Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: LdL0G7fifp7RChZ9KIJEms+PvRlhCdrtTarO91L8Dys=
Subject key identifier: 49:20:71:11:22:C3:17:8C:A6:F7:49:85:71:95:EE:CF:90:6E:AF:99
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 019FA974BAE288A2B841646613716BA676CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 13CA
Signing time: Tue 28 Jul 2026 16:00:27 +0000
Manifest this update: Tue 28 Jul 2026 16:00:27 +0000
Manifest next update: Wed 29 Jul 2026 16:00:27 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: PIq2ygzoukPrm+Bxdu4p5my+IklEHyE4OwUEfOXs5Rc=)
2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ba:e2:88:a2:b8:41:64:66:13:71:6b:a6:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Jul 28 16:00:27 2026 GMT
Not After : Jul 29 16:00:27 2026 GMT
Subject: CN=4920711122c3178ca6f749857195eecf906eaf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:42:7e:7d:71:40:f5:3c:07:71:73:33:31:
62:68:56:7a:b2:a7:7c:46:ec:22:4a:b0:43:3d:d3:
70:d4:de:15:37:f3:0a:8a:b7:64:02:35:7b:09:fb:
46:02:9c:89:d5:f5:09:b2:60:f0:d4:cf:c7:6a:e7:
11:8c:e4:6c:b8:c8:05:c5:c7:aa:e8:49:73:82:43:
cd:33:76:4c:de:15:e6:43:21:9e:e0:01:85:f3:e4:
3b:4e:4f:80:1f:c9:dc:c9:e4:01:32:20:4d:00:52:
24:5b:dc:c6:8c:ee:25:20:83:25:90:87:a2:f9:32:
89:e7:83:06:65:43:5c:f1:31:40:c0:aa:5c:03:10:
9f:ec:49:f5:af:94:1b:a6:b5:c7:96:7a:4f:b6:5a:
63:f7:37:30:d9:8e:45:33:bb:fa:33:eb:73:1a:11:
0e:dd:ed:b8:3b:ef:5f:8c:1b:6e:00:1a:e4:ea:e7:
3c:c8:51:73:9b:af:ed:f7:81:22:ab:d8:d2:90:08:
a7:8a:d6:55:57:7c:1c:9a:75:1f:b5:a9:92:8d:4b:
c6:8f:92:1e:49:48:88:01:22:ff:02:d5:55:3f:8b:
8a:e2:31:df:ea:51:80:72:10:2d:13:49:b4:e7:38:
d6:d3:ed:89:13:28:93:37:39:cb:3c:2f:1a:0b:09:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:71:11:22:C3:17:8C:A6:F7:49:85:71:95:EE:CF:90:6E:AF:99
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:e0:a1:18:0c:0a:e4:21:1a:81:cc:4e:83:fb:a5:30:b5:
00:c2:d4:ea:9b:26:c8:b5:c2:d1:22:f5:71:0d:75:df:45:77:
8a:94:3a:eb:df:ec:d4:fe:26:e9:fd:28:7a:64:1d:3b:10:4f:
aa:48:ca:bc:d0:f7:5a:f7:3c:de:7a:40:70:06:f3:2b:76:42:
d0:d4:ca:c6:fb:a8:49:7e:58:b2:bb:33:48:b0:4d:2c:9e:d9:
f4:b0:59:43:e8:b0:08:d7:b3:00:2e:28:0c:a7:e6:ff:61:70:
80:d8:9c:11:1c:9c:1a:a9:a9:65:22:7d:00:d3:7d:f0:8e:17:
22:ec:a3:29:30:a5:84:8a:ce:3b:d5:cc:7a:58:22:61:16:ca:
9c:54:a4:3c:c7:8e:2c:ea:70:99:c0:16:83:25:59:51:74:db:
4c:f8:b6:06:f0:97:a7:fc:cc:a1:83:39:a2:01:66:94:99:f8:
71:34:35:33:7d:48:76:71:db:e5:4d:53:a4:d0:38:fa:6f:fb:
46:07:6f:ee:21:ec:75:eb:61:38:9d:82:67:f3:11:ee:9c:69:
3a:06:6d:06:52:71:8c:37:96:f7:f5:ce:2c:d2:9b:2a:17:e7:
02:6d:99:8c:0c:9f:0e:f0:88:12:b8:c1:17:11:06:88:a0:e7:
c9:05:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:26 2026 by rpki-client