Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: 5xc1Y3Bvtx1rZjzt8fbrgiSHAXSjXYbcbjPNr6i6WjU=
Subject key identifier: 91:2F:A1:B3:6D:24:05:A9:2A:43:9C:77:AE:49:0E:81:F7:1A:B6:6A
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 019FA82B2E6ED2FF1C7C6E2E19FB8C79DB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 1294
Signing time: Tue 28 Jul 2026 10:00:29 +0000
Manifest this update: Tue 28 Jul 2026 10:00:29 +0000
Manifest next update: Wed 29 Jul 2026 10:00:29 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: MfXE2N8vmYaKVhSVHqAY3SLRieHZAB2R/zrHrSGiRd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:2e:6e:d2:ff:1c:7c:6e:2e:19:fb:8c:79:db:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Jul 28 10:00:29 2026 GMT
Not After : Jul 29 10:00:29 2026 GMT
Subject: CN=912fa1b36d2405a92a439c77ae490e81f71ab66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:24:f7:7a:fc:61:9b:0c:61:9f:1b:e1:af:
4a:1b:53:59:2f:ce:06:ec:75:bf:52:6f:d0:3f:6f:
65:d1:c9:b8:de:1c:c3:a2:8f:db:c1:10:89:82:b7:
a1:07:39:36:91:ad:80:ab:e8:d1:94:59:b5:15:3d:
50:5a:a0:b5:67:58:83:d3:76:2b:b3:49:ca:4f:fb:
32:2f:37:d9:45:10:f3:86:e8:4f:02:94:dd:86:61:
f6:cf:be:be:10:7f:43:e2:3c:99:c0:ef:81:5b:6b:
25:9d:29:ee:d9:21:35:b4:0b:eb:42:94:66:20:46:
aa:36:92:6b:5b:5d:b7:7c:45:77:26:95:76:92:b5:
e1:31:d9:0e:29:73:76:52:b6:dc:29:29:7b:70:5d:
b2:64:99:ee:bb:cd:fd:8e:c4:98:a1:4a:a0:c9:f1:
0e:58:f4:79:d5:7a:8d:e9:23:a0:c6:b3:bd:ea:2d:
3d:98:b3:2c:fd:a7:a4:51:56:0e:ea:62:3b:f5:dd:
f7:7b:df:f3:14:f3:6a:ff:31:7c:01:30:1f:c0:cb:
92:b6:6c:14:29:0a:29:33:3a:71:9a:db:43:0e:d7:
fa:af:a9:34:a3:8b:a6:83:9f:c8:0f:91:6c:5b:a2:
00:6a:59:d7:e1:08:00:42:e3:00:7d:27:6d:c1:54:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:A1:B3:6D:24:05:A9:2A:43:9C:77:AE:49:0E:81:F7:1A:B6:6A
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:75:47:fc:73:55:59:ec:75:95:4b:7f:ce:10:00:b2:35:
48:e3:93:bc:c1:37:00:6d:e2:53:20:6b:09:a9:6e:4d:dc:1b:
0b:66:04:6b:ac:f6:8d:d1:4d:5d:8f:4f:80:83:bd:b9:ca:79:
42:f2:6d:00:3b:d6:3c:e6:d2:17:7b:30:fb:52:01:a3:e3:1b:
98:dc:43:3d:9c:7f:c7:8c:a7:27:65:c2:c4:5d:9a:03:1a:f4:
80:d5:52:11:45:22:0e:34:c6:8a:04:c7:64:a9:68:da:7a:a0:
e3:7e:ef:b5:c5:97:7b:f2:fa:58:d2:f5:87:92:3d:7f:1a:f2:
0c:24:f4:59:d6:75:ba:17:c3:8b:28:f8:fc:98:e1:a4:e5:05:
3a:48:29:17:16:4b:c9:60:c4:c1:ad:f5:11:e7:ca:f7:70:cd:
75:5e:1a:3b:f8:05:b6:80:62:26:b9:58:c0:b7:81:e5:3e:1b:
3c:c0:0d:69:dd:e1:52:59:ac:30:9c:4a:aa:84:35:75:ba:c2:
3c:eb:29:a7:81:29:af:92:23:7b:ba:fd:a5:1a:d4:f7:58:d3:
46:3a:de:51:20:18:de:8e:54:83:80:90:34:2e:8a:93:4e:06:
fd:d7:e0:b5:74:2c:75:b4:3e:e7:a0:37:e7:bd:49:7d:41:c7:
ba:8d:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:39 2026 by rpki-client