Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: zrSTugXO3R7m3WNrRiqgdp2mG8ppNUdrpboEJ0R8jP0=
Subject key identifier: 30:D0:45:62:08:0A:AB:23:E9:C8:05:F8:E9:03:07:17:47:EC:3D:F5
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019FA9AC2FE78674BB0993A76F9D4F0AED01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 11A8
Signing time: Tue 28 Jul 2026 17:01:01 +0000
Manifest this update: Tue 28 Jul 2026 17:01:01 +0000
Manifest next update: Wed 29 Jul 2026 17:01:01 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: RgTt03yS2GN/1DwYCclPPnlvk/M01H7qBBR3gPMiqlM=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:2f:e7:86:74:bb:09:93:a7:6f:9d:4f:0a:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jul 28 17:01:01 2026 GMT
Not After : Jul 29 17:01:01 2026 GMT
Subject: CN=30d04562080aab23e9c805f8e903071747ec3df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:af:7e:00:c2:1f:c2:03:e4:e8:0e:f8:bb:
7c:74:0c:94:5e:20:d8:22:33:ba:36:a0:c5:25:fc:
2a:60:cb:f4:26:cd:30:4c:53:45:d1:73:2a:8b:b2:
62:33:b2:46:cf:f2:15:11:09:22:54:f9:5b:50:ac:
85:f0:70:19:8b:80:bd:6a:70:70:de:59:d1:a0:47:
89:b0:7f:96:61:2c:a3:30:32:79:97:96:a7:f0:27:
96:30:da:6b:58:21:6b:00:67:66:84:c4:ad:0c:10:
69:35:16:cc:12:b2:30:ec:b8:9d:89:7b:76:2f:c1:
8b:03:ce:76:eb:7a:0e:0c:9e:27:eb:a8:2e:3b:b1:
7c:3a:1c:bd:f5:37:56:94:23:06:84:c1:6b:53:24:
56:da:17:7e:64:4e:49:f0:0c:7c:4d:14:2d:90:ba:
50:fa:22:c3:0a:85:60:47:e7:ac:a5:ad:79:43:06:
10:5d:61:08:dd:10:66:d9:94:9d:bd:0a:21:fb:ec:
bd:d2:b9:4a:71:59:4c:43:d3:a5:3c:97:47:d7:55:
08:1d:fa:74:a1:1f:14:d4:19:dd:4b:ba:74:59:22:
77:d8:55:aa:68:23:5d:65:8d:3e:e0:98:9b:3f:b3:
bc:c0:48:eb:ab:cf:11:e4:d2:fe:42:c3:43:1e:61:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:45:62:08:0A:AB:23:E9:C8:05:F8:E9:03:07:17:47:EC:3D:F5
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:29:35:7d:a6:98:ba:18:74:22:b5:db:65:1b:75:bc:e1:
ed:45:5a:c2:4b:db:d3:16:21:e3:74:2a:13:dd:31:bf:32:62:
db:a3:00:2d:d5:a2:06:23:38:4f:3f:36:16:cc:80:f5:dc:53:
d5:0f:38:9e:08:62:0d:35:73:21:5f:95:39:65:cd:10:3f:62:
75:05:89:fb:4a:e3:98:cb:3e:b2:07:ed:66:56:3a:aa:5f:23:
1e:74:22:81:60:cc:ec:11:b5:9c:d0:e1:b2:92:cf:ce:e5:9d:
fa:ec:67:8d:d4:e3:77:ad:ec:3f:f3:f5:c7:61:1c:24:44:67:
b7:91:dc:eb:ce:09:93:d6:38:b5:34:9c:c3:61:bc:6c:80:be:
ae:63:24:50:43:5e:3f:3d:20:be:6e:42:3a:41:dc:a0:3c:62:
a6:9c:ca:77:9e:6c:a7:8a:19:e3:35:7b:19:7a:e6:c4:c1:11:
05:4c:79:b3:21:1a:88:e6:d7:9c:e1:96:42:fc:ae:1d:4d:1f:
2b:ca:13:5b:ee:c8:79:cd:1f:f0:8b:fe:0b:e5:ec:fc:ae:5d:
da:6d:dd:fa:35:9c:2e:8c:91:78:22:ac:eb:ac:3c:1a:8b:4c:
af:3f:57:9d:14:61:dd:54:69:b3:5a:fe:50:ac:bb:7a:e5:69:
a4:0c:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:01 2026 by rpki-client