f:61:85:2a:cd:c3:
c6:1b:fb:fd:f3:da:15:34:0c:37:ea:59:c7:3b:d3:77:5f:91:
7d:09:86:c4:75:28:3a:8b:9e:9b:f0:bc:4b:42:6a:8f:fa:ef:
4a:75:bb:00:d1:63:fa:26:d6:0a:c4:bc:fc:2a:b2:41:17:8c:
3a:a4:9c:d5:a6:36:1d:82:cb:1a:35:aa:d6:ac:ac:b1:f2:17:
1d:36:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:59 2026 by rpki-client