Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: EeTOYDIQZOEAC5dQpFBUDwMDd5AqgkhDLmWxxJB35BE=
Subject key identifier: CC:9D:B9:53:D4:3E:59:AD:CC:BF:82:D7:02:BF:7E:75:8B:1C:6E:92
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019FACE469472F1F0C05E5F9F213D476087B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 08:01:17 +0000
Manifest this update: Wed 29 Jul 2026 08:01:17 +0000
Manifest next update: Thu 30 Jul 2026 08:01:17 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: Gfhfyvw883gD6RziXnNM3M2Crx9Zg/Nt46qXIu5HXDM=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:69:47:2f:1f:0c:05:e5:f9:f2:13:d4:76:08:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jul 29 08:01:17 2026 GMT
Not After : Jul 30 08:01:17 2026 GMT
Subject: CN=cc9db953d43e59adccbf82d702bf7e758b1c6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:04:20:fb:72:ce:0d:a5:32:69:1b:64:bb:
01:e9:80:44:51:73:01:92:08:84:8d:b9:c3:c8:33:
9a:93:1e:3b:77:72:6d:25:5d:d2:c7:51:0f:1a:5a:
5f:1e:18:62:77:3d:e6:c0:e2:58:9a:bf:0f:d6:4e:
4a:d1:a4:e7:af:63:ea:9e:a0:d0:d1:26:6f:ce:95:
d0:ed:12:d8:e0:62:e3:06:d2:fc:02:35:8c:84:94:
ff:8d:41:70:23:e8:96:c7:4b:ce:bb:65:44:f0:61:
74:51:49:ca:f1:e2:0b:74:e7:99:c2:09:51:7d:3d:
6e:c3:62:f3:c6:1e:53:3b:dd:73:15:bc:d9:78:a3:
02:ed:84:49:cf:b5:6f:b3:f4:2f:68:45:a0:c5:2c:
56:5e:e3:cc:34:d6:68:13:91:1c:d7:f7:72:9b:a2:
36:61:ee:e0:8c:f3:1c:8b:14:82:09:61:3e:fb:47:
40:e5:a7:21:33:e7:92:dd:27:bc:06:d6:f2:b8:35:
75:a6:8a:f9:83:84:8e:f2:81:e4:19:4a:42:d9:4e:
9d:b1:87:42:a2:32:2c:92:e4:5a:5c:89:8c:af:69:
1b:02:71:cd:af:60:30:55:89:79:13:ff:d9:8a:61:
ef:53:d8:1d:94:a4:b1:0a:26:61:10:6b:98:01:04:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:B9:53:D4:3E:59:AD:CC:BF:82:D7:02:BF:7E:75:8B:1C:6E:92
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ee:24:d0:9a:4e:9c:e8:57:e7:24:5f:b0:ec:87:e1:b5:d9:
cb:1a:ed:4a:b8:98:3f:3e:89:48:06:f6:2f:90:eb:60:d6:c5:
8a:67:2b:df:a6:fa:3c:fd:48:7f:6a:9e:b3:4e:59:14:44:6c:
01:06:73:63:28:4a:ad:99:8d:f1:44:ce:c5:30:68:5f:eb:20:
bc:6a:58:53:a8:cf:09:49:d6:0b:57:a1:1c:e1:74:e3:c4:e3:
c1:c2:42:91:d2:87:0a:0a:44:02:e1:35:6b:5d:74:bf:40:00:
9f:93:83:bb:54:f8:2a:02:da:80:5e:59:c0:8b:29:c6:d4:2e:
79:c3:5f:e8:bd:c8:6c:cb:3b:83:1c:3c:31:71:a0:70:33:d6:
84:31:69:a2:a2:d4:ee:f4:ed:a8:03:c1:c0:d1:e7:65:b0:dd:
3d:d5:90:10:42:df:e0:f8:d0:a4:47:4e:af:86:e7:9d:b6:e6:
c7:02:c7:c8:b5:ef:7b:53:83:df:cd:c8:cf:92:76:27:36:15:
b1:c9:53:12:d1:58:30:1c:15:da:97:68:91:b9:7e:6a:bf:0e:
29:88:92:ac:cd:7e:76:09:83:fe:46:b2:6c:b2:73:51:cf:f6:
de:27:32:2c:68:65:4a:c7:a6:48:8e:6a:f4:dd:82:9a:f8:39:
0f:47:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:25 2026 by rpki-client