Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: 5gdersPrrzpCfDtTSqIS50x88pH7YKKs66Q/CO8ium8=
Subject key identifier: 98:7E:38:07:76:43:CA:D4:BC:5E:5F:A0:7F:06:0D:48:7A:E7:E0:BC
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019FA9E2A519A0FF4D4B8CBC20C5C653A80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 18:00:30 +0000
Manifest this update: Tue 28 Jul 2026 18:00:30 +0000
Manifest next update: Wed 29 Jul 2026 18:00:30 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: tP3iQ7XyIil8to1Kb7LVK5bDCQO7Kb/R328u9sxbwAg=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a5:19:a0:ff:4d:4b:8c:bc:20:c5:c6:53:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Jul 28 18:00:30 2026 GMT
Not After : Jul 29 18:00:30 2026 GMT
Subject: CN=987e38077643cad4bc5e5fa07f060d487ae7e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:16:b2:0e:33:02:10:d2:fe:19:c9:90:05:
e6:13:4a:c5:36:66:a3:a9:68:02:87:50:fa:66:96:
77:95:23:2d:7d:88:36:9e:28:79:1d:19:cc:f3:ac:
8f:c1:26:d7:b5:4b:d1:51:75:b5:5f:fb:4f:ef:03:
2e:05:15:51:5a:4c:ae:67:b4:d6:e6:75:73:84:df:
5b:12:b7:6e:a6:b6:c0:99:6f:34:b1:aa:39:ba:d3:
c7:d8:36:15:11:48:06:38:08:98:f7:ed:89:3b:5c:
a2:0e:2f:d3:ac:4e:2f:1e:74:a9:e3:0b:7f:55:18:
24:2e:16:1f:ca:16:5b:c5:58:39:0a:fe:6b:73:ca:
b4:86:5f:a5:81:a0:f9:af:84:e4:c5:30:4e:20:7a:
77:52:b8:ff:0c:ed:a4:0c:9b:6c:f4:3e:e9:d9:80:
42:3f:e5:34:07:19:77:2a:37:83:29:57:41:e1:41:
25:50:2f:c4:3e:e6:43:f7:f1:4a:71:91:6e:4e:4b:
87:0a:6d:66:77:35:e6:9d:32:7c:a6:31:87:a6:6d:
cd:d5:a6:c5:b3:f1:8d:48:e2:77:d0:75:13:81:43:
35:a8:ad:05:b1:c1:2b:e2:2d:a8:64:0e:cf:c1:3f:
31:04:d6:93:e0:a3:46:5d:50:f4:32:ca:2f:d6:cd:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:38:07:76:43:CA:D4:BC:5E:5F:A0:7F:06:0D:48:7A:E7:E0:BC
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2e:fe:0d:bd:78:b4:6e:89:50:b0:80:ff:23:f3:2d:7f:a3:
19:61:91:a1:03:71:ba:97:7a:b3:f6:fd:2b:a1:c7:6a:49:c0:
15:66:95:ef:3f:c1:d8:ef:a1:bc:0d:8f:ae:c0:8e:d3:bd:24:
3a:e0:22:99:a4:a4:92:cc:e7:a2:df:21:af:dd:fb:9b:f5:d6:
91:12:52:37:28:86:16:f5:a3:08:96:3a:c3:b3:75:97:19:61:
40:7d:d8:33:79:1b:88:8c:68:32:b7:4b:a2:d7:27:17:62:68:
13:aa:1c:f1:97:b7:19:9e:df:52:45:bb:43:e4:db:07:f6:52:
cf:c5:ec:4d:04:ba:79:48:52:f3:88:21:ac:d7:35:84:26:40:
74:19:7b:b7:69:b8:d1:78:f5:1e:28:6f:b1:93:d3:24:2d:0f:
36:8d:63:a3:d2:37:e9:d6:89:9b:93:57:4e:d8:2c:e2:06:a0:
54:45:20:ad:26:7c:e8:88:94:4b:37:49:cc:3d:e1:93:12:2b:
59:ac:ef:4d:1a:ea:61:1a:3d:62:b9:28:98:c7:a4:6a:88:02:
41:0b:16:24:1a:d0:90:a8:20:0a:6b:a3:a7:e3:37:f1:a2:cb:
28:cd:23:c1:70:ff:4f:f0:cb:b5:5c:a4:86:da:61:5f:fb:57:
ed:96:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:57 2026 by rpki-client