Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: SZvKbbsGKTqVLwAbJMdnDPXy3E9uRA9IGe+K7XQJGK8=
Subject key identifier: FC:31:00:0D:53:C9:E9:CC:76:9A:29:6F:05:A1:63:86:93:36:33:8C
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019F93C8AFE9F6FC145223B588B6A05A496D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:00:30 +0000
Manifest this update: Fri 24 Jul 2026 11:00:30 +0000
Manifest next update: Sat 25 Jul 2026 11:00:30 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: G7gJUgY11AQc+5Gev9Bqc5dBDJ4iiVGgWCy3pofwZhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:af:e9:f6:fc:14:52:23:b5:88:b6:a0:5a:49:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jul 24 11:00:30 2026 GMT
Not After : Jul 25 11:00:30 2026 GMT
Subject: CN=fc31000d53c9e9cc769a296f05a163869336338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:4d:47:c0:d1:21:f2:4e:bd:79:b0:b8:af:
54:ff:a6:59:6d:18:ec:43:a9:8c:dd:4f:f7:55:ab:
db:37:7a:71:2c:f0:1f:fd:1d:71:07:de:6e:ae:d4:
2b:ee:ee:66:ed:0e:52:f5:88:aa:c7:c9:fe:2f:bb:
b3:7f:42:30:63:f7:b4:ae:c2:e2:ea:24:10:67:02:
12:18:7e:70:ae:af:b6:5d:1a:f4:dc:d4:3a:4c:6f:
3b:c4:9f:35:36:a6:19:29:e9:77:7e:98:e3:53:40:
2f:a6:7f:51:ad:b8:4d:d2:45:dc:58:a1:eb:b3:f7:
e1:cd:a7:b3:be:1a:ca:cd:47:22:20:7b:ad:d7:2a:
a8:4f:46:82:00:eb:69:31:1e:00:d3:71:78:d6:a2:
a4:6e:1d:60:a0:90:d9:bc:85:b9:85:d4:5c:31:8d:
4e:31:eb:2d:2e:07:01:e6:33:54:d6:e3:9f:ce:8c:
fb:b3:aa:1f:21:3d:90:7c:0d:f3:73:cd:d0:e9:09:
07:ca:6a:69:9a:60:8f:25:80:09:14:b4:fe:87:09:
a6:82:87:c3:12:7a:b5:2e:c4:a0:75:27:7b:5a:17:
fb:fd:3f:88:1d:d6:e0:21:4c:3e:4a:a5:77:ed:b5:
78:33:55:09:41:6c:70:97:93:30:08:15:59:99:a3:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:00:0D:53:C9:E9:CC:76:9A:29:6F:05:A1:63:86:93:36:33:8C
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:b2:bf:ea:08:55:8a:ac:8b:d1:78:bd:0e:ba:8a:c9:bf:
71:75:e1:a0:26:81:b1:5f:c8:0e:f8:f7:ea:4e:33:3a:67:64:
9a:49:df:04:1b:ee:3c:bd:6b:e8:cf:d4:9f:b8:69:e4:f4:7c:
e9:9e:67:50:de:b1:7b:5d:8a:0e:3c:9f:5b:31:55:fc:0b:60:
63:cf:5e:83:da:ae:ba:d1:40:64:d7:61:90:78:a6:a5:73:ec:
21:db:be:0d:92:59:93:d7:c2:ed:cf:32:ec:32:b3:50:21:0d:
05:9c:59:a6:90:d3:c5:2b:ae:cc:7f:0f:d1:43:4e:88:a6:98:
67:89:2d:b5:a4:d3:01:42:aa:c3:69:fe:e1:ac:11:5a:bf:46:
7d:0d:01:27:ac:f0:c0:64:a5:ae:95:82:4b:45:67:95:3f:91:
e0:8e:ff:55:08:94:63:fc:2e:d1:32:60:06:39:93:b9:92:e7:
00:86:7b:cf:7f:46:3c:06:1e:cd:9c:c4:c2:33:fb:38:ae:39:
2f:79:a7:68:b4:f7:9f:d8:19:16:a4:5e:9b:84:a4:82:ff:48:
a4:d7:63:08:68:a0:7b:1c:c1:2a:f7:56:09:50:30:75:85:62:
e1:b5:32:64:89:34:ef:d0:a1:6a:d7:19:20:f7:68:37:3d:2f:
6e:7f:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:55 2026 by rpki-client