Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: wTlvmOSO3NBu13PvIL5DZOmE62Nyf3ihdRACmRiaRx4=
Subject key identifier: 91:28:89:03:B7:CD:B4:C3:1B:79:12:D9:DF:CB:75:FA:08:D2:D8:0C
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019F94A4997F907DDAAAF260EB0C7588188E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0EAA
Signing time: Fri 24 Jul 2026 15:00:42 +0000
Manifest this update: Fri 24 Jul 2026 15:00:42 +0000
Manifest next update: Sat 25 Jul 2026 15:00:42 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: HAE2NkeQUCQA1yCks1jQcal0NHGKzRT4/QKNzMKjI+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:99:7f:90:7d:da:aa:f2:60:eb:0c:75:88:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Jul 24 15:00:42 2026 GMT
Not After : Jul 25 15:00:42 2026 GMT
Subject: CN=91288903b7cdb4c31b7912d9dfcb75fa08d2d80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:59:8b:cf:8f:29:32:15:f5:ad:37:7e:97:
cd:5a:9c:cb:98:a9:1d:a0:ac:52:9f:56:6e:1c:ed:
ff:cf:0f:87:42:91:46:26:3c:64:05:90:82:63:d3:
86:4c:2c:3d:78:21:9b:14:bd:e1:a3:6b:3c:77:0e:
a5:b5:07:83:fc:a8:0c:2d:1a:72:73:53:39:58:91:
a3:4c:62:5c:d4:36:aa:c5:38:f6:3f:92:b3:69:72:
91:45:04:89:cb:5c:2a:0d:28:f7:1c:51:34:ea:08:
92:2e:60:36:45:84:2f:fb:cc:3a:b5:16:f3:bb:17:
af:a2:1b:4c:db:a2:05:14:45:65:3e:74:25:09:31:
4d:06:80:3e:7c:57:53:68:b2:28:d3:07:52:e5:91:
d5:0f:fb:ec:d8:63:f2:10:cd:ac:8e:c4:bf:a8:e7:
b7:d1:dc:5e:fb:9d:0d:02:89:40:9a:37:c8:8d:c9:
bb:48:40:92:1b:f3:36:23:b8:4c:3b:db:4e:30:86:
4b:f5:a2:21:a9:eb:19:0b:66:52:3d:cd:2a:4f:63:
d4:99:2f:01:6c:c1:08:04:95:7d:7c:29:fe:4c:1b:
4f:08:7a:ea:1b:6e:f4:52:71:c0:10:62:aa:73:2c:
0b:c3:6e:5e:d7:68:52:81:f0:75:5b:7f:8a:89:d0:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:89:03:B7:CD:B4:C3:1B:79:12:D9:DF:CB:75:FA:08:D2:D8:0C
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:73:20:3c:56:97:7b:e1:70:5c:54:27:cd:cf:7e:c8:0c:
ad:31:dd:8e:56:a5:52:d4:87:5e:86:96:02:4a:8a:b0:62:42:
59:ec:dd:cc:fb:f1:1f:3e:7b:11:97:d1:e9:ad:ae:85:64:e9:
b9:8e:f8:f6:21:3f:7a:69:d9:59:18:7b:4f:c7:2a:19:13:b8:
7b:33:48:a4:86:15:a7:13:68:ce:dc:36:7d:fd:2f:0a:82:d6:
95:d6:11:a5:4d:5a:fa:81:05:80:65:00:a2:f0:e7:0f:40:67:
cd:53:2b:f8:3b:ab:bc:82:95:87:7e:04:94:9a:5f:36:d3:9e:
b0:8f:66:d5:11:98:4c:8a:e8:50:9d:d7:49:1b:cc:03:0c:3e:
df:1e:6f:49:93:4d:ba:71:61:94:1d:b8:a2:9c:fd:26:b6:cf:
99:c3:42:aa:9a:95:43:33:97:ba:d2:09:22:b2:ac:2c:cd:5f:
21:78:71:fe:b1:bd:59:6c:d1:86:ce:b3:6d:c4:c9:7e:a9:d7:
d8:28:ba:30:44:ed:e9:ee:82:23:cd:52:a1:f7:41:63:10:e2:
ec:aa:9b:66:0a:41:8e:7c:ab:f6:e9:38:92:bc:4e:6a:58:5e:
64:f5:63:01:ca:81:e8:fe:a5:7b:a7:bc:c5:a4:4c:50:d4:d9:
ae:94:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:00 2026 by rpki-client