Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: N8R/KUioulCNbu8AiVGMqvpWAjUavibM0+Yi5VgVdIM=
Subject key identifier: 10:2E:D5:A3:52:5D:65:52:1D:65:A5:D6:4D:19:85:27:02:A7:24:FD
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019FAAF5D58DD371D7F172593AAD4C49EF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:05 +0000
Manifest this update: Tue 28 Jul 2026 23:01:05 +0000
Manifest next update: Wed 29 Jul 2026 23:01:05 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: NsnK3C1QJEwkmRp6LhinUpcW0X0/FUYICoIrCTjt0bo=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d5:8d:d3:71:d7:f1:72:59:3a:ad:4c:49:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jul 28 23:01:05 2026 GMT
Not After : Jul 29 23:01:05 2026 GMT
Subject: CN=102ed5a3525d65521d65a5d64d19852702a724fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:bf:fe:a2:08:90:24:33:d3:e9:95:01:e0:
6c:9d:f4:26:f4:9a:13:9d:54:cf:9a:fc:ae:35:ca:
fc:7a:1c:c6:6f:79:d9:1d:1b:2b:8d:d3:53:c0:47:
87:8b:6b:5d:a2:db:59:70:a4:64:c1:ca:64:08:65:
0f:46:b6:b3:83:4d:66:01:95:7a:70:bb:fe:63:46:
d3:b5:80:42:83:3d:51:d7:a5:a3:36:19:cd:a5:75:
df:44:46:1f:11:86:de:94:49:a9:d3:4a:28:b5:ec:
09:b0:78:31:fa:90:82:69:0a:78:a4:34:96:6e:e4:
48:12:65:05:4c:05:be:a2:da:d9:b4:4e:12:ab:a0:
56:a2:b3:08:98:5d:e0:de:f9:f3:40:7d:97:28:69:
3f:56:81:36:5f:52:54:ae:01:93:e2:75:fd:e1:40:
88:d3:fd:a2:46:59:a4:88:5c:42:92:de:76:8e:99:
e8:17:9b:98:6a:3a:f4:e0:92:6e:39:00:46:1e:3e:
01:3f:36:25:98:65:52:96:6b:c1:9e:2f:1d:4e:cd:
48:ea:a6:0a:7a:cf:83:77:63:bf:e6:be:b1:c9:53:
b5:f3:31:63:34:5c:3f:99:a5:d0:94:5b:64:e5:e6:
75:f9:2c:02:a3:b7:c4:44:7c:47:48:a3:a4:73:18:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:D5:A3:52:5D:65:52:1D:65:A5:D6:4D:19:85:27:02:A7:24:FD
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:79:30:4a:06:25:c6:2c:22:1d:79:4f:5e:3a:1c:f5:03:c4:
79:38:7e:aa:66:df:9a:4d:eb:33:bc:fd:73:fe:69:76:24:b5:
1f:cb:49:b8:3f:24:4d:97:bb:3a:0e:30:72:9b:67:c5:a2:94:
6a:ed:27:ac:6a:f0:dc:12:09:cb:5a:dd:ed:6b:59:98:e5:5e:
3d:af:07:a2:64:62:12:45:78:32:0c:f0:a4:5e:e1:23:38:21:
4a:63:8c:e0:bf:68:38:72:c4:7f:9f:72:68:ba:c7:ad:02:05:
33:63:87:e5:5d:ff:46:ca:39:57:4f:fc:69:05:7f:75:37:91:
9f:ed:41:21:f3:9f:f5:43:0c:7a:17:6a:53:66:35:34:57:c9:
69:39:b3:c2:0d:c6:b8:e0:e6:b4:64:40:c4:b0:db:a6:1e:e6:
7e:bd:97:de:8b:08:34:92:ec:83:0b:a8:fc:ef:14:c8:f6:f3:
bb:0d:ea:27:e5:16:95:58:a1:02:90:6e:92:62:91:2d:a8:39:
11:e5:83:1e:6e:07:63:be:dc:ae:2f:fd:da:6f:a7:df:ad:65:
b3:cf:8c:69:b7:11:89:3b:72:3d:09:4c:fc:e3:37:1c:0d:10:
3d:fd:b5:6d:ad:7f:fb:a9:90:09:1b:37:fe:45:58:78:a2:f8:
67:6c:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:22 2026 by rpki-client