Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: RKWbMFPrA/9i9KeLq7qlapapmFHqFU5WOUBciyWRT8o=
Subject key identifier: FA:BD:40:11:84:40:84:23:2F:FB:00:68:06:1E:F0:BD:30:7F:B7:42
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019FAA875E27E52E90D386B10D3B6A0CA60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:25 +0000
Manifest this update: Tue 28 Jul 2026 21:00:25 +0000
Manifest next update: Wed 29 Jul 2026 21:00:25 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: tp+4bd8z445jSVq7kLBiPYAHeTtLdhPCQApFdCSVyes=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:5e:27:e5:2e:90:d3:86:b1:0d:3b:6a:0c:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Jul 28 21:00:25 2026 GMT
Not After : Jul 29 21:00:25 2026 GMT
Subject: CN=fabd4011844084232ffb0068061ef0bd307fb742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:25:80:be:92:fc:cf:20:7b:29:99:03:38:
63:87:4a:e5:b6:24:63:6f:30:8b:cb:42:d6:2f:b2:
9a:50:07:7d:7c:47:8a:1a:4d:67:d7:43:32:1a:1d:
7b:db:94:2c:b4:23:19:b4:80:6f:45:e2:93:4f:ee:
59:11:95:6a:8d:d0:86:63:97:e2:de:e5:e4:b2:04:
fd:af:40:6a:85:0b:21:c0:63:80:8f:bb:e6:0e:f9:
b7:cb:ba:fa:ae:a1:60:f6:e5:e4:f1:a3:b4:c8:34:
3a:25:63:31:af:b6:37:d1:c4:cc:f9:37:7d:6f:9a:
a4:13:43:f1:22:3a:a1:37:e4:3a:2f:c0:d0:e4:c9:
52:d7:2b:e4:be:40:34:2e:92:7a:b4:e8:b4:2b:e6:
62:ef:49:57:a2:3b:8b:55:b3:5c:a7:0e:18:c5:c9:
e0:26:3f:25:e7:82:40:c2:e3:fd:29:60:6d:6a:28:
19:3b:1d:cf:c1:7e:a6:83:59:18:39:f7:ec:96:c3:
0a:c9:fb:0c:3c:51:28:1d:d2:12:e6:02:25:f9:6c:
43:41:c9:1e:fa:e2:11:42:66:45:a1:d7:69:45:1d:
6c:7f:f5:b9:39:99:5a:a3:8e:59:85:55:39:27:49:
87:de:18:c1:3b:62:49:b0:17:7a:29:b2:72:a3:4e:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:40:11:84:40:84:23:2F:FB:00:68:06:1E:F0:BD:30:7F:B7:42
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:d9:86:0b:4b:c0:25:2b:a6:63:6e:12:c0:b7:e0:a7:f0:
78:41:61:45:1d:8e:71:ab:a0:9a:4f:5a:0d:7f:50:3a:75:3b:
d8:41:a5:2c:a3:6b:54:9a:d6:1d:5f:ce:6a:2c:57:26:9b:71:
c5:e7:5d:f9:8d:4a:7a:c0:37:84:6f:9b:1f:c4:60:b8:ae:b9:
f2:ad:f3:13:89:c6:e6:76:92:4d:64:59:c9:97:00:29:fc:d6:
a9:48:b3:d9:ff:89:89:c2:9e:62:35:3f:88:d2:87:e6:78:36:
41:8c:11:36:82:f2:50:65:6b:07:3a:2c:02:f5:3e:ed:82:ef:
f4:c9:07:03:33:12:77:ad:8c:f3:8f:e5:b0:a9:f0:fc:22:83:
be:1a:a1:a6:73:90:19:0e:20:9a:07:08:7f:e5:df:ac:02:11:
b6:c1:93:79:61:9a:f8:29:18:c1:84:10:cb:b2:d7:73:e3:f1:
61:f5:c9:16:e1:8f:96:9b:73:32:91:08:8f:69:75:e9:a2:22:
d1:c3:2e:36:09:53:3a:41:f4:7a:be:fb:4f:75:3b:00:31:6b:
dc:f3:70:f6:76:36:5b:18:d2:58:84:19:cd:bc:86:e2:3a:fe:
1e:01:18:8a:78:f7:21:92:02:b4:5c:7f:d5:6a:39:98:07:ef:
35:fb:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:55 2026 by rpki-client