Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: Tt7FKyAqBSO+23XtTKEabO+OkiMlcURt2bV+iYtoP+M=
Subject key identifier: 99:DB:E1:20:68:C9:EA:98:E0:81:D3:C8:71:5C:E8:B9:50:FF:85:C0
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019FA6E2018EF36FB0BB5E3F78105D98A71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 11EB
Signing time: Tue 28 Jul 2026 04:00:57 +0000
Manifest this update: Tue 28 Jul 2026 04:00:57 +0000
Manifest next update: Wed 29 Jul 2026 04:00:57 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: mbFtRy7jHFMXrLycQ3BTvjErGy9/dxtqyFe+qg/8Ti4=)
2: VI1Pdat37Jv7tPxYGIsry5LOD7w.roa (hash: ZvnfeGRZ4e6seCSPIniU9Klu2LcfEkoX8a9oOIfdFRk=)
3: ca2_ka3kebG4xHwE6CZSEy0WpnA.asa (hash: nEWMHuIMfgnCR89CtrdeQhiYg+87GPGGAfi7uNBVLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:e2:01:8e:f3:6f:b0:bb:5e:3f:78:10:5d:98:a7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Jul 28 04:00:57 2026 GMT
Not After : Jul 29 04:00:57 2026 GMT
Subject: CN=99dbe12068c9ea98e081d3c8715ce8b950ff85c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:2d:f8:6d:e8:83:f3:1e:78:80:f6:99:a4:
71:b6:64:f2:a6:9e:11:96:dc:6b:00:fa:14:8c:3f:
ee:d1:9b:0d:a3:59:46:da:9f:d2:f4:75:0d:02:a2:
22:9d:4f:a3:9e:17:e6:98:07:78:38:72:01:49:3d:
d1:fe:52:d1:cd:11:af:86:3e:2c:7d:42:57:b7:7b:
49:ce:cc:59:27:c9:f7:93:01:21:89:36:e8:1e:90:
76:c0:17:2c:02:88:0f:9d:04:94:ce:7c:a1:02:77:
30:81:b0:4b:07:5b:1c:f1:a2:e1:d2:f6:18:91:9c:
2c:26:13:08:60:d0:0b:aa:66:d3:93:98:1d:db:e7:
d8:4d:7a:27:6d:5c:d1:f8:77:d4:a9:74:2f:1f:89:
0a:b7:ee:4f:92:d7:13:63:7c:8b:57:75:40:69:67:
bb:26:4b:a1:79:5e:72:52:9e:d7:7f:05:bc:b3:90:
ef:e4:c5:c4:98:a1:ed:ad:60:c1:62:2b:13:db:66:
95:2c:8f:1a:54:ce:48:4c:23:3c:ab:dd:aa:2e:1f:
fd:20:7d:f2:af:4e:2c:d8:27:29:61:52:b0:33:e4:
10:59:e7:9f:b9:0b:fc:70:58:95:64:3b:1a:22:e5:
0e:f3:a1:d0:fd:36:a8:36:9c:a6:a1:8c:c8:b0:c6:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:E1:20:68:C9:EA:98:E0:81:D3:C8:71:5C:E8:B9:50:FF:85:C0
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:58:b9:ab:19:28:c3:57:06:5e:83:f7:d5:b7:90:1b:87:
ce:2f:2c:ea:f6:de:87:20:68:cb:f2:83:3a:2a:91:c8:1a:cf:
69:86:c6:34:0c:1a:aa:cd:1f:5b:f1:51:22:17:19:c3:fc:3c:
17:00:da:4f:1f:3a:aa:20:31:11:fd:5b:54:60:2d:7f:2f:ef:
6a:3c:59:90:b7:c0:2e:5c:92:99:0f:31:44:1b:d4:9b:62:56:
a8:be:ae:72:3e:dc:00:6e:f4:a1:35:cc:4a:4c:2f:e4:ac:00:
6f:5f:f6:89:60:f4:32:5d:bd:95:e4:c4:cf:f3:92:31:9a:4b:
17:2c:17:8b:0d:5b:a9:ef:a1:9b:84:d2:27:7e:27:c1:ff:04:
a0:12:59:b5:4c:f2:41:de:cb:4c:49:9f:fb:d0:7d:22:1e:fb:
5b:b2:7f:5b:2d:55:d0:9a:31:19:5d:e9:fe:c1:46:3e:d6:f5:
26:64:d9:d8:8a:f7:92:69:36:44:ed:b4:8c:93:43:92:2d:dc:
32:e4:1b:fc:80:c5:1c:1e:24:37:84:3a:dc:8a:b7:42:8a:ce:
0e:f6:38:24:20:31:5c:aa:ca:19:38:9b:e6:da:81:66:54:80:
df:fa:53:96:41:57:2e:5f:56:a8:0d:20:55:71:e9:64:5d:17:
6a:ba:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:37 2026 by rpki-client