Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: orGnop1Rzphp/p0W9oLvPKrANQWyiJHGRRRfxElDeqc=
Subject key identifier: 7F:2D:B7:2A:A9:27:03:5D:F0:42:ED:CA:37:2C:2C:6D:46:68:1B:0F
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019F93C943699CE6E5719F1E67A4EF580D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:01:08 +0000
Manifest this update: Fri 24 Jul 2026 11:01:08 +0000
Manifest next update: Sat 25 Jul 2026 11:01:08 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: NlM6hnVSpmH1q8ORbLD0BZFG+josCBo5n66tK1AL3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:43:69:9c:e6:e5:71:9f:1e:67:a4:ef:58:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Jul 24 11:01:08 2026 GMT
Not After : Jul 25 11:01:08 2026 GMT
Subject: CN=7f2db72aa927035df042edca372c2c6d46681b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:c8:ae:bb:a6:1f:90:4a:5f:47:82:5d:83:
04:35:a7:52:a4:6f:2c:37:4c:73:25:b0:60:24:79:
9b:c7:28:99:51:36:29:3c:34:3f:b4:3b:c1:9a:b9:
87:6c:6a:b5:00:3f:bd:33:80:c0:48:45:be:27:f4:
b2:99:67:56:41:ad:c8:2f:a1:2c:78:3d:00:77:5b:
56:a8:20:01:65:d9:59:23:bb:eb:1e:c5:e5:a7:00:
f7:12:9d:8d:cb:c5:a6:63:06:c5:61:89:26:e2:99:
7f:9d:bc:44:d7:9b:28:7f:fa:b3:1f:02:fc:ab:32:
fd:66:f2:73:a2:51:23:fe:2a:60:ec:fc:69:73:de:
cb:c4:a0:58:37:05:3f:f3:27:49:4a:b3:da:45:9b:
c5:2c:3a:4f:81:5e:10:22:7c:82:9c:bf:b1:2d:fa:
86:84:63:0c:d2:14:1b:c5:3b:5f:ae:e4:38:80:f3:
58:f8:d0:6f:38:0b:03:06:6d:ec:27:bd:ba:10:99:
d8:95:0a:91:28:13:fd:ca:e3:be:7a:0a:04:94:30:
db:1d:25:5f:32:51:9c:6e:3b:fd:a7:80:56:f8:cc:
ea:e5:8b:e5:9b:8b:85:17:52:c0:00:fd:0b:ea:62:
0a:b3:f5:07:37:72:d9:92:64:e1:75:c5:ee:69:a8:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:B7:2A:A9:27:03:5D:F0:42:ED:CA:37:2C:2C:6D:46:68:1B:0F
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:e7:50:25:29:36:78:94:6b:2d:7b:dd:5a:cd:eb:9a:94:
6a:76:ad:02:af:bd:ce:93:93:ef:0a:6f:e4:7f:4f:58:c4:7e:
3a:a3:1c:fa:0e:6e:b2:92:c9:f2:fc:de:4d:c6:63:8f:6f:18:
a8:24:67:91:cf:45:86:82:5a:a2:7a:88:0c:ad:17:c4:2d:92:
15:57:95:78:5d:df:56:14:2b:36:98:5b:fb:24:48:b7:92:23:
62:c7:28:7c:19:68:ec:a6:64:a6:88:20:f3:fc:ed:e0:79:db:
63:72:f4:7d:55:d6:d1:fd:8b:d1:01:39:c1:bb:7c:36:40:84:
8b:88:82:e0:d4:b7:b9:6f:5c:a0:c1:db:e3:bf:f6:0e:90:82:
80:64:21:f4:57:de:a4:9e:e2:4b:65:98:4b:0a:35:3a:62:69:
5d:00:21:8e:0e:6d:ac:f8:90:05:b3:1c:47:56:5f:13:a7:b7:
43:f8:85:9c:99:6f:5c:2c:aa:9a:67:b9:ef:9c:6b:e0:b4:90:
f7:c6:49:a8:a7:fd:4f:3d:cb:ef:17:65:29:90:1b:44:8d:84:
c4:a7:81:78:8e:1f:bf:b4:f5:bb:85:0b:2b:96:b7:31:26:6b:
a9:70:57:7e:19:be:30:51:b2:f9:63:6c:9d:7a:0d:a4:81:ed:
49:ab:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:47 2026 by rpki-client