Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: ei7T/+uwKoLfPGHlCRz7Jo2unSnwLOcz6XobYWkqtmU=
Subject key identifier: D7:5F:FE:E8:4D:C1:14:D4:30:2B:0E:C1:A8:53:8D:30:2B:7D:53:5F
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019F927EEFF3CF7017B4A5C0C39D2649BD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: LrZywacrnKqeL+i0bf/K38tFe4fM7mX+z+/Y7ue1RPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:ef:f3:cf:70:17:b4:a5:c0:c3:9d:26:49:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=d75ffee84dc114d4302b0ec1a8538d302b7d535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:af:76:96:a6:fd:1d:52:2e:66:10:5b:d0:
76:f4:05:68:7a:81:08:90:c0:ab:c0:bf:7f:fd:6b:
26:a6:4e:ed:48:33:64:55:dd:9d:e8:e2:fd:00:b0:
a2:a9:07:b8:8b:28:8a:9a:58:2f:29:38:35:28:eb:
27:c9:e9:5a:e2:24:00:b2:e0:86:cc:f2:74:7e:04:
f8:7c:cb:a9:06:27:1c:6e:da:9d:f3:59:80:ff:f0:
04:5f:21:62:c8:6c:9d:13:41:8a:44:3a:1b:ed:69:
82:07:fa:35:22:14:f0:ef:e0:87:35:08:c9:64:9d:
80:1b:f1:a2:a2:20:8c:1b:f8:ed:10:e4:48:45:62:
55:4e:33:23:7d:cf:5d:a1:ff:c8:c3:07:3a:14:fd:
ad:61:25:0d:00:d0:60:e7:b7:6b:12:9b:83:7e:88:
f8:73:e8:d6:39:6c:61:d1:0f:59:fb:a8:c6:02:68:
95:1b:45:bf:ed:06:10:2d:69:2b:a2:6a:ee:07:ab:
39:aa:09:79:bf:aa:0a:91:b8:fb:ae:e6:df:42:ae:
fc:ba:5e:68:26:7a:c7:a9:8b:bc:9f:3a:ac:53:57:
f1:b4:d9:e8:f6:47:06:f0:be:55:13:a2:93:82:a6:
fb:50:a3:41:51:20:71:30:34:21:2d:79:4e:5c:4e:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:FE:E8:4D:C1:14:D4:30:2B:0E:C1:A8:53:8D:30:2B:7D:53:5F
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:44:d5:b0:b2:7a:54:fc:b4:23:da:aa:b2:b5:ec:85:17:
ac:a9:bf:ea:68:23:62:bb:fb:0e:e3:2c:31:65:33:48:63:85:
71:70:b6:3a:01:fa:c8:b1:5a:2d:cd:80:a4:ef:55:a9:da:6b:
d2:7a:3b:63:32:c0:66:87:36:d2:8c:90:f2:1e:e0:f7:ea:04:
5a:30:51:03:e8:93:b2:14:a9:e8:62:04:ae:b9:78:01:88:1c:
0e:98:f4:f0:1f:9f:89:7d:49:7b:98:8b:db:4b:3a:73:02:9f:
5a:df:b3:e6:6b:25:0a:43:47:f8:1f:17:02:7b:72:56:93:26:
5b:6a:03:9c:f4:60:c9:d8:d0:d7:9e:e9:79:61:96:7e:65:70:
12:dd:95:40:37:31:01:cd:5a:f7:a7:24:83:be:63:66:94:36:
75:ac:76:18:36:a9:71:3e:42:c9:63:ac:15:a8:f9:90:31:be:
1c:65:7a:46:7d:ea:fe:e1:29:2f:de:0b:e9:10:87:27:16:c5:
46:9e:ed:da:66:24:b3:10:e7:7f:90:b0:c6:86:1f:d2:13:20:
e7:5a:5c:0c:e0:4d:5f:93:db:69:f2:78:b5:89:63:bb:05:a9:
6d:2d:7a:83:45:da:8f:56:91:19:b6:09:cf:48:12:04:b3:11:
a0:5a:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:26 2026 by rpki-client