Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: uDFAZFsCg3BGxp/WXnuE6V0o9hj/xCEmaOEKoKgHwB8=
Subject key identifier: 0C:99:E3:AA:4C:D9:B6:7C:C9:AF:B6:88:CC:B4:3D:E6:21:12:47:A2
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019FA899399E2B1553B82FA639348A8823B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 171D
Signing time: Tue 28 Jul 2026 12:00:41 +0000
Manifest this update: Tue 28 Jul 2026 12:00:41 +0000
Manifest next update: Wed 29 Jul 2026 12:00:41 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: x3cS+LRv+98uDi6bN7n9I2BMuomZ6QH2vj0nAD2GWNk=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:39:9e:2b:15:53:b8:2f:a6:39:34:8a:88:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jul 28 12:00:41 2026 GMT
Not After : Jul 29 12:00:41 2026 GMT
Subject: CN=0c99e3aa4cd9b67cc9afb688ccb43de6211247a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:21:6f:d9:1c:8a:ab:d7:a5:2c:fb:bd:cc:
da:f6:7e:87:24:0f:14:21:12:bf:91:14:e2:68:c1:
eb:ca:d2:89:85:63:89:bd:f8:48:02:51:e7:88:cf:
b3:4c:8e:2f:c8:00:d4:1c:fe:44:c7:ea:44:e9:91:
8e:0d:3d:db:40:a5:61:d4:ba:20:50:73:ca:ad:02:
e7:d9:2b:b5:fc:ea:bc:fc:e8:7a:1a:52:e6:b8:d9:
60:24:c7:6d:c2:9e:40:56:89:75:2b:b9:60:6d:5e:
5f:3b:72:b3:70:b6:e8:7d:de:f8:cd:72:10:0d:e1:
46:45:e8:f2:76:e9:ca:96:af:b1:56:d2:d0:c6:e0:
e3:4f:92:53:b3:d9:62:6d:d0:5f:8c:b8:d7:76:0d:
65:21:a8:ff:d6:f8:c6:d3:b2:3a:06:10:24:65:e4:
cc:d9:9d:4e:82:e3:39:61:d7:04:d7:1f:bf:99:a0:
4a:da:f1:5e:34:52:8e:56:b3:1b:b2:e3:b8:1e:56:
8c:06:27:fc:88:ab:42:16:56:9f:b6:6c:72:dd:53:
a2:11:e2:af:83:93:0d:69:a7:26:63:01:a6:c7:d6:
bf:57:92:75:46:9f:0e:2c:67:11:fd:6b:0a:66:f6:
d1:67:c0:46:ce:f6:b1:d0:04:a4:e1:09:9c:90:f3:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:E3:AA:4C:D9:B6:7C:C9:AF:B6:88:CC:B4:3D:E6:21:12:47:A2
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:00:c9:f9:4b:83:bf:c9:20:cb:28:23:c9:c4:0a:24:03:11:
77:76:9c:35:74:8c:36:48:7e:ac:ab:69:20:30:84:0e:8e:88:
cd:83:e9:d5:59:16:3d:f7:8a:33:b6:09:67:2f:2c:8b:58:01:
ef:8f:f8:56:3a:e3:c3:16:f9:f8:45:4b:d0:ec:12:cd:0c:59:
d0:14:e3:fe:80:65:94:3f:62:4a:c5:04:36:d3:72:5c:42:ac:
3c:f6:7b:a2:4e:a0:bf:8e:6b:e1:c7:97:22:15:26:ec:68:8b:
e3:75:1c:1d:75:3b:61:24:a1:f3:a8:42:e3:e2:59:1f:49:c8:
25:be:b3:13:6e:14:8d:d0:5c:5c:40:53:19:e0:81:e6:c5:16:
07:8c:83:e8:e7:71:75:73:6c:1c:c0:6c:ac:f1:d4:1f:2e:fd:
87:5f:d7:0f:a6:8b:33:de:67:cf:5a:d7:40:d2:8b:3f:76:1e:
b7:35:b2:c0:6b:83:b8:ef:72:f8:64:97:69:12:e6:c4:c7:11:
9b:8d:90:30:98:fa:b6:ca:4e:1b:74:db:c7:87:7f:9d:8a:3f:
fb:ae:23:38:8d:95:43:99:d9:e8:dc:19:01:0f:7a:ff:da:48:
8c:63:53:20:18:73:57:7c:94:3e:5d:7c:d3:31:23:2f:6f:ed:
3e:be:c8:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omTmeKxVTuC+mOTSKiCO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjYwNzI4MTIwMDQxWhcNMjYwNzI5MTIwMDQxWjAzMTEwLwYDVQQD
EygwYzk5ZTNhYTRjZDliNjdjYzlhZmI2ODhjY2I0M2RlNjIxMTI0N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPIhb9kciqvXpSz7vcza9n6HJA8U
IRK/kRTiaMHrytKJhWOJvfhIAlHniM+zTI4vyADUHP5Ex+pE6ZGODT3bQKVh1Log
UHPKrQLn2Su1/Oq8/Oh6GlLmuNlgJMdtwp5AVol1K7lgbV5fO3KzcLbofd74zXIQ
DeFGRejydunKlq+xVtLQxuDjT5JTs9libdBfjLjXdg1lIaj/1vjG07I6BhAkZeTM
2Z1OguM5YdcE1x+/maBK2vFeNFKOVrMbsuO4HlaMBif8iKtCFlaftmxy3VOiEeKv
g5MNaacmYwGmx9a/V5J1Rp8OLGcR/WsKZvbRZ8BGzvax0ASk4QmckPOvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyZ46pM2bZ8ya+2iMy0PeYhEkeiMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzADJ+UuD
v8kgyygjycQKJAMRd3acNXSMNkh+rKtpIDCEDo6IzYPp1VkWPfeKM7YJZy8si1gB
74/4Vjrjwxb5+EVL0OwSzQxZ0BTj/oBllD9iSsUENtNyXEKsPPZ7ok6gv45r4ceX
IhUm7GiL43UcHXU7YSSh86hC4+JZH0nIJb6zE24UjdBcXEBTGeCB5sUWB4yD6Odx
dXNsHMBsrPHUHy79h1/XD6aLM95nz1rXQNKLP3YetzWywGuDuO9y+GSXaRLmxMcR
m42QMJj6tspOG3Tbx4d/nYo/+64jOI2VQ5nZ6NwZAQ96/9pIjGNTIBhzV3yUPl18
0zEjL2/tPr7IAQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:22 2026 by rpki-client