Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: y8gPPD3X2dn25Q0geUEIOC5yX3y+10UZ9maO5Uco0I4=
Subject key identifier: D9:39:1A:F7:A6:3B:2E:E0:24:F6:21:73:94:98:93:45:7E:76:2F:9C
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019FA93E8CC920CFB80F8EA212DF9DCFA7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 11A0
Signing time: Tue 28 Jul 2026 15:01:16 +0000
Manifest this update: Tue 28 Jul 2026 15:01:16 +0000
Manifest next update: Wed 29 Jul 2026 15:01:16 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: ArLXTkMD55V56q4IqfJuAEdO55HhsRYZGiiOfMQBPb8=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:8c:c9:20:cf:b8:0f:8e:a2:12:df:9d:cf:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jul 28 15:01:16 2026 GMT
Not After : Jul 29 15:01:16 2026 GMT
Subject: CN=d9391af7a63b2ee024f62173949893457e762f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:e7:29:28:10:55:12:fd:fb:23:d6:07:a8:
c5:97:48:9c:29:bc:95:fc:ed:c4:86:7e:88:4f:f3:
a9:bd:b4:64:e0:97:b2:89:dd:a5:32:32:59:41:55:
e5:5f:83:42:47:f9:c5:88:6f:50:2c:14:0c:47:51:
eb:87:12:d0:ab:52:ae:50:d9:0e:2e:17:22:b5:f0:
b6:f4:6a:9f:59:d7:6d:13:a2:82:c6:ec:33:5a:54:
69:f1:a0:ff:d0:1f:c1:1b:4d:83:a8:5b:df:0e:3b:
0d:bc:ba:10:9a:04:3a:bc:10:44:a6:3c:3e:d6:eb:
0f:ea:5d:e3:99:7c:71:c5:a5:a4:69:40:15:6c:97:
2b:3e:4b:57:84:b2:f4:21:50:9d:fa:45:36:e5:8c:
bd:a7:f2:61:2d:8a:82:52:dc:10:01:53:7e:44:e7:
98:9c:3b:ed:0f:02:97:ed:6e:73:4d:db:bc:35:ca:
74:13:da:1d:c9:a7:aa:b5:61:a4:7d:33:9f:03:78:
2d:9d:09:d7:8f:e8:7f:9b:e9:d7:72:a4:fc:87:18:
73:5c:2e:1a:8d:86:44:76:6c:ef:25:1c:c8:04:eb:
e4:2c:38:c8:f4:2e:7a:a9:0c:63:68:24:3a:6d:cf:
76:a8:9f:5d:72:e7:10:07:88:f5:4e:be:25:c7:67:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:1A:F7:A6:3B:2E:E0:24:F6:21:73:94:98:93:45:7E:76:2F:9C
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:21:4d:a8:a6:4c:bb:48:de:c1:dc:81:30:dd:47:88:fd:3a:
aa:26:d1:c2:c7:bb:2f:24:f9:25:7f:05:62:51:bf:0b:ac:82:
7e:f3:77:9f:0f:e5:d1:06:da:41:b2:22:9f:07:51:0a:e2:14:
db:8b:29:c1:29:c8:50:da:4f:24:7f:10:1d:0e:73:a1:87:cc:
23:db:39:e3:c2:04:e7:e0:6e:6f:fa:7e:9e:6b:75:55:88:97:
6a:2b:ca:7c:6b:b4:50:2f:aa:78:23:5a:d5:d4:ad:8d:6b:a6:
91:f2:0c:de:b9:88:a9:33:8a:09:08:dc:aa:b0:bd:56:95:aa:
6c:59:72:16:f8:fb:ff:c6:11:19:0b:fb:0a:ba:b4:47:ca:19:
a1:4c:0a:1d:0a:7d:0e:6a:0a:af:d3:84:aa:f8:d0:bc:64:11:
11:37:ec:98:f6:58:f3:25:e0:38:8b:a2:be:53:9b:3b:d5:31:
9e:1c:9e:fc:6a:a3:fc:e7:c5:25:07:cd:8e:b3:ba:c7:64:16:
af:52:5a:2c:0b:e5:3f:83:e3:ba:b3:3f:8d:16:0d:87:aa:b8:
bb:5d:2e:06:be:48:91:c3:4c:26:97:cb:97:e8:f3:00:42:ec:
d5:86:0f:1a:ee:a5:19:d6:1d:d0:d6:24:14:86:08:7f:bd:0a:
19:d5:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:43 2026 by rpki-client