Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: OeTRwOisCBoWH2RIjwKvPg5lYpCatDqfjwyle93lBzM=
Subject key identifier: 4E:B3:6D:65:41:0E:CB:B0:C9:A4:F3:75:0B:6B:59:69:E8:A9:1B:7F
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 019F92B6A24557EAF2AA570DC997B73D9EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 06:01:10 +0000
Manifest this update: Fri 24 Jul 2026 06:01:10 +0000
Manifest next update: Sat 25 Jul 2026 06:01:10 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: c/VyOsrDZgKHNc/nBFMXdqu4Xk9ERQS1qSHfcApnp6Q=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a2:45:57:ea:f2:aa:57:0d:c9:97:b7:3d:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jul 24 06:01:10 2026 GMT
Not After : Jul 25 06:01:10 2026 GMT
Subject: CN=4eb36d65410ecbb0c9a4f3750b6b5969e8a91b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:fe:06:89:d6:1e:3c:de:af:5e:1a:2a:1c:
56:de:6f:08:d0:25:79:90:50:c2:b1:5c:a0:02:ef:
31:d7:81:cc:6e:e0:08:36:d6:69:2a:9d:81:59:e9:
e2:63:ed:1f:20:0b:72:f6:2a:e5:2e:02:4c:28:60:
df:5b:17:ce:d5:07:19:1b:c6:93:7f:62:94:e0:4f:
44:63:ef:29:2c:ea:e6:16:d9:5b:d8:97:ae:e5:99:
ad:0a:37:aa:4b:54:52:db:ce:3c:22:97:64:a0:ec:
06:eb:e8:17:94:12:90:fd:73:a5:31:ea:41:61:14:
7c:42:74:50:c0:f7:08:80:84:af:b3:0a:01:14:c8:
b2:f0:e1:2f:be:af:7c:84:f6:74:82:b2:ec:29:83:
c6:4c:80:cf:d4:9d:b1:8d:87:86:b8:08:c2:a9:e5:
99:2a:16:32:78:4c:aa:29:22:d5:02:53:ad:66:93:
6d:e3:df:c2:1c:96:c0:cc:2e:3a:05:53:0a:1c:7f:
d4:89:e1:23:9e:28:c8:95:05:7e:61:23:4e:ee:74:
93:34:e5:43:ae:1b:ed:53:dc:2a:ae:b3:42:32:1f:
37:ff:0e:61:ac:28:a1:95:65:39:cc:9f:bd:b0:06:
9a:de:f1:77:1c:fb:36:9e:a4:a3:39:07:6b:c9:a4:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:6D:65:41:0E:CB:B0:C9:A4:F3:75:0B:6B:59:69:E8:A9:1B:7F
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:88:de:24:43:63:29:7d:93:05:b6:3f:a7:55:02:47:1f:
b0:1b:ac:5a:a0:56:d0:3c:91:05:93:fc:d1:4a:e4:af:6a:bd:
d6:44:ee:17:06:28:e6:46:f7:68:b7:ba:ee:9c:5b:c9:fd:be:
4a:4a:98:86:e6:0e:ea:c4:d2:7d:02:67:90:43:30:7a:e7:c5:
57:39:a6:4b:e6:15:29:38:61:7b:04:aa:37:97:81:85:b3:a2:
e7:78:47:da:dd:45:68:71:3d:c1:14:42:89:42:bb:0e:be:21:
9c:3b:0c:24:25:b1:3c:64:e2:07:91:3d:04:5a:66:83:24:04:
db:de:70:36:56:1f:f5:e5:87:84:c0:67:df:71:96:35:0d:9d:
5a:ba:f3:cc:35:e9:42:86:89:3c:1d:88:1f:6e:91:92:4b:c9:
98:70:3b:34:bf:bc:46:ae:15:65:81:59:6f:0e:c3:04:c6:ed:
74:e2:14:33:96:d8:e5:92:1b:a1:de:63:bc:1c:b1:f4:52:1d:
78:49:ea:a6:b9:50:4b:3b:89:d0:a9:4d:79:07:00:82:84:5c:
b5:7a:57:a4:6d:e5:5a:d2:33:c6:ab:6e:47:de:a9:09:09:64:
01:2b:57:89:81:ab:27:f6:f4:ca:02:83:d7:01:34:13:53:66:
08:e0:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:00 2026 by rpki-client