Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: XT2CaR3Y9x75IeWBg47NQaEJsRwlfW0wlPs4YqnPILQ=
Subject key identifier: 12:76:74:7F:65:BD:74:3C:1A:E1:A9:95:5D:72:52:79:6B:75:1F:A2
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 019F9EF1EAB7A74FB610C12AEEA98D0872ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 19EB
Signing time: Sun 26 Jul 2026 15:01:22 +0000
Manifest this update: Sun 26 Jul 2026 15:01:22 +0000
Manifest next update: Mon 27 Jul 2026 15:01:22 +0000
Files and hashes: 1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=)
2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: f43A7SQNdLAv5XMdd/iSYMvvgLrpYcpYP7c16FKbMJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:ea:b7:a7:4f:b6:10:c1:2a:ee:a9:8d:08:72:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Jul 26 15:01:22 2026 GMT
Not After : Jul 27 15:01:22 2026 GMT
Subject: CN=1276747f65bd743c1ae1a9955d7252796b751fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:4c:a1:de:79:4c:af:a2:d3:e8:b6:b5:c4:
ae:8e:37:2e:ab:35:0d:bb:52:71:22:e2:07:6d:54:
06:9f:09:cc:ec:ba:dc:75:d0:c4:40:88:a8:59:42:
e5:08:26:0a:2e:c2:2a:2d:cc:e5:9b:98:9a:1e:16:
b3:85:1b:51:10:f9:40:c1:f1:2f:1f:34:69:2c:ab:
aa:64:c3:1f:83:ec:bf:39:8b:a7:a1:03:62:f6:61:
3d:68:b9:ae:13:50:16:98:12:7f:cb:79:9f:31:9f:
a2:c9:46:9d:48:ec:9b:ae:75:05:8a:68:80:d0:d1:
72:23:f0:a1:a0:d2:8c:cf:a7:f4:2a:6b:73:39:f0:
37:26:f7:e3:42:25:e6:0c:b4:0e:f3:11:f5:3f:df:
50:37:a3:b2:f5:ec:4a:07:da:13:08:6d:4c:f9:4e:
db:69:cc:bf:8f:c7:50:ad:8c:99:25:92:a1:b4:94:
67:fc:ff:8f:93:e8:b5:13:2e:68:b5:f3:41:b2:46:
70:ac:14:81:91:ca:1e:b3:62:b5:d9:35:b7:52:8e:
f7:55:22:33:00:4c:43:b7:21:73:4e:fe:06:25:e8:
54:db:87:9e:dc:04:44:34:91:95:9e:93:7f:ab:e0:
80:38:05:37:4a:f7:08:41:8e:c7:a1:c1:26:dc:6b:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:74:7F:65:BD:74:3C:1A:E1:A9:95:5D:72:52:79:6B:75:1F:A2
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:63:1c:60:23:bb:e1:06:2f:e6:9c:f8:d4:4e:bf:d8:c6:
3c:75:10:89:f3:05:8f:b4:24:20:f2:50:26:bf:c0:26:4b:cc:
af:cc:80:7c:dc:1b:71:35:f9:06:23:02:d3:e8:ff:59:74:25:
71:f6:c4:c5:60:2e:a8:54:b0:c4:66:36:e1:b6:cb:ef:7a:79:
b2:9d:68:ff:be:66:82:65:38:01:87:43:99:c3:8c:36:9a:08:
4f:5f:2f:0c:f6:95:72:10:73:fe:67:0d:8c:53:a2:9f:8a:39:
72:97:92:3e:35:25:be:a7:f9:28:dc:c5:e3:41:9d:80:38:26:
38:a2:50:51:eb:79:82:04:58:2e:1a:1e:27:c5:57:b8:a1:bb:
14:8a:e7:f8:11:c1:23:cd:86:85:e6:be:8e:b4:c9:ee:45:4f:
b1:36:cb:fe:c9:05:f0:73:b5:c2:14:24:33:9c:e3:01:50:e2:
10:79:17:c9:78:8c:45:f5:38:3b:35:00:af:aa:c9:93:66:ed:
b2:6c:cb:98:30:6b:1d:ac:aa:b0:18:8b:ff:c4:19:49:03:e1:
21:0b:03:58:32:72:3f:07:77:e1:4e:1f:ee:5b:3c:6a:0b:96:
27:65:69:c6:3b:ad:ac:20:41:4e:d1:89:e3:a7:45:f0:39:09:
4c:07:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:09:59 2026 by rpki-client