Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: IZrVh6QFMt/is3q5F3Lcl1MAVhAt6P1qpcZ45g82TPA=
Subject key identifier: 69:9A:B2:39:5E:5E:15:28:44:D5:27:1C:72:E7:ED:37:C0:2C:EC:7B
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019FAA1A295E96D7BCCF07B4864FC63857AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0841
Signing time: Tue 28 Jul 2026 19:01:08 +0000
Manifest this update: Tue 28 Jul 2026 19:01:08 +0000
Manifest next update: Wed 29 Jul 2026 19:01:08 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: vbCe51i13u4tA64XObaIeGSeowCAHHShLDO5QFEIEtY=)
2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:29:5e:96:d7:bc:cf:07:b4:86:4f:c6:38:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jul 28 19:01:08 2026 GMT
Not After : Jul 29 19:01:08 2026 GMT
Subject: CN=699ab2395e5e152844d5271c72e7ed37c02cec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:0e:1a:4f:1e:9c:4b:e6:15:8b:2e:b7:d8:
75:3a:6e:d1:03:8b:f1:3f:31:b5:34:c2:d1:ed:5c:
44:09:cc:a9:c6:76:02:8a:bc:8f:93:18:d5:a7:72:
b6:40:62:b7:50:42:da:ec:0b:fe:71:9a:f1:64:fb:
44:05:96:11:97:88:b8:23:d7:50:5a:cb:f9:92:8c:
3b:18:93:5d:90:bb:6c:59:de:10:d2:33:1d:08:01:
73:a7:c5:12:ca:69:d9:22:3c:2a:99:6b:ef:10:6b:
74:35:b6:ff:48:60:8a:8f:d3:8a:b4:fd:fb:5c:35:
b8:43:be:00:6e:0e:0f:3d:39:2f:54:66:c4:bd:58:
33:7f:20:24:97:da:49:f9:9e:8a:af:58:da:08:65:
81:58:05:17:e4:0c:28:2f:55:ca:c7:0c:c2:07:41:
35:98:98:a2:3e:ed:ae:9b:b6:0e:5f:86:f1:69:79:
74:12:8c:d2:08:c7:4a:87:41:1c:0b:9a:6f:3b:22:
05:d5:73:89:71:e2:db:4c:34:8d:a4:14:60:be:14:
b6:96:86:f4:8a:f1:d3:1f:da:ff:aa:d9:07:a4:d7:
d0:0a:29:93:91:0f:e4:05:a0:b5:1a:5a:35:e8:11:
11:24:4f:ec:32:8a:42:96:ad:20:0a:e4:d8:35:1a:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:B2:39:5E:5E:15:28:44:D5:27:1C:72:E7:ED:37:C0:2C:EC:7B
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:c8:ee:a1:ca:e1:ac:b1:9b:0a:7b:bc:3d:21:48:83:97:
2c:f1:62:19:5e:1f:c9:0b:60:58:17:b2:1d:7e:d4:07:f3:cf:
e8:cd:8c:98:7a:66:34:b2:68:b2:87:cf:7e:90:03:dc:1d:83:
0b:84:a9:42:61:a5:20:1d:71:9b:3e:44:e7:93:31:07:db:88:
7f:08:dc:7c:fa:d0:f6:f6:b4:94:59:bc:e5:57:d9:e4:bd:1a:
78:97:2e:1a:ed:20:3b:ce:b1:f0:06:d8:fe:85:b8:53:dc:bb:
0f:4f:c6:23:96:93:7c:3f:9e:54:e4:26:34:88:74:ea:f9:09:
31:0c:59:9a:cf:4c:a8:fd:66:aa:ff:83:5b:08:68:2c:39:f4:
66:30:1c:5d:78:f7:4c:24:7f:b5:8a:99:e2:52:e7:57:63:03:
3e:ef:fa:83:3a:dd:f8:c7:73:d6:90:95:71:2d:25:28:3f:9e:
79:4a:7e:14:32:96:a7:eb:c5:e1:e9:5c:4e:d4:55:75:15:84:
30:a2:dc:6a:f6:f8:ee:6c:7d:f0:b3:0e:f5:7b:90:41:ce:6f:
b0:64:5b:8b:5b:42:a3:61:3c:c9:de:4f:c5:6f:a2:38:aa:53:
3e:fc:7f:d4:7a:08:90:d1:41:57:d4:49:ba:8b:22:a8:ba:92:
01:0f:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:29:13 2026 by rpki-client