Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: GPTNdtOUqtWlnk00IaqbV+1yS4hP/9zbo9fPmiPzASM=
Subject key identifier: FB:E7:DF:9F:2E:82:8F:91:30:92:AD:51:16:A2:29:10:8B:71:C5:DA
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 019FA974C41C3185D1FCAE7DCFBAE3A350EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:00:29 +0000
Manifest this update: Tue 28 Jul 2026 16:00:29 +0000
Manifest next update: Wed 29 Jul 2026 16:00:29 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: jcyEWxaDQdv/YSxrHtpYOZMDoGTkTnRBOz/IhbFupRw=)
2: nN1vJKXnh7cBHLy2sd7dD0QgOGI.roa (hash: 5guFUg6Oi5MmxQ+r87vyLbR34PherKnPHqG39PlmmF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c4:1c:31:85:d1:fc:ae:7d:cf:ba:e3:a3:50:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Jul 28 16:00:29 2026 GMT
Not After : Jul 29 16:00:29 2026 GMT
Subject: CN=fbe7df9f2e828f913092ad5116a229108b71c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:ee:78:e5:82:41:97:15:d1:86:f7:45:a4:
57:1e:06:29:9a:e4:f8:fc:d2:93:d9:07:ac:61:34:
20:05:a5:e9:e8:1d:8d:aa:12:a3:87:7d:ff:5a:f9:
18:e3:86:77:b2:05:0d:9d:1d:90:1b:ca:30:ed:8e:
81:8a:34:8a:cd:81:fb:a3:03:4a:17:4b:24:34:9a:
a7:3d:32:5b:54:32:7a:e5:9c:77:d7:32:5c:50:bb:
5f:de:5a:09:9a:2b:fc:42:58:e3:df:c1:30:8e:52:
b1:77:9c:64:fc:d3:e1:b5:92:14:dd:23:ac:a4:12:
a4:7c:14:8d:94:30:54:32:78:0e:6d:71:d3:18:d2:
da:9d:aa:a1:34:09:ae:0f:ba:1b:b1:4f:85:6e:ad:
41:5f:66:66:e9:64:54:b1:8d:4a:69:5e:d0:60:25:
e4:c3:32:d2:f0:0b:37:81:eb:6f:9c:77:11:2f:d2:
21:39:90:b4:30:36:46:ee:d7:32:10:76:3c:c0:e5:
0c:07:f0:a8:de:fa:13:77:0e:99:15:00:c7:ad:88:
be:98:fa:d5:38:43:08:21:8c:f2:31:dc:2c:05:4a:
c4:77:fa:86:93:0e:63:49:ef:d8:a5:91:75:0c:c1:
f4:b6:62:42:a6:ef:42:e7:04:3f:ab:0f:d6:f6:bd:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:DF:9F:2E:82:8F:91:30:92:AD:51:16:A2:29:10:8B:71:C5:DA
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:2f:57:1d:00:86:81:d6:aa:42:aa:1d:ad:85:ed:4c:fd:
15:52:f8:0d:d6:15:c5:fb:b4:42:e5:fd:bd:69:f1:49:d0:f4:
d3:5d:e5:af:f0:c3:44:5e:38:16:e6:c0:e5:8a:fc:61:17:9b:
77:a1:ed:12:83:b3:ca:8c:a5:60:fd:7f:c8:e5:18:06:e6:d0:
cb:96:a4:20:69:39:16:5b:40:62:aa:f2:0f:13:3c:8f:24:e2:
81:b9:dc:e9:47:9f:f8:af:84:a3:f0:5b:2a:3d:fe:a7:69:c6:
ce:ad:68:f4:ff:d9:56:31:83:0f:c3:3c:75:d7:22:fd:e2:bc:
0e:6b:7e:70:f2:6c:1a:37:eb:b7:4f:3c:8b:90:f9:6d:81:83:
7a:74:bc:fd:43:9d:d2:aa:a2:1d:7c:dd:5b:58:9d:b1:7b:72:
a6:4a:96:06:27:84:66:f2:2d:13:69:e6:e0:ab:98:a2:5d:75:
63:11:ef:9e:1c:cb:7b:d4:d7:d6:f5:db:65:8d:80:4f:25:67:
09:ec:f5:fa:02:a9:2a:87:67:2d:55:6f:e7:66:31:f2:0d:1e:
31:cb:ac:5d:5c:2f:e3:12:fa:10:4f:56:dd:b4:45:48:74:69:
4b:a4:4d:50:e1:cd:f1:d4:31:09:3a:d7:e5:1b:b8:85:65:99:
83:cb:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:31 2026 by rpki-client