
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: 6uoOi7wIp4dX/WycX4iWoaoeLhuf9Z17H/h8WTcFt4s=
Subject key identifier: FA:91:D6:3D:BE:F7:B8:CF:0A:FE:04:55:9D:8D:59:29:BA:64:5A:08
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 019F86445AF13AC0C1EE56408387132FFB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 20:00:54 +0000
Manifest this update: Tue 21 Jul 2026 20:00:54 +0000
Manifest next update: Wed 22 Jul 2026 20:00:54 +0000
Files and hashes: 1: 1-gfSrWkkPBhxthfW3JrHoJC9spI.roa (hash: Rnl0mmrjcLaqzVvTvP650dcar9MAaD9eI+jcraf6cdQ=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: nPybjhmfgtFm3cGjhvjGfCRQTm6n3YNR7rfBPo3atsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:5a:f1:3a:c0:c1:ee:56:40:83:87:13:2f:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Jul 21 20:00:54 2026 GMT
Not After : Jul 22 20:00:54 2026 GMT
Subject: CN=fa91d63dbef7b8cf0afe04559d8d5929ba645a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:f6:b5:0e:3d:98:fc:92:21:2a:37:32:1e:
f9:4e:28:05:00:62:35:43:24:d9:7d:72:39:4d:fb:
ca:2a:37:fc:85:48:0c:e5:eb:0b:37:22:2f:2a:c8:
a2:90:44:c9:10:77:04:7f:d0:60:55:df:8c:f4:4d:
48:29:2a:71:2c:5f:e7:49:3b:a6:41:53:cc:35:63:
ee:17:ba:6a:3f:c1:c9:9c:e0:18:10:cf:1e:ad:e1:
b9:a9:2e:a0:68:b5:24:3a:6e:bc:fd:02:c9:48:a5:
38:59:93:80:b5:df:6e:9c:9c:ac:88:7c:34:cc:df:
7e:f0:29:3c:b2:7f:ac:c4:bb:81:da:3c:08:50:02:
f2:8c:9f:d8:1f:e5:8b:9f:0e:db:b5:a8:44:64:4a:
c5:ec:ad:13:8a:6d:a9:f6:3b:84:23:e0:b2:2a:96:
36:6b:06:69:e2:34:2d:28:4e:35:d0:1c:61:53:72:
87:75:35:4e:c8:ca:23:18:b3:cc:40:94:ed:cd:7c:
33:1e:c3:17:f0:89:50:fb:06:ea:05:3f:e0:c3:77:
93:0d:40:98:e8:b1:70:91:22:c2:72:23:2b:9f:a1:
83:48:e8:94:d3:3d:b3:eb:3b:38:fa:1a:69:0c:59:
0e:20:8f:f7:5a:98:db:c3:86:af:59:83:86:dd:e9:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:D6:3D:BE:F7:B8:CF:0A:FE:04:55:9D:8D:59:29:BA:64:5A:08
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:dc:6f:c0:4e:a1:49:02:9d:79:c1:b2:f3:bb:bd:69:a6:
1a:6f:65:26:7d:62:18:44:c6:b1:f2:71:22:30:fe:80:63:16:
c3:d1:fd:ec:dd:5c:73:09:5c:4a:50:62:24:7b:84:05:e9:9e:
98:53:e6:64:16:79:9c:37:46:bc:09:71:74:51:d7:c9:28:75:
00:cc:9c:2d:7b:6c:8a:21:e2:c7:0b:ee:70:3e:34:96:92:83:
ba:c7:07:1c:e2:68:da:df:e6:d1:1a:14:17:43:1b:20:31:ee:
a2:c5:a0:07:11:27:a0:c9:9e:90:1e:48:bb:c1:46:48:35:42:
06:67:67:f2:82:93:39:73:ba:05:e9:d7:b4:a0:7c:a1:55:bf:
71:5d:71:f7:50:66:7b:c7:76:e0:b7:98:d8:f5:2f:0c:5c:69:
57:64:d8:62:f3:ca:e9:93:b2:33:a7:9b:db:ef:3e:88:3e:16:
6c:e7:7e:cf:47:0a:fa:73:c5:d3:a5:92:97:b3:b3:db:f1:35:
c0:31:65:f2:6e:8e:4d:31:58:59:ff:ae:89:3e:92:f7:a0:aa:
50:38:4a:ac:78:eb:66:72:42:55:85:d1:4d:b7:fd:66:65:71:
89:61:89:59:e0:77:a2:8a:54:6d:7a:b6:72:4c:c7:9a:90:c4:
4b:ea:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:07 2026 by rpki-client