Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: KGjxu96VjAHWduyrTapk5xOfj4FSToSK09BkS5TfQS8=
Subject key identifier: A5:D9:7B:22:A9:42:22:25:0B:D6:8B:EB:AF:6F:D8:A8:C6:12:0D:C4
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019FA9E2A20413ABFD681135333DCC307FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0F6C
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: EZaEnGtX8SNoDB1Z/cLq9YRjwjozvbgpwgA3KpJ5IOQ=)
2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a2:04:13:ab:fd:68:11:35:33:3d:cc:30:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=a5d97b22a94222250bd68bebaf6fd8a8c6120dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:25:8c:83:0d:05:22:3c:7b:8d:b4:17:3e:
7e:c7:72:4d:78:5b:0f:26:f2:1b:9b:c7:49:dc:e5:
6c:0e:fb:03:59:32:34:14:11:1e:b2:50:2e:f0:bb:
64:39:44:fa:57:fd:1d:6d:8c:cb:cf:31:6f:3a:f9:
a1:2e:ef:39:48:fa:bf:fd:a2:32:09:5a:d7:2d:ea:
88:c1:2a:6e:53:a5:97:61:00:f7:96:41:98:d3:49:
38:c5:b3:c4:df:ae:88:41:20:55:79:78:38:40:39:
a5:1b:fd:8b:81:09:ed:aa:e9:e6:c6:d4:4f:ac:8b:
0e:a9:06:f3:f0:98:c4:cf:08:a6:b4:3b:66:96:78:
8c:56:34:4f:50:27:e3:ae:cf:b1:27:71:a2:7f:7a:
f0:76:db:55:d8:f1:b0:13:9a:fc:cb:1c:26:e6:8c:
82:85:06:e7:63:d0:7a:98:99:e0:ac:2d:86:3e:59:
59:2f:da:ef:00:13:3f:e1:93:03:1f:b7:9b:e9:b4:
ae:bc:58:89:80:f9:e5:c0:1c:6c:f5:99:b4:9a:2e:
3b:65:3a:d7:85:bf:24:2a:2b:18:80:08:3e:c4:1b:
aa:25:25:14:35:83:60:59:85:a3:47:c0:33:23:fc:
13:f5:f0:5e:e4:e4:ea:90:d5:ef:18:02:04:9f:87:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:7B:22:A9:42:22:25:0B:D6:8B:EB:AF:6F:D8:A8:C6:12:0D:C4
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:13:18:1e:94:d8:7b:fa:38:4e:34:27:71:6f:bc:73:65:
e6:e1:b7:5b:32:55:29:ec:6f:36:47:62:ad:cd:c8:e2:db:ba:
3b:9d:f6:33:1d:69:94:2d:c2:82:75:e7:21:18:9b:ad:56:3b:
9d:b2:fb:46:24:2d:f7:92:90:de:ae:ea:d3:06:0d:7b:c2:57:
0e:ac:dc:c2:a8:df:8c:15:a2:2b:e5:b2:a8:36:9a:11:0f:82:
83:f1:6a:11:51:eb:70:5f:ff:9d:09:25:90:2e:ea:ce:a4:68:
72:c1:be:f7:e8:c2:50:08:3d:d8:8d:3d:d5:6b:3e:ee:70:75:
05:57:8f:18:cb:e9:c5:71:f3:0b:ab:55:b7:07:18:bd:54:bb:
7a:b1:e6:8f:7c:08:48:07:9c:7b:8e:63:c7:5e:3c:95:a6:cb:
7b:08:7a:da:6a:3f:9b:7f:2c:fb:9c:bf:b4:cb:08:90:d6:d5:
8b:14:3b:a1:78:16:7a:da:10:4e:5f:f6:06:8d:1d:ef:0c:12:
1a:d4:71:44:bc:1d:14:7a:41:16:6c:d8:29:ee:f5:ed:68:41:
eb:a0:28:15:06:72:7b:56:d0:c6:ec:f2:50:61:75:77:1c:33:
96:24:02:0a:46:64:9d:39:4e:7b:5e:99:71:ef:30:9d:23:64:
cd:5e:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:31 2026 by rpki-client