Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: lqTlVxEtKIP3EpFTkzzbxgW7ci4A4yHWr+z0mVOzX8g=
Subject key identifier: 0B:E7:EA:86:CF:9E:F3:75:91:AA:75:9B:A7:94:67:BD:28:B5:95:C7
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019FA14D31DBEA3DF83A1D64C69219DEE79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 189E
Signing time: Mon 27 Jul 2026 02:00:18 +0000
Manifest this update: Mon 27 Jul 2026 02:00:18 +0000
Manifest next update: Tue 28 Jul 2026 02:00:18 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: WQBAly/6jdHU5ToOUrGWD3xvjsBhpQw5+Vas+QtKM80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:31:db:ea:3d:f8:3a:1d:64:c6:92:19:de:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jul 27 02:00:18 2026 GMT
Not After : Jul 28 02:00:18 2026 GMT
Subject: CN=0be7ea86cf9ef37591aa759ba79467bd28b595c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:0f:11:ff:51:e6:29:9c:5f:ba:56:85:40:
fa:d8:7d:32:57:b0:7b:52:5f:3d:fe:b0:78:94:68:
cf:10:11:41:e0:ff:c0:83:5e:0b:b6:90:d5:cf:5d:
48:d2:e9:f2:41:fe:13:fa:b5:5c:e4:4d:fc:b1:50:
a8:cd:fb:11:18:3a:e5:ee:90:1f:c1:4b:5c:d4:bb:
69:f8:48:25:7d:de:46:02:05:69:a3:fe:c7:a1:2e:
98:2c:1e:9c:38:46:fd:9f:fa:2b:f6:ad:3e:84:8e:
5a:21:2f:6c:a6:e9:93:90:ad:78:eb:ae:28:e2:fa:
c4:4c:e4:cd:3e:65:62:9c:95:2d:f6:e1:bf:cf:22:
c0:2a:9f:c1:20:b8:5f:e4:42:3b:94:cf:1d:e3:7b:
96:7c:d5:ed:ec:f3:49:ac:0e:cf:d0:ed:89:91:49:
d6:09:15:1d:30:81:13:42:1f:50:74:82:c7:00:32:
21:e5:3c:1e:8f:a3:39:49:72:3a:09:e8:ab:cc:35:
da:ba:17:8e:5a:3a:ff:67:22:df:49:aa:bb:28:31:
ba:e6:36:3a:61:df:b5:19:a7:e5:d0:2d:da:a2:34:
f3:fc:5e:53:7c:24:02:39:0a:cb:8a:2c:80:92:a2:
fd:ea:32:1f:90:8e:41:53:63:a9:1e:8b:97:a9:a2:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:EA:86:CF:9E:F3:75:91:AA:75:9B:A7:94:67:BD:28:B5:95:C7
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:3f:68:ee:02:f4:8f:64:c7:91:48:3d:9a:45:22:f8:54:
65:93:48:0f:a6:62:62:de:4f:86:73:e6:bd:50:39:0d:22:09:
a1:42:10:f2:d7:94:d3:33:ab:dd:d7:32:5c:d6:46:8a:43:6e:
6c:ee:ce:2f:48:5b:52:60:c9:d8:2d:25:11:ce:b4:e1:20:56:
84:04:12:f3:65:37:7a:ca:ef:c8:55:46:27:fa:15:dc:39:4d:
15:07:a8:29:61:55:9f:ef:17:19:93:80:c6:f2:3c:33:82:6c:
e4:83:03:05:53:2d:59:0b:b5:15:10:04:bf:ce:98:0e:51:f4:
36:ca:72:fb:18:bd:f4:9f:b4:68:44:5f:c7:80:b4:20:a6:1b:
53:68:95:a6:ec:f7:93:b9:82:1c:db:c6:53:44:66:d6:d7:e5:
fd:21:c5:d8:75:89:05:11:d5:f1:91:5f:f4:6f:be:04:bb:75:
55:9d:e3:0f:d3:6a:2e:cd:9b:4e:3b:f2:78:d2:20:b4:73:69:
47:5c:d6:db:73:1a:e3:15:c9:9f:88:75:0e:b5:4d:3e:08:ee:
2c:60:c4:05:ee:d4:87:5a:d7:59:8a:b2:e6:fc:da:98:ea:78:
f3:b0:58:52:79:09:e9:22:f3:4f:13:1f:e4:8a:66:07:96:d8:
e7:15:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:36 2026 by rpki-client