Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: ormqCCsP2py6JPCWxa1am89sWHlTVlmluj05qEFkhcM=
Subject key identifier: 46:F6:97:7C:53:D5:FB:2A:30:97:CF:29:D5:77:01:69:EB:7C:47:24
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 019F93C8F7DCCD79AAB831896326E6BF8108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: I5QC0Ig5GQYDyWOfeS8GaMrL0YniYRoW9q0rAI8DceA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f7:dc:cd:79:aa:b8:31:89:63:26:e6:bf:81:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=46f6977c53d5fb2a3097cf29d5770169eb7c4724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:be:f5:3c:83:59:56:f3:5f:b2:a3:d4:a7:
e5:f2:00:05:e2:85:71:e1:23:d2:ef:e4:4c:6c:95:
9c:4d:5d:66:c8:c4:a1:3f:5c:20:f7:5e:10:55:10:
92:62:68:43:c9:64:21:0a:23:4a:d1:49:df:11:42:
86:ec:ca:61:0c:a9:fc:36:86:c1:8a:f6:ff:67:bd:
ae:ea:80:79:1b:ed:01:3b:77:7b:b9:d1:4f:66:74:
1c:19:98:c6:98:7d:07:94:9f:c4:4a:37:08:17:61:
a8:6d:de:b0:66:55:d9:d7:8e:5c:0f:59:49:f9:19:
62:11:e6:59:3e:f3:3d:9b:ab:01:78:bd:62:ec:ba:
1b:c4:6f:93:59:0f:73:30:47:f9:87:d7:a1:a4:fc:
a4:6f:90:00:32:2f:8c:d5:81:91:38:ae:3b:41:22:
55:05:b5:a2:2f:8c:07:9e:9e:12:db:93:ba:ae:08:
38:c2:e1:4c:55:cf:82:a0:8a:98:1b:5d:c8:4f:cc:
c4:c0:34:13:df:96:cf:40:7e:85:03:a7:17:1b:9f:
9e:91:03:2a:0c:f8:21:89:22:7a:74:05:92:1f:3a:
df:37:e7:7c:51:ee:2f:15:63:73:f8:1f:fc:40:16:
22:67:f7:2e:e7:e2:86:68:56:58:f4:cc:5d:40:30:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:97:7C:53:D5:FB:2A:30:97:CF:29:D5:77:01:69:EB:7C:47:24
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:65:95:13:3f:3a:dc:c2:96:57:82:75:26:cc:21:89:13:
51:05:57:28:e4:b8:19:e4:24:c4:41:2f:5f:71:34:8f:51:ce:
e2:2e:ac:3b:1e:85:a1:1d:43:fb:b0:5f:d2:27:66:d0:57:1d:
66:2c:80:ac:96:8c:bf:bd:74:22:27:2f:41:6d:1e:80:64:ba:
3b:8c:7f:56:a5:c0:c3:c8:1e:51:55:90:6a:56:a5:42:cb:77:
58:18:cd:0f:fe:1d:60:2e:36:44:55:7c:a4:01:da:7c:b8:04:
fd:7c:21:a1:b7:24:ae:be:17:6f:bd:50:90:98:b2:d0:92:76:
02:a7:a2:6b:04:bb:55:e4:cd:9c:2f:14:45:d9:e3:f7:d6:14:
f8:bd:92:03:2d:78:19:c2:55:c8:d0:38:fd:b7:86:af:44:b8:
e5:8d:7a:12:14:ce:a3:0f:eb:b2:07:c5:22:9e:7b:24:c9:d8:
de:19:49:c0:4b:55:8c:2e:df:95:8c:9e:8f:71:d1:8b:96:4c:
44:42:aa:13:93:e2:bd:aa:85:d1:e9:d2:2b:dd:14:27:d5:3e:
bb:06:a1:3c:bd:dc:83:39:73:a5:ec:bb:e4:99:64:f2:8f:7e:
cb:0d:1c:52:e5:f2:7c:d6:51:c3:62:c2:c1:9a:36:ca:2a:5d:
1f:08:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:10 2026 by rpki-client