Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: 1cwjOHg6URh0Ot2USxXI+YbN9B5GLJcyh7oDLmUYf5Q=
Subject key identifier: 0E:F1:EC:F8:E6:54:C3:7B:CD:89:BD:94:C3:81:28:DB:87:F5:FB:3F
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019FA8D09B84663A8F1884A091C0C7AAE46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 1776
Signing time: Tue 28 Jul 2026 13:01:11 +0000
Manifest this update: Tue 28 Jul 2026 13:01:11 +0000
Manifest next update: Wed 29 Jul 2026 13:01:11 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: yoI11aHP/OBAx7eJ4MhjFQXCG+ZPwCeNa18omBiKbUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:9b:84:66:3a:8f:18:84:a0:91:c0:c7:aa:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Jul 28 13:01:11 2026 GMT
Not After : Jul 29 13:01:11 2026 GMT
Subject: CN=0ef1ecf8e654c37bcd89bd94c38128db87f5fb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:4d:fc:dc:e2:34:3b:4e:50:d5:52:4c:4a:
38:50:5c:56:71:a8:2c:be:41:0a:a8:82:f8:b9:8f:
7b:d7:d7:4d:13:db:6f:69:ab:fb:f2:c8:df:e5:b3:
f4:f3:90:c3:2d:48:bc:71:04:55:b0:ba:68:56:fe:
81:d9:66:20:62:e0:00:77:e5:12:a9:be:28:f2:4c:
04:5d:b0:10:42:06:0d:3c:af:17:df:3b:a6:60:00:
18:10:f5:5f:f8:00:f8:ff:82:46:6f:4e:82:06:77:
b6:2f:c2:97:f0:f2:48:97:42:14:4d:43:61:29:d3:
5a:85:1e:d5:30:09:61:81:ce:04:53:d9:40:e7:f2:
51:e5:71:36:e1:88:33:56:76:e2:a7:34:fa:65:8d:
aa:c3:03:20:86:82:db:b4:d5:cb:61:a6:1b:17:55:
7a:82:2c:1f:b2:e0:71:b2:0a:d0:11:1d:1b:80:00:
ee:da:5b:0b:65:9d:b0:71:26:cf:c2:01:61:57:2f:
5b:6d:1b:c6:41:90:28:b7:7d:ef:07:26:62:15:77:
73:c6:66:71:38:22:18:4c:ec:6f:ef:4d:7c:07:28:
a1:17:4d:a8:74:9e:76:fe:2c:14:6b:15:e8:9c:f9:
90:c1:6d:f9:7b:9b:45:c9:85:71:3a:9f:0e:b6:5f:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:EC:F8:E6:54:C3:7B:CD:89:BD:94:C3:81:28:DB:87:F5:FB:3F
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:9d:b3:c8:37:11:50:74:aa:9b:30:04:fd:b6:34:a5:91:
fe:2e:95:68:42:f6:ec:cd:e4:be:ff:c9:d3:6b:df:d7:4c:40:
8c:cc:75:e9:ae:2c:45:d3:31:60:8d:d5:bf:2c:ae:9c:75:ed:
6b:13:8f:1a:15:ee:be:c2:84:04:b1:f5:84:9e:5f:b1:35:e8:
ce:15:bf:eb:6a:c4:82:9f:a1:52:50:05:5f:aa:f9:8f:1e:27:
f4:4b:05:8a:7c:d7:c0:79:fd:6f:9f:04:ca:7d:73:0c:73:e4:
62:af:89:0a:9e:a1:cd:e0:80:05:e0:8c:8f:a4:17:d2:6c:40:
c8:0a:e4:25:18:64:4d:ba:99:38:f6:4b:57:2b:cd:99:d8:27:
c4:79:53:20:b5:5a:90:78:84:49:38:8b:27:45:26:dc:08:85:
dc:42:e8:5b:25:61:b9:80:6e:ad:a3:b0:a5:c0:c3:25:53:32:
72:d6:d5:01:6c:88:df:be:f0:f0:d9:f4:5b:f7:7a:e5:b6:08:
bf:eb:e9:92:5c:f2:87:ee:7a:db:70:33:24:a1:2e:70:c9:ff:
cf:d0:26:2a:20:b3:90:41:f8:df:44:b5:c0:75:48:99:f2:6a:
c0:43:40:ea:bc:be:c8:55:16:a2:fb:3f:f6:08:b3:aa:55:7c:
bd:04:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:09 2026 by rpki-client