Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: ZekZRQem/Jr8YNigLnxDA03/ag66yBJx8/Wkud0Z+jU=
Subject key identifier: 94:7B:8E:9D:BE:83:77:79:A1:9F:94:30:25:9B:97:39:F4:22:FD:3C
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019F8F7EE175B5F48BC8C112AA33543AE80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 15:01:24 +0000
Manifest this update: Thu 23 Jul 2026 15:01:24 +0000
Manifest next update: Fri 24 Jul 2026 15:01:24 +0000
Files and hashes: 1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: rg5tAdmDqGH+CC8qXFR5qlK/dd9mnkV74nXlt85Ba20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e1:75:b5:f4:8b:c8:c1:12:aa:33:54:3a:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jul 23 15:01:24 2026 GMT
Not After : Jul 24 15:01:24 2026 GMT
Subject: CN=947b8e9dbe837779a19f9430259b9739f422fd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:0a:b4:1c:20:2d:e6:d5:fa:ad:57:bc:cb:
c3:33:d2:80:c1:84:72:22:17:d7:8a:0d:d2:f0:37:
5f:b8:33:7c:d6:da:ee:26:41:0d:e8:13:f8:db:2a:
70:75:18:db:a4:15:a9:42:7c:b7:7c:91:b2:8d:59:
be:ef:9a:46:5e:75:ab:a4:2e:c6:1c:7a:f0:7b:8c:
5c:e4:9a:c7:96:9e:cf:61:b3:b9:a4:e0:e3:91:5c:
63:ce:7f:45:40:bd:95:ae:37:33:da:df:e5:05:ab:
dc:06:b6:0d:9f:cb:8d:c3:83:96:4a:08:3b:f5:8c:
fd:14:35:46:f6:66:f3:90:bf:eb:7d:21:b0:1b:6b:
31:5e:af:d9:13:04:58:36:b2:2e:54:ab:69:15:95:
49:1d:94:4b:05:cc:56:5b:b0:ef:85:89:35:64:5d:
15:92:58:94:0b:3f:9e:d0:87:8d:1b:73:28:13:4d:
11:34:e3:0f:c7:26:f6:e8:32:25:a4:86:b6:cc:92:
0c:11:29:21:67:d8:dd:02:39:50:ee:a2:89:70:ec:
89:ca:55:f6:03:5a:e0:54:23:90:dc:53:e6:cb:45:
f8:d0:36:c8:a6:8d:20:c2:af:37:47:ae:5e:56:ce:
8d:dd:ac:c6:dd:32:e4:9b:92:de:a3:24:43:76:9e:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:8E:9D:BE:83:77:79:A1:9F:94:30:25:9B:97:39:F4:22:FD:3C
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ee:1f:58:36:ac:1d:e9:ba:5a:7f:03:bb:c9:7a:fb:06:14:
30:8c:8d:52:c4:40:b9:f1:d7:b6:96:4d:54:ee:44:47:a8:cd:
44:32:51:ac:9d:78:43:e9:f6:fa:d2:bb:f0:fe:29:ff:12:8a:
e4:9a:f9:9a:9c:68:a6:da:98:10:b5:3a:f0:0f:68:fb:3d:3e:
0a:52:f1:26:94:1e:c8:0a:95:13:b4:60:fb:14:6c:16:cd:8e:
a5:1b:6c:f8:98:c2:1d:5f:1f:ad:73:00:16:71:39:24:ea:68:
55:40:f3:e9:a4:cc:a7:78:36:87:b6:bf:5f:d3:e6:d8:b3:99:
01:6c:8a:d1:65:67:ff:a0:0a:02:e4:49:4e:ab:92:3d:f2:c6:
03:b4:69:c9:56:e4:3d:1d:5a:38:4d:34:1e:4e:32:2c:6d:ef:
27:ac:5f:26:f9:95:71:60:23:46:1f:44:db:8b:67:35:ae:44:
d9:89:5e:1c:74:32:12:af:9c:b1:42:91:e1:e1:54:89:24:c0:
29:d1:ae:f0:26:da:6e:1f:b1:94:80:c3:09:43:72:ae:d1:d8:
82:cd:c0:4e:32:20:22:24:6f:a9:cb:15:14:a4:13:6a:2b:43:
9f:2f:57:96:45:eb:71:ab:ba:8e:84:dd:6a:3d:cd:8e:45:89:
4f:e1:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:27 2026 by rpki-client