Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: 05IfxfpWulou3+f7ytACDGzFf5G0xboNMUMsm8vVwvM=
Subject key identifier: 26:12:D2:87:FF:75:8B:C6:6F:3D:03:64:07:4E:56:E3:D3:6D:28:43
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019FAB9A21A4C3402E5FEDB93177A18FE779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 02:00:32 +0000
Manifest this update: Wed 29 Jul 2026 02:00:32 +0000
Manifest next update: Thu 30 Jul 2026 02:00:32 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: 2Lau8RSn+3dMGCmVnsp2Y6YrFkxj4Dq3o7g4p3zx2yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:21:a4:c3:40:2e:5f:ed:b9:31:77:a1:8f:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jul 29 02:00:32 2026 GMT
Not After : Jul 30 02:00:32 2026 GMT
Subject: CN=2612d287ff758bc66f3d0364074e56e3d36d2843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:aa:f7:9d:e3:72:25:b9:c2:86:3a:0f:73:
25:76:a8:0b:ee:50:d8:41:0c:a0:cc:98:ae:a9:37:
b4:9c:81:33:da:44:4f:14:95:5d:e0:5b:cc:2b:28:
68:86:e8:a3:f7:f8:23:ba:00:d0:39:9b:b1:3c:e0:
05:19:ee:a1:d9:e9:95:e5:b6:b3:9d:eb:fc:45:3a:
5e:a1:87:99:0d:1a:20:25:de:5d:d9:79:7f:1e:3a:
f9:9b:1a:59:14:30:39:75:75:99:d3:ef:01:a2:06:
a8:0f:84:94:6e:c9:a8:0f:30:8b:dd:ac:a9:04:42:
70:ad:c4:99:5c:6d:8c:2c:0b:70:3f:dd:47:98:89:
0e:fe:df:b9:cf:17:e5:9b:50:ce:ae:f7:3a:0d:fb:
e7:07:1b:59:bf:be:ed:b0:55:80:e6:11:d8:24:72:
6a:21:6d:e4:3c:87:ea:32:d5:81:ad:dd:9a:5c:50:
d1:73:ae:0c:6a:48:49:4a:59:99:6a:66:40:19:bb:
e0:0f:45:65:3c:55:b3:d2:af:a0:b3:bd:15:cb:d7:
14:3e:aa:d4:f4:32:36:cf:16:4e:88:bf:ab:dc:9d:
73:d3:51:20:0d:01:d6:02:37:82:a2:b3:87:18:98:
80:5f:f4:53:d6:b5:af:60:20:76:59:62:1c:28:84:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:D2:87:FF:75:8B:C6:6F:3D:03:64:07:4E:56:E3:D3:6D:28:43
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:53:bd:59:c6:31:bb:1a:fe:e0:4e:03:93:b2:e6:56:61:8d:
47:1b:ac:52:1a:7e:a2:de:f1:99:64:7f:99:98:6f:3b:4b:0a:
12:73:64:76:11:c6:a0:23:04:dc:e4:8f:55:5d:e9:f8:22:84:
e6:cb:e8:b1:a5:75:6c:ce:98:cc:81:d6:9f:2d:b1:63:da:33:
e3:51:f0:d0:96:92:c1:ef:ad:c2:8a:ee:1e:68:1c:c0:31:3f:
71:45:61:56:12:40:f3:ec:13:0e:ce:16:ea:13:cc:bd:61:f5:
89:3f:02:c3:86:a6:6a:03:e5:63:04:f6:2c:95:48:bb:29:a4:
06:90:cc:25:3d:92:ea:11:72:0f:49:73:8a:8c:d6:96:28:63:
f2:55:eb:67:fd:e5:a9:89:48:26:31:19:aa:bf:6f:9d:5b:33:
63:2d:2d:60:40:ab:3f:a3:78:c7:03:b1:d6:28:42:d2:ae:4b:
3b:56:03:5d:e7:ed:34:f2:f0:78:66:5a:6f:ff:6f:80:f2:b6:
dd:55:61:24:7c:89:06:2c:ba:1f:c5:e9:52:3a:b4:4b:3c:fb:
a9:91:8c:25:59:c2:3c:c5:ca:1f:4e:65:da:88:02:58:66:72:
57:3d:1f:bd:7d:e5:41:7c:ca:b5:93:bb:89:9c:7b:41:b2:c1:
35:3e:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:35 2026 by rpki-client