Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: cWosmi35W5+d6di/yOtTH+pWlJPPX7CE6PjSiviNYVw=
Subject key identifier: 55:0C:D4:EC:60:32:92:6B:E9:C4:AA:13:7B:3B:C3:68:D8:46:14:AA
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 019FAA50A0B87183984A481FA84417E9369F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 068B
Signing time: Tue 28 Jul 2026 20:00:38 +0000
Manifest this update: Tue 28 Jul 2026 20:00:38 +0000
Manifest next update: Wed 29 Jul 2026 20:00:38 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: rPBiuzYuXCNyinN65fQhL7g0bnSp6o24Gf2Kg1cq04U=)
2: E0RxxjzRl6KI64LFqtZcLSw2L2k.roa (hash: +o4tGG4s2zr/f/sl2ZygwSP9jX+reoSK5d2HJjcm+m4=)
3: z6fjFNC5yY7s5rVC_18gdfOPVm4.roa (hash: UsutNgSzfSxKpzDA+6kQmVSCK+R6MBOFNeCYRGmkXwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a0:b8:71:83:98:4a:48:1f:a8:44:17:e9:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jul 28 20:00:38 2026 GMT
Not After : Jul 29 20:00:38 2026 GMT
Subject: CN=550cd4ec6032926be9c4aa137b3bc368d84614aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:3d:dd:35:1e:05:4e:5b:f7:d1:69:a5:3a:
5c:ff:a3:00:5d:75:e9:44:95:86:82:67:8a:d6:35:
09:e3:68:aa:4c:fa:41:5e:6c:94:85:da:7f:37:26:
d4:76:ae:00:a7:6c:62:6a:ec:cd:d4:41:d1:de:d3:
88:f9:f9:f7:05:26:a2:b2:19:2f:3b:da:58:cb:32:
0d:46:d6:9f:e8:7e:c3:e7:a3:e0:9f:4c:a8:3d:85:
a1:99:8a:40:1f:b8:5f:9f:3b:9a:58:81:91:7d:1d:
6e:e1:63:d8:54:b5:b5:b4:06:74:eb:e5:4f:83:19:
79:0d:e1:b5:1c:f7:b9:7d:62:bc:a1:b6:dc:69:50:
91:4a:04:ce:94:b5:43:60:5c:51:a5:a8:9a:89:f2:
8a:8d:ec:66:fc:3b:5e:c2:1c:fa:d1:dd:f5:7b:bc:
7e:fa:96:fa:1f:3c:28:06:99:d9:57:5e:ec:fc:07:
27:85:38:e2:68:fd:0e:c0:44:ee:ab:54:3a:ff:92:
fe:15:d2:91:6b:ad:12:0c:ff:36:9e:03:01:52:3b:
4d:7c:45:4c:52:6d:9f:04:95:eb:63:c0:76:9b:da:
77:b5:37:23:d9:a2:7c:91:24:40:1c:dd:4d:88:9c:
bb:bc:9c:93:3a:45:da:d3:3e:48:52:3b:c4:5b:78:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:D4:EC:60:32:92:6B:E9:C4:AA:13:7B:3B:C3:68:D8:46:14:AA
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:d5:c3:55:2b:47:57:08:0f:38:7f:11:d4:cd:79:5c:0d:
e9:78:98:95:ba:71:fa:9e:56:3a:81:2c:2d:89:56:b0:9c:83:
1c:da:74:aa:06:53:d0:71:b8:a2:bc:e1:81:fd:8a:f7:65:32:
84:c7:ad:9a:bf:7f:04:0e:5d:7e:ec:3b:c5:e5:88:3f:f6:b7:
bb:2a:47:fd:bd:9f:c4:f1:b2:0f:7e:be:e4:2d:1a:fd:67:c1:
77:42:85:03:0e:8d:c7:cb:fe:df:ca:f1:18:96:c7:c6:42:d4:
6d:17:82:5c:4f:94:09:16:29:fc:41:f6:13:d7:55:72:ec:e4:
1b:cb:ba:47:b9:0f:86:b7:e9:4e:db:ff:3c:a6:41:fb:3b:89:
b3:a5:11:f2:46:d2:ed:a8:57:8c:17:10:82:9a:38:21:d5:cf:
67:dd:ca:4b:a0:f2:a5:72:fd:ba:0e:c6:f3:79:34:a8:4c:52:
4b:84:11:56:0a:e7:25:be:fb:55:a4:c9:70:23:7f:f4:34:d1:
c7:04:ad:33:a3:66:28:52:64:35:9a:d3:83:31:a9:82:50:ce:
77:9b:36:d5:18:aa:fe:a2:13:67:b7:f2:63:e7:ed:3f:7c:e7:
d2:02:fe:c3:63:b2:74:f9:ab:a3:64:6a:00:a0:ba:9e:6f:f0:
57:f1:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:03 2026 by rpki-client