Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: zM5aR/QMZT9kmYtapc/I7s+q3qv1xpLbyaQvjZjPRd8=
Subject key identifier: 3B:CA:FC:19:20:A0:88:B0:EC:7E:88:9C:6F:3F:CD:58:0A:B0:F1:7D
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 019F935B3669034D3125BB765AC052A799B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 19E5
Signing time: Fri 24 Jul 2026 09:00:56 +0000
Manifest this update: Fri 24 Jul 2026 09:00:56 +0000
Manifest next update: Sat 25 Jul 2026 09:00:56 +0000
Files and hashes: 1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=)
2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: BQwRIU8gPnWXxoTWf31RUO0cFHMJcIq+OCY7p7MfXDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:36:69:03:4d:31:25:bb:76:5a:c0:52:a7:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Jul 24 09:00:56 2026 GMT
Not After : Jul 25 09:00:56 2026 GMT
Subject: CN=3bcafc1920a088b0ec7e889c6f3fcd580ab0f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:3b:0a:bb:a0:6b:f2:38:66:2f:e1:e4:55:
e5:03:10:28:f4:0f:e3:90:0a:f8:a5:9e:e1:91:fc:
bb:fe:f9:4b:d3:90:9c:da:98:9c:e9:66:5a:66:9d:
82:69:5f:9a:cf:b1:e8:ad:41:54:68:ea:16:b1:82:
a0:4d:6e:79:d1:b3:a4:f0:75:99:2d:d4:25:66:49:
74:23:41:8a:70:91:7d:4b:26:f3:fb:60:fa:c2:01:
74:71:60:c8:2c:7c:40:fb:49:30:d2:00:e1:21:f2:
f0:21:2e:d7:ad:7a:78:50:38:a3:01:92:16:63:0a:
a0:00:e7:04:60:ed:2a:d0:17:87:4b:64:4f:8c:b0:
07:f8:bd:16:53:74:14:35:12:92:21:c0:94:99:33:
13:90:c8:ee:3b:9f:62:19:07:9e:10:52:7c:01:b5:
94:af:19:63:ce:d5:88:9f:69:d7:8f:b3:4a:82:ef:
a4:1a:e8:d7:9d:08:81:63:3c:8b:9a:25:a1:20:29:
02:30:70:6a:04:1f:23:4d:b6:ca:a3:4f:6b:26:8e:
7e:d5:54:e8:e9:fe:46:68:e0:6d:c0:4f:74:c1:0d:
9b:7e:1c:f4:8d:7b:b7:3e:d3:c7:95:0a:c3:5c:e8:
1c:98:20:ef:7b:2d:f1:02:63:3e:23:fb:7f:1b:bb:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:FC:19:20:A0:88:B0:EC:7E:88:9C:6F:3F:CD:58:0A:B0:F1:7D
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:de:e3:b4:ae:8e:14:4f:77:2d:6d:e0:2f:20:a1:1b:c6:53:
78:b8:e0:4a:75:b2:0d:d6:9e:0e:6d:64:91:ae:03:1f:4c:e7:
4a:4f:39:71:36:44:13:67:26:d7:07:74:ea:01:6a:64:ac:29:
7b:81:9f:9f:84:24:3a:77:fd:8a:cb:5a:46:89:7a:eb:11:af:
93:a6:eb:2e:7c:70:44:c7:a0:d1:b9:b3:d9:ce:07:60:c1:a9:
e0:c8:46:47:0e:11:82:63:48:f9:14:78:16:78:49:4b:5b:2f:
0c:22:85:bb:6f:19:b0:16:86:10:be:b5:b0:0d:ca:67:0e:8c:
91:b4:75:06:13:6e:4e:4a:df:1f:ba:39:f2:18:76:21:9e:dc:
47:f0:77:71:ed:30:f0:31:a0:e2:19:0e:2a:8a:6b:97:16:22:
48:28:cb:26:58:b6:45:b9:a8:a7:86:e9:ac:f1:4e:16:65:90:
f9:90:7f:49:3e:00:d3:9a:b5:5e:03:62:b9:a1:78:4b:44:99:
83:03:1a:73:72:53:f4:e6:d0:7b:9e:19:f1:b4:e7:d8:19:96:
76:a1:97:a7:b6:47:52:68:34:2a:59:bf:b1:85:3e:4f:fe:31:
ec:da:39:a3:95:69:b5:42:a9:ac:f6:60:0e:b6:f5:41:ea:bb:
50:07:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:34 2026 by rpki-client