Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: QYPkdgTqutoTw9ulkiGqFgLGBuriCyDjPbU9JMrnfCY=
Subject key identifier: 13:76:1A:A7:B2:44:01:FC:BF:01:A6:C7:42:78:DE:FE:19:58:85:E6
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019FAB640936EA6C6C932DD93CA51F3AF373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 01:01:27 +0000
Manifest this update: Wed 29 Jul 2026 01:01:27 +0000
Manifest next update: Thu 30 Jul 2026 01:01:27 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: nTgvdRzsmBmDn2F1Wv+JHtqH2Ngrygd7a9eHiO+3dlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:09:36:ea:6c:6c:93:2d:d9:3c:a5:1f:3a:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jul 29 01:01:27 2026 GMT
Not After : Jul 30 01:01:27 2026 GMT
Subject: CN=13761aa7b24401fcbf01a6c74278defe195885e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:04:32:a1:4d:04:e3:06:7a:7f:14:6f:64:
eb:c9:1c:36:16:e5:a5:b6:6f:06:51:02:f2:f1:54:
38:f2:88:25:da:cd:e4:e3:80:bb:4e:1d:cf:7d:0b:
16:2f:5c:b5:24:9c:f8:8c:b4:1c:8a:0b:ab:2c:d9:
ee:5a:61:06:55:26:73:26:a0:52:a6:bb:e4:96:73:
2e:79:2f:c0:8a:11:b0:3a:23:1a:62:1d:23:f2:d0:
08:76:53:46:40:9d:82:4f:f2:c6:bb:74:d8:2e:f3:
73:a5:d5:63:bf:2a:3e:6f:8b:9c:9a:32:f2:80:88:
ae:f7:13:65:d1:e7:5a:bb:98:0b:e8:42:07:10:8c:
64:37:b3:af:ef:47:3d:81:d7:72:a6:11:1a:e5:6e:
46:4d:eb:29:e5:85:75:ef:d2:57:69:a8:5a:dc:f8:
7d:61:f5:ed:6e:84:8e:88:4b:97:df:f5:15:d0:e7:
ab:54:5a:25:ef:4f:76:12:3c:1d:8d:1a:4b:1b:30:
d4:cb:36:6e:13:4f:f2:b1:0d:7c:b5:5f:75:eb:5f:
d5:ac:79:4c:75:51:f1:23:d0:49:4f:7d:83:95:d8:
15:66:8c:d0:e3:fd:16:25:4d:66:7b:d0:d9:2e:9d:
36:d1:a4:c4:8c:e9:1b:c6:d1:05:85:9e:ff:b2:78:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:1A:A7:B2:44:01:FC:BF:01:A6:C7:42:78:DE:FE:19:58:85:E6
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8a:cf:96:72:c0:d4:d3:e8:66:0d:c4:9a:42:1f:5e:16:de:
a8:d8:c6:ad:3b:b3:1f:ad:0a:3e:72:28:8f:d5:ef:94:2a:59:
6d:ad:4f:5d:b7:65:48:c7:40:15:b9:07:6f:b6:5a:f2:31:9d:
e0:c2:9d:48:ef:8f:d6:75:39:f7:68:60:1b:32:19:5e:d0:e6:
93:54:ab:17:4d:1a:e0:30:b3:4f:87:eb:43:50:72:a9:69:8e:
a6:db:7f:30:1c:a4:0b:ea:97:b7:4d:ac:b1:e9:f9:8f:ce:c1:
5f:4e:3a:09:64:05:84:c1:f5:de:c1:1f:a0:03:39:b6:e5:a6:
24:0d:09:14:97:b9:8f:f5:64:fb:46:1b:24:50:9d:bc:07:d5:
81:7c:6d:2a:a5:d5:aa:34:42:47:fc:9e:93:69:9a:2d:f8:b9:
6a:d2:3e:5f:b3:6e:0e:22:81:7d:73:7e:74:c6:0d:43:2b:3b:
f5:7a:d7:34:f6:dd:be:15:18:ee:09:db:47:96:91:72:09:ae:
d8:56:3d:89:61:ba:c7:36:dc:50:f0:4a:55:7b:44:c0:fe:d5:
10:7d:15:1f:9f:61:a5:6b:9e:47:40:ec:bd:81:28:c0:65:dc:
73:dc:aa:08:75:f9:c6:01:9a:81:2a:d4:87:69:be:7a:02:66:
22:c0:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:59 2026 by rpki-client