Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: nlIwADZO2jJs8ryRL3hFax+HBFBFcmrlsKlqWDDvf/o=
Subject key identifier: CD:98:AD:91:95:AB:6D:C6:E7:B7:B7:0C:B6:8E:07:3D:A5:A7:D1:4F
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019FAA879D8D0FAD22E3782242B2F6F8E231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 171E
Signing time: Tue 28 Jul 2026 21:00:42 +0000
Manifest this update: Tue 28 Jul 2026 21:00:42 +0000
Manifest next update: Wed 29 Jul 2026 21:00:42 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: xr8MU3ljHnXvKp+/2G4i4FH8HZfzFAIu3Vnrd9pHu4s=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9d:8d:0f:ad:22:e3:78:22:42:b2:f6:f8:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jul 28 21:00:42 2026 GMT
Not After : Jul 29 21:00:42 2026 GMT
Subject: CN=cd98ad9195ab6dc6e7b7b70cb68e073da5a7d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:db:b1:9e:b0:f6:ea:66:21:9a:e7:44:ea:
72:1f:50:75:1f:f7:81:15:56:be:ad:b3:c2:a6:94:
27:53:0e:db:64:d7:0a:64:cc:6e:a7:8e:e5:5d:49:
0c:ba:22:ce:9c:72:c5:a7:ce:ec:8f:2e:70:9f:c6:
28:31:25:d3:f2:47:4b:54:8b:f5:8c:89:03:aa:2c:
57:55:db:18:5d:e8:1b:6a:c5:8e:02:95:8a:80:f3:
f6:3f:68:0f:43:1b:3e:3d:9e:60:37:ed:35:20:a9:
42:42:31:95:25:c0:33:26:d6:f9:25:5f:1c:88:ee:
e4:6a:b4:98:56:b2:42:61:1c:19:76:32:08:70:cb:
cb:3f:2b:36:f2:04:62:a4:cd:0d:49:b5:a6:a6:83:
47:d4:64:14:1b:4f:ef:3c:d2:aa:9d:91:9a:a4:37:
0e:c8:87:33:0e:04:e9:22:35:db:4b:1d:e4:e8:55:
97:83:2a:3a:f4:93:fe:45:8b:c4:88:d5:dd:93:96:
53:f6:80:28:b9:47:66:2f:b2:08:53:06:f1:eb:90:
fd:4c:e4:c6:05:db:f3:f2:9f:c3:8d:80:b7:87:82:
79:09:e3:ca:ac:7c:dd:e6:c8:f9:b5:a5:ce:4c:61:
03:45:9a:e4:1e:41:8c:8b:f4:66:4b:53:05:4e:df:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:AD:91:95:AB:6D:C6:E7:B7:B7:0C:B6:8E:07:3D:A5:A7:D1:4F
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:af:6e:c1:ed:d5:1a:a6:b6:c4:2a:f0:ff:cb:c9:79:74:c8:
0f:a0:6e:31:d0:5e:42:6e:f4:d0:36:43:9d:d3:28:81:1e:32:
9c:bc:bf:c1:38:c4:11:61:85:54:de:66:38:77:5e:3d:7e:9a:
ab:36:36:a9:39:3d:2b:42:1b:be:e9:6b:94:68:92:04:86:a5:
db:d3:7b:1c:92:3c:d6:b4:3d:93:75:cd:c1:cc:a9:22:bf:35:
5b:1c:b9:51:1f:be:31:79:a7:41:8b:be:c7:92:b3:68:8e:f5:
63:b1:5c:ec:bc:89:ad:54:64:10:ca:c5:a1:9d:5e:5d:15:6c:
55:27:bd:8c:2b:a7:b2:f8:8a:73:4c:2f:4b:52:99:7a:e2:5f:
af:01:3f:1c:f2:46:df:52:39:92:d1:6d:05:77:63:e1:dc:66:
2f:53:df:41:dc:ea:fe:e2:cb:6b:30:12:20:31:73:4d:24:24:
16:69:ef:c7:09:29:f0:b6:7d:bd:41:3d:a7:82:b1:7e:58:42:
16:03:6c:ad:e4:aa:8d:bc:65:12:d4:d6:ef:47:d8:66:66:3c:
6d:a8:f7:db:f0:61:85:2c:c2:7d:71:fa:e8:9f:70:eb:6f:58:
ca:10:9e:50:28:e2:87:12:a8:f3:68:6d:b8:34:b8:fe:27:bd:
3c:dc:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:10:27 2026 by rpki-client