Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: XpL77HKiMgUWbIutRxVl2UUr97cAG/2IFeT3MMhItv8=
Subject key identifier: 3C:17:A4:45:35:41:BD:E9:4B:DD:A1:A8:49:5E:B7:EE:26:CB:8A:AB
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 019FADF72864A1BFCA8035BEA66A6D8F2C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 01DA
Signing time: Wed 29 Jul 2026 13:01:23 +0000
Manifest this update: Wed 29 Jul 2026 13:01:23 +0000
Manifest next update: Thu 30 Jul 2026 13:01:23 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: SW2DiTFkvin25utyqtxgsjWzIRyaq/Xtrkjv0g9gvg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:28:64:a1:bf:ca:80:35:be:a6:6a:6d:8f:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Jul 29 13:01:23 2026 GMT
Not After : Jul 30 13:01:23 2026 GMT
Subject: CN=3c17a4453541bde94bdda1a8495eb7ee26cb8aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:11:da:1b:8a:9a:70:8e:2b:0b:4d:4d:36:
ba:2a:90:eb:b7:6c:1f:fd:91:3e:96:2c:43:8d:d0:
bd:f3:17:b6:bb:ad:48:e5:18:ae:dd:02:f5:57:f8:
8f:dd:84:1d:f2:08:41:b2:51:2e:31:47:ec:a2:0a:
cd:24:4c:cf:e9:25:34:9d:aa:7b:8e:96:4e:eb:97:
9d:c5:16:13:38:25:aa:2e:a6:59:b7:5b:50:f2:94:
ae:9d:b3:da:9a:1a:ab:f6:45:f6:31:5b:8e:c5:87:
24:3c:e1:d6:a9:a9:c3:5c:70:11:83:57:b2:80:0e:
f9:c5:f5:cc:9d:b1:45:db:7a:7c:e6:73:22:76:22:
e6:ce:6b:5e:d6:df:1a:6c:05:eb:98:67:63:87:0b:
6b:de:f4:7a:bf:cb:ed:9b:16:cb:2b:2b:1d:1e:50:
0d:6e:b6:5b:2c:25:bf:cf:fa:0e:30:f9:ae:96:7a:
17:df:6c:7a:23:5a:22:0d:73:46:5d:fe:50:3a:46:
fb:59:aa:6c:7f:03:5c:9c:ab:57:06:9f:17:2a:13:
98:fc:df:c6:7b:18:b2:0e:9f:43:88:12:0b:5b:75:
a4:ad:15:7d:7b:7f:d7:89:30:63:05:ab:b8:8a:9c:
f6:62:95:65:46:4b:87:73:92:6d:2c:35:29:65:5e:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:A4:45:35:41:BD:E9:4B:DD:A1:A8:49:5E:B7:EE:26:CB:8A:AB
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ca:8f:eb:57:a3:87:39:ca:10:13:6e:6c:75:2a:79:eb:66:
4b:12:52:65:c9:13:91:13:9a:15:71:ee:a1:f2:e6:f3:4b:0b:
0e:f1:d2:07:8c:9c:bc:46:de:cb:37:49:47:02:16:07:d5:98:
a6:ce:08:0c:4f:8b:00:1a:d3:0e:e2:2b:e7:6c:0b:46:4b:69:
ad:98:d7:c9:44:b9:e9:30:af:65:5d:b5:25:75:0e:1a:00:0a:
02:33:1e:ad:5a:1a:5a:92:d0:a9:6d:c3:f4:0a:78:47:7c:a8:
bf:69:76:c3:e6:02:81:02:c9:6a:1c:92:73:e6:e9:98:fe:39:
a7:92:31:d3:12:03:04:e3:f8:94:13:81:a5:1d:af:79:8d:ad:
e1:c0:e7:56:4f:93:08:ab:8e:51:bb:b1:7f:61:01:f3:9a:45:
03:71:b4:ed:be:57:69:0b:e1:97:51:f9:36:4d:64:a5:7f:d0:
3f:4b:d5:e1:0f:ab:d5:b2:b1:b3:4e:91:b4:48:aa:58:4f:ea:
3b:f1:0a:50:77:a5:3f:b3:24:4b:7b:49:8d:c7:29:7e:2f:25:
9e:20:6c:ba:c1:55:99:d9:69:a3:37:54:95:56:4f:f5:91:56:
37:de:d8:f0:f5:0f:ec:b5:9a:45:ec:6e:70:56:f2:de:62:f4:
6a:88:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:30:48 2026 by rpki-client