Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: DZv/r1UHAESs4KUsezu2+BHi0uLjCmn+4Fu5WPUERq0=
Subject key identifier: C9:CD:E2:4A:27:7D:B8:67:7A:FD:46:4F:DA:19:F3:3D:0B:9A:A3:5C
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019F9091064F5B69D8BE85EF6439D8F0A49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:00:51 +0000
Manifest this update: Thu 23 Jul 2026 20:00:51 +0000
Manifest next update: Fri 24 Jul 2026 20:00:51 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: K0oK3zA9zPsZ6B2tKdRA/moaXzbtIpwPyVsGspqKRkc=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:06:4f:5b:69:d8:be:85:ef:64:39:d8:f0:a4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Jul 23 20:00:51 2026 GMT
Not After : Jul 24 20:00:51 2026 GMT
Subject: CN=c9cde24a277db8677afd464fda19f33d0b9aa35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:ca:78:49:7d:df:ce:76:04:13:a7:ec:98:
43:0b:3d:6b:05:42:b1:79:97:bc:91:26:0e:72:45:
58:17:35:31:b4:e8:a4:c2:a0:89:f2:7f:f7:df:fa:
fb:ed:75:82:54:b2:2a:f4:22:cb:58:4a:37:a9:11:
db:0d:78:4c:18:48:06:9c:4e:33:f8:87:90:d8:ca:
6c:4d:b9:c0:4c:8e:06:5a:c4:19:ff:9d:59:db:82:
ae:fe:e0:e6:07:65:3c:02:5a:f2:5d:da:fa:2b:65:
fd:7a:37:05:8d:d3:40:af:5b:01:e3:c2:84:48:9d:
cd:1c:91:e8:b1:10:71:d9:f4:5a:f2:a7:29:92:35:
f5:33:95:48:87:28:7f:e7:2f:31:f6:0a:5b:8e:b6:
51:a9:9c:3e:29:f8:a1:44:78:f4:5b:cf:88:1e:63:
29:d0:6a:0f:65:3a:4c:67:cc:2c:ad:ab:55:ef:09:
ce:eb:fc:cb:3a:00:0c:13:e4:dc:e9:3e:f2:e6:df:
ea:58:3b:b3:0a:eb:99:7d:3f:09:bd:34:24:be:66:
16:91:ab:b8:54:a5:87:9c:f1:b3:3f:ca:c9:69:af:
b9:54:6e:c7:76:09:e9:75:98:15:14:2b:8e:da:e3:
f6:54:6c:5c:03:8e:eb:cc:a6:9a:fc:77:3a:a4:0a:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:E2:4A:27:7D:B8:67:7A:FD:46:4F:DA:19:F3:3D:0B:9A:A3:5C
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:13:2f:8f:e6:83:2d:0e:23:f1:9e:f2:09:07:9d:90:99:
fe:c6:b1:cb:e5:15:7c:35:fd:b7:ca:8c:8f:9c:a6:50:41:90:
36:f2:71:e4:5b:66:96:d8:17:0c:e6:a5:7a:f9:ad:57:20:84:
2e:b1:b8:5c:d7:c0:29:48:99:75:39:c4:f5:88:06:d9:30:ac:
e7:64:25:71:3a:a8:9c:93:6a:57:83:61:04:8f:09:c4:d3:d5:
d9:44:eb:7d:f3:ff:9e:6d:5c:08:d3:f2:3c:99:03:e2:98:51:
af:1e:1e:0c:aa:f4:66:e7:70:39:74:79:a2:8c:bf:be:65:46:
1a:22:c7:fa:52:87:d7:b0:4a:ae:77:5d:9c:3c:a2:33:17:b7:
a9:45:bc:81:8a:f8:49:c8:07:ce:18:a6:91:be:e3:1c:0d:ca:
a0:d8:5e:73:e1:a4:13:df:99:d3:99:42:2e:f2:62:65:44:d9:
b9:96:c3:8f:e3:67:17:4a:14:d3:97:89:d1:8a:d7:c9:6b:e0:
86:d3:30:e1:e7:2c:dd:74:73:a9:12:36:d2:81:57:61:bd:3c:
4f:6f:fd:25:62:aa:d1:e7:25:96:42:50:79:ac:4a:33:75:c2:
d7:1a:f9:9e:8c:d1:98:99:b1:f0:15:63:79:36:77:56:0b:e5:
fa:cb:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:34 2026 by rpki-client