Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: lLdDQ7fV1/OZGR0VnseAXne/MG4xAqZPZ8CaGa0a+/0=
Subject key identifier: 8E:AD:82:CC:E1:34:91:16:6D:61:D5:0A:F7:AF:2B:5F:35:67:A3:6F
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019FA1F20252A8F2765029139F06843BD894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 05:00:19 +0000
Manifest this update: Mon 27 Jul 2026 05:00:19 +0000
Manifest next update: Tue 28 Jul 2026 05:00:19 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: US0xylhSbXopMg+G9cVCyh3tNqqTOe5geXGAMT5h5s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:02:52:a8:f2:76:50:29:13:9f:06:84:3b:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jul 27 05:00:19 2026 GMT
Not After : Jul 28 05:00:19 2026 GMT
Subject: CN=8ead82cce13491166d61d50af7af2b5f3567a36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:c1:ef:e9:e9:cd:ec:e3:e0:81:ae:cc:03:
84:58:70:50:09:17:67:7d:69:e5:2c:02:f3:91:c0:
2f:43:cb:e1:1b:5f:b7:49:49:f7:6c:d6:4b:d6:93:
8d:78:3e:7e:84:19:0f:70:07:4b:59:f9:a2:99:5c:
66:ea:00:1c:ba:4e:b6:ec:c2:28:bf:2d:8d:10:3e:
27:14:a8:a4:4c:ac:53:ee:eb:4d:78:9c:5c:70:5d:
42:77:fa:2b:77:37:bc:d6:07:68:bd:6d:29:4a:66:
ce:d5:b7:ed:90:28:df:8b:12:d0:aa:08:65:85:72:
2f:9d:d8:14:be:86:a2:d9:c9:65:99:f8:e7:97:4d:
7b:bb:69:d4:02:ad:02:dd:e1:b9:4a:73:fa:36:08:
dd:d8:ae:1d:80:86:d4:9e:3d:db:f0:5e:bc:3d:4d:
74:4f:23:f8:d7:d9:1a:ca:06:46:0c:2a:c7:68:39:
d3:42:73:80:5c:2f:52:fb:56:36:8e:66:11:e0:36:
e4:d9:00:44:74:0f:fc:1f:72:d4:5d:6f:02:68:d5:
d8:2b:ef:a3:1a:2f:d7:de:e0:5a:15:91:c7:42:c7:
9b:59:42:0f:5b:a9:85:0c:c9:8e:bf:41:81:0d:eb:
ff:24:8a:40:ec:e6:27:6a:10:72:b2:f3:a8:54:d6:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:82:CC:E1:34:91:16:6D:61:D5:0A:F7:AF:2B:5F:35:67:A3:6F
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:96:b4:92:eb:50:07:e1:d7:0a:8c:ca:30:12:c8:80:ad:47:
3b:d0:e1:8c:8b:36:5c:1d:33:e4:ef:03:89:6b:c6:0a:c3:96:
38:cb:f2:42:ea:e6:fe:a8:55:0d:9b:40:d6:6b:e2:32:73:aa:
e1:ad:63:eb:0a:f6:62:58:cc:29:ee:ee:7f:72:21:cf:f2:bc:
03:25:23:eb:48:c1:0c:e0:18:2a:3f:ac:5b:6f:af:b6:45:a8:
c1:40:8e:8e:98:a4:98:a9:42:9d:a0:b5:5e:3a:71:d8:a9:12:
26:cc:e5:de:01:82:33:32:9e:6d:3c:d5:e8:c5:6b:0e:be:b2:
85:76:a5:15:96:bd:67:bc:94:12:e9:35:a8:86:b0:ac:dd:f5:
d7:4a:7b:5c:a7:32:77:1e:f5:45:6a:8c:32:df:7e:aa:48:1e:
5d:ee:f1:88:c4:a4:3b:42:ce:96:8d:28:0f:54:f4:99:38:27:
c0:0d:2a:b6:76:1e:76:dc:b6:a1:fb:7a:5f:53:51:0e:60:be:
d6:00:52:01:74:2e:4e:ff:9b:b8:e3:b9:4b:d1:3a:2f:82:4d:
2a:33:bb:bd:54:b1:f4:99:72:7f:c6:a2:f0:e0:e6:99:51:0f:
91:8d:38:42:31:20:24:1f:cd:3b:25:a5:01:9d:ef:a9:dc:08:
19:3a:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:10 2026 by rpki-client