Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: MMAIVGotHQX3cqErtz8qtmWLPe251ATAJsTQFQHpxWM=
Subject key identifier: 28:12:36:00:2D:D5:72:C5:9E:55:2D:64:6F:0B:DD:87:2B:75:F8:EB
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 019FA786ACE8FEF1CC76D86932FA7425D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 01DA
Signing time: Tue 28 Jul 2026 07:00:48 +0000
Manifest this update: Tue 28 Jul 2026 07:00:48 +0000
Manifest next update: Wed 29 Jul 2026 07:00:48 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: Egez+LIwz9echyRfn00WB3ncXwFtyZkbQzeRd4QLsP0=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (hash: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:ac:e8:fe:f1:cc:76:d8:69:32:fa:74:25:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Jul 28 07:00:48 2026 GMT
Not After : Jul 29 07:00:48 2026 GMT
Subject: CN=281236002dd572c59e552d646f0bdd872b75f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:4c:4d:05:09:03:83:cb:8f:c9:82:6c:2c:
9c:ba:9c:75:95:d7:dd:45:04:c4:5d:54:81:93:ab:
da:6a:8f:1c:21:30:d4:5c:5a:ed:30:47:6e:3a:da:
ab:e8:a9:7b:4d:c4:b7:1e:b1:36:09:85:a6:08:92:
fd:b8:4c:c8:da:7c:56:6b:4f:93:4a:62:33:81:e9:
0f:52:65:20:fe:87:da:a0:58:e5:c0:31:6d:62:2b:
8d:97:c6:71:74:a8:16:43:95:be:e8:ae:33:56:79:
e1:7a:f7:7a:e1:9c:9c:5d:58:7e:1f:ce:81:cb:57:
e8:a7:21:2a:ce:e5:cf:e2:59:0c:99:4d:57:8f:cd:
4b:aa:ad:36:85:d9:cd:d7:59:76:41:6c:78:d8:4a:
26:14:58:e0:17:6c:ff:54:51:bd:8b:cb:4c:35:2f:
f8:4d:80:14:88:18:7a:34:9e:8f:0d:bf:3c:a0:38:
76:38:09:de:36:2f:d6:9a:ce:62:ed:b0:2f:4a:bf:
64:bc:1f:fe:ac:ad:50:a1:da:24:db:48:5f:40:e2:
11:4b:3e:33:28:b9:36:8f:6d:42:90:a7:25:c3:b7:
99:eb:79:a8:9c:8b:65:78:b2:93:15:cd:5a:9a:03:
6f:b7:a3:12:3a:56:84:8c:3c:9b:04:76:00:be:43:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:36:00:2D:D5:72:C5:9E:55:2D:64:6F:0B:DD:87:2B:75:F8:EB
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:c1:56:0e:86:91:f1:47:bf:bd:aa:03:f6:af:46:e3:23:
fc:c9:4d:3e:b7:27:08:65:eb:d9:e5:5d:29:4c:ca:c4:01:8b:
bc:fd:1b:33:37:90:5f:64:2d:97:6d:ae:b6:45:2b:9b:b8:b7:
40:44:ce:97:42:29:44:71:cf:27:cc:e1:01:1c:ed:35:cf:e3:
98:ed:28:e4:6e:bd:6d:d0:a9:ff:f6:42:86:2a:ae:05:73:84:
5e:12:64:47:87:39:ec:e5:7c:8c:7c:31:e8:fc:49:b4:04:7e:
a4:6a:c7:d7:50:0c:9e:02:f9:96:97:4f:66:95:18:5a:a3:71:
ed:04:16:ff:9d:9f:fd:34:01:9a:80:7f:5d:cf:34:73:cb:83:
17:6e:3e:29:15:b8:fc:f3:ca:e3:9c:e8:d1:c5:7f:8e:d7:48:
3e:59:d7:86:6e:08:e3:f3:fd:ce:b9:77:12:18:18:eb:d0:69:
da:8b:38:b2:00:1c:39:0f:3d:27:0e:5c:82:8f:79:b6:95:0e:
85:cd:72:35:52:9f:1b:30:14:25:95:fe:9b:57:66:77:ee:07:
e3:a0:3b:fe:ae:21:44:9b:52:9a:37:c3:e6:47:ab:25:9c:7d:
cf:e2:ae:aa:7c:ac:8f:2d:43:0e:c3:5a:54:72:a2:c6:13:ce:
f4:91:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:48 2026 by rpki-client