Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: re9HLRN257BH4ayyae7W/j3G3D4dkBhhxHp0yiNisJI=
Subject key identifier: 58:29:87:B0:D4:CA:99:BA:2E:5B:F4:EF:5C:6E:BA:08:EB:FB:F0:6A
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019FA906F7A188B42D0363E09A871E7A513D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1814
Signing time: Tue 28 Jul 2026 14:00:33 +0000
Manifest this update: Tue 28 Jul 2026 14:00:33 +0000
Manifest next update: Wed 29 Jul 2026 14:00:33 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: JOetQCke4OTl7Pf3Dz3ydQhPe2PwVPKOJljS5lYuqO4=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f7:a1:88:b4:2d:03:63:e0:9a:87:1e:7a:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jul 28 14:00:33 2026 GMT
Not After : Jul 29 14:00:33 2026 GMT
Subject: CN=582987b0d4ca99ba2e5bf4ef5c6eba08ebfbf06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:73:eb:f1:7c:96:63:8c:94:07:b4:2e:41:
93:bf:38:0b:e0:b4:21:16:70:bb:c8:89:c0:a5:ec:
9a:ab:61:e2:32:40:06:49:a9:ce:ed:b5:63:25:39:
73:2f:6b:1a:e1:ff:1d:2c:9e:91:75:25:e3:40:3b:
aa:20:6d:7a:d5:72:5a:24:b7:8b:77:b4:b8:86:26:
e9:5b:87:2a:d5:37:e3:7f:0a:f0:76:bf:f4:6e:be:
2f:59:fb:c6:11:82:fb:cc:94:dd:39:26:72:9c:9e:
cd:83:62:b1:c6:82:5f:5c:c2:b6:63:5e:94:0f:32:
c0:7b:ab:3a:19:df:9a:3a:ba:db:51:52:ae:35:56:
b8:1c:0e:3d:bc:76:8a:83:2b:78:72:6c:33:0c:0b:
9e:3b:a1:e8:03:b4:cf:dd:2a:6a:76:e6:7c:0f:db:
1f:58:72:72:62:10:32:fc:d8:46:fa:42:9d:6d:c4:
9f:64:db:ca:b7:ea:65:07:c7:3a:fc:51:2e:0f:ac:
a1:c1:3a:05:65:4d:32:83:9e:3f:6e:0b:77:06:f3:
d9:39:7c:4b:9c:98:7b:02:e3:ce:0f:3c:6c:e9:02:
04:8f:bd:4f:37:3f:8d:a2:e0:cd:39:21:57:db:2f:
28:71:30:1b:38:81:ad:8b:af:fd:cd:ca:ef:d6:c2:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:87:B0:D4:CA:99:BA:2E:5B:F4:EF:5C:6E:BA:08:EB:FB:F0:6A
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d0:d3:0f:82:be:66:9d:f3:a1:be:f9:5c:21:60:b5:44:39:
68:5b:b9:b7:27:25:06:56:ee:1e:da:37:d6:b5:1a:e6:72:41:
6b:8e:f0:d7:2d:3f:18:96:78:5e:4d:03:57:53:ce:0b:b3:e0:
80:ee:89:0c:45:19:c0:97:56:f3:f0:93:eb:ab:d5:d9:7c:87:
6e:8e:a1:d5:94:77:da:82:87:42:9c:6c:2f:cf:21:2f:2a:86:
1f:b6:e5:bf:b9:dd:1f:ed:a3:b3:8d:29:2e:0a:3a:83:9c:9a:
b3:ea:ef:3f:75:1c:0c:90:8b:82:c1:0d:3f:1b:dc:8f:c1:bf:
48:64:67:50:ca:df:e0:4d:e8:19:f5:4d:3d:07:39:44:18:09:
f9:c2:bf:39:8e:39:ad:ca:21:c6:ff:76:a5:bb:a4:1c:3f:a7:
91:da:ce:9f:6f:14:13:5d:00:c8:b8:bf:34:d5:a2:9b:a1:d6:
d7:59:95:a6:e9:00:25:81:e8:f6:b9:a5:6c:77:97:e0:cf:d6:
14:d6:2e:5d:3b:9b:5b:d7:1b:0f:04:08:e9:ef:42:67:f7:c4:
e9:c0:8c:34:86:d3:3c:30:b6:ab:07:ff:92:f6:f5:d1:88:6d:
2a:d5:89:b5:67:f6:68:9e:4f:a3:56:11:24:06:0e:84:3e:55:
49:42:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:02 2026 by rpki-client