Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: ZyL73w3skJ8jFC5HMBJ+PdSoj95wPXjziIfG3zJx6vM=
Subject key identifier: 77:13:79:4D:F6:1E:C2:87:4E:A2:8E:A8:6E:70:10:03:EB:36:A1:E9
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019F91DAE9BC830A2A7C712FDF914F779699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:01:10 +0000
Manifest this update: Fri 24 Jul 2026 02:01:10 +0000
Manifest next update: Sat 25 Jul 2026 02:01:10 +0000
Files and hashes: 1: 13v4LR-kEjAIRzbDQkbfPRC2xqA.roa (hash: I9za9QTYUmGMdQFI8DmW9yvA4iSaksBWoeOdAw7Bnjc=)
2: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: WQkNF7bhP7Eb2DtqbC7309ANwPxZPQjD/7uecEnkJII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e9:bc:83:0a:2a:7c:71:2f:df:91:4f:77:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jul 24 02:01:10 2026 GMT
Not After : Jul 25 02:01:10 2026 GMT
Subject: CN=7713794df61ec2874ea28ea86e701003eb36a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:72:87:f5:88:bd:78:de:98:94:75:d2:36:
58:97:f6:f6:23:10:5f:89:a8:ee:81:8d:d4:b0:0a:
fe:ea:79:db:e3:20:14:7c:84:c0:4f:6c:35:a8:98:
2e:7a:27:5f:50:78:34:23:6d:83:33:7a:25:de:98:
df:f9:8a:17:97:7b:9d:e0:ac:4c:71:8f:85:65:09:
11:17:a8:60:53:8e:59:35:73:13:ef:e1:40:56:cc:
21:4b:70:11:71:1c:a5:a1:a2:cf:f1:7b:81:59:e4:
7f:79:2c:ac:f7:d2:85:bf:28:d2:96:85:2f:fb:46:
d7:9c:9e:33:10:13:71:90:2f:15:26:8c:c1:74:94:
a3:25:78:8e:f5:66:b0:18:7d:b5:b8:3e:e2:dd:4c:
2a:a2:ca:70:d3:eb:ae:d2:0f:85:ba:c4:4e:8b:35:
2e:f8:6e:fa:24:90:80:b3:eb:bc:81:25:c4:e7:ca:
64:e4:2c:20:ae:1d:ee:97:dd:af:04:a2:74:fd:45:
61:0e:80:ee:09:54:87:b9:e7:9e:18:d8:d7:63:e0:
ae:7f:6c:b1:d7:28:36:91:e9:33:88:1a:23:6c:56:
47:6d:8a:9c:00:9f:0e:23:5b:4e:54:5f:e6:dd:0c:
a2:b4:9e:43:ec:c1:5a:f7:8c:5b:88:bc:32:ec:94:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:79:4D:F6:1E:C2:87:4E:A2:8E:A8:6E:70:10:03:EB:36:A1:E9
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:60:23:9d:d6:a1:83:b1:d0:9f:b3:d0:d8:ae:d3:91:c8:
c2:5e:8a:08:ae:27:64:38:0d:00:1d:9d:0e:cf:9f:9d:6e:cb:
aa:2b:f1:cf:67:07:5e:3c:e8:9e:7d:f1:3b:4a:2e:d7:10:6d:
09:fb:7b:6f:32:af:fb:60:29:99:9f:2b:3f:63:1b:ea:f4:d9:
2b:98:3c:62:2b:1d:0e:ed:05:1c:90:b4:ca:b2:a5:55:37:69:
01:23:b2:b1:35:83:34:05:83:45:71:67:be:3f:7e:bd:bf:53:
8e:98:37:c0:aa:60:d3:51:71:5d:65:3f:f8:a1:83:9b:67:1e:
6c:d7:20:69:38:94:8e:6d:aa:bd:b9:84:76:e9:49:f3:94:c1:
69:fd:74:1a:76:55:97:3d:63:2f:19:f4:24:72:12:20:12:9b:
d3:7e:34:6e:91:fc:98:76:80:0d:a3:47:87:13:22:de:6f:b5:
18:d3:48:05:66:8f:8b:d3:5a:77:24:86:45:64:15:ac:d3:37:
1d:4c:f5:67:62:f4:88:b4:32:b5:8d:e4:be:85:dc:c0:06:1e:
85:8a:d7:e8:8e:9c:4e:61:cf:31:be:90:d5:7a:e3:cd:0f:c1:
92:66:02:ef:d6:4f:3f:d2:6d:e5:1a:e9:c7:f7:88:2d:42:fc:
93:60:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:37 2026 by rpki-client