Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: Ec/C+wEeN812iZ08cKaZI8v9tuAt/ksz6w6wfVnTtNA=
Subject key identifier: F4:DA:B2:BC:CC:EB:52:07:E6:DB:3A:75:B2:32:A9:EE:3B:69:7F:F7
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019FA9ABD0D4F4CF4AF5F721A3CFED5F0DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 17DA
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: e6kdG0mSfV+d0UdNRcuM02BP/si9NJQiQbwilqezkrU=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d0:d4:f4:cf:4a:f5:f7:21:a3:cf:ed:5f:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=f4dab2bccceb5207e6db3a75b232a9ee3b697ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:11:2b:37:22:0b:83:81:74:7d:36:45:67:
27:de:96:8e:ba:c4:82:38:2c:ea:9c:16:d2:90:fb:
ca:82:4c:e9:fc:25:13:38:05:f5:fc:2b:10:71:6e:
52:40:60:34:17:3f:0d:9d:48:c3:71:86:61:30:10:
f8:1a:7e:66:1a:c7:08:26:e7:4d:8d:4a:8c:3e:ce:
ff:6f:4a:fd:b5:01:c8:b5:47:2f:e1:57:c4:ed:e3:
a2:7f:92:17:81:70:5f:7d:25:fb:bc:99:7a:d8:e0:
cc:e2:a3:d2:2e:fe:86:37:72:d1:2c:94:fa:f8:b4:
64:46:a5:7f:97:42:c4:d3:43:e1:be:e8:04:e6:d5:
23:a3:db:67:e6:71:3b:b7:73:aa:22:be:60:de:95:
f4:0c:0e:76:ea:88:8f:e4:ae:e0:47:48:67:df:3b:
00:05:a2:40:c1:8e:57:11:11:05:7d:ec:9a:0a:a6:
37:f8:25:23:67:34:51:a6:a5:c2:0d:47:ae:72:39:
12:58:48:12:04:4a:7a:35:0e:8e:bc:d1:eb:94:c8:
c7:db:f1:63:97:28:c9:e0:80:6d:30:06:47:30:fa:
2b:93:f0:a9:56:49:c7:34:ce:19:c6:b1:69:4e:83:
6f:ab:78:1d:b4:b2:73:93:45:dc:2e:40:7b:2c:6f:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:B2:BC:CC:EB:52:07:E6:DB:3A:75:B2:32:A9:EE:3B:69:7F:F7
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:20:db:0b:86:7f:a7:7b:77:68:7b:62:1a:77:0b:d0:4c:
46:de:6a:e9:cb:9b:be:cc:ed:ec:ce:f5:71:97:f8:ab:f3:77:
5d:40:39:a9:8f:e7:44:23:ca:cf:90:97:59:ab:50:d4:cb:67:
3b:cc:9b:bd:cd:9e:0f:1d:a6:90:2b:61:49:44:82:34:ae:c9:
9f:9a:20:22:47:a8:c1:a1:7d:15:18:ad:87:74:96:09:8d:81:
7c:c1:dc:e1:e8:01:0f:54:43:9a:1b:fc:ec:db:be:bf:04:a6:
02:d0:a3:2d:cf:b1:1f:e9:47:ce:a9:be:5e:62:cd:a1:13:9b:
ca:f4:0c:01:23:b8:65:87:04:1e:ba:df:bf:08:95:5b:79:da:
d3:90:26:37:6f:bc:6c:4c:be:8d:2f:48:37:a2:6c:14:92:67:
78:73:5e:c9:a1:de:42:4b:00:2c:98:f5:e9:00:af:54:af:d3:
b1:3e:04:99:47:d2:4f:9d:4a:fa:65:83:a0:21:7f:13:79:f1:
65:18:61:94:43:e0:82:c4:f4:5e:cb:99:27:be:3e:10:f8:83:
e8:99:80:2d:d0:08:53:2f:a0:7b:f2:1c:ae:4d:98:45:02:80:
80:c7:2e:f5:ab:bd:63:6a:c2:70:9a:0a:a6:d1:12:56:85:ad:
bc:17:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:16 2026 by rpki-client