Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 2F+Z6g0m7gWRN3BBjZnu4XCIEet8Hu0DLaLhd8bTtcw=
Subject key identifier: CE:36:CE:7A:D6:59:44:71:42:43:56:D1:20:7B:4B:56:36:5A:A2:5E
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019F946E28ADDE6B476D354B4568264E683A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 150C
Signing time: Fri 24 Jul 2026 14:01:15 +0000
Manifest this update: Fri 24 Jul 2026 14:01:15 +0000
Manifest next update: Sat 25 Jul 2026 14:01:15 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: BRu/HFLAQlfdXUH2yauoN4axjxi8qSwTkUcfch48C8s=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:28:ad:de:6b:47:6d:35:4b:45:68:26:4e:68:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jul 24 14:01:15 2026 GMT
Not After : Jul 25 14:01:15 2026 GMT
Subject: CN=ce36ce7ad6594471424356d1207b4b56365aa25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:c1:73:9d:ca:b8:35:a0:15:30:f4:e6:e3:
22:78:be:ec:03:b4:18:ad:8a:87:e1:a8:c6:bd:74:
e2:fa:8a:f5:ec:4b:b1:0e:26:33:bd:e9:80:8e:bf:
3c:9c:3d:3a:da:09:91:9c:ea:41:b4:d8:ae:27:65:
2b:97:32:49:26:3e:be:e4:36:e6:a0:9f:41:87:8b:
d2:06:4b:6d:ea:07:fc:a8:c2:1c:8a:fa:48:3b:92:
35:d0:f2:0e:4b:50:0f:d6:ed:cd:e4:31:0e:89:3a:
a1:ce:87:3d:aa:dd:49:30:a7:e5:1c:2c:21:df:76:
1f:39:08:d0:d0:ce:80:86:4b:7d:3e:58:fb:a0:5d:
d0:36:76:3d:b3:70:b6:8b:93:24:ce:c1:77:76:c4:
b7:df:28:4a:75:48:9f:4a:32:3e:a5:f8:b7:a3:21:
63:21:b0:67:80:97:c3:84:dc:f7:14:11:2d:46:e6:
60:04:67:8e:40:11:c4:4e:15:b1:bf:ab:84:99:dd:
87:77:42:d3:20:c5:92:a1:cd:c4:84:3e:db:d8:2b:
14:1b:53:c5:c7:33:ce:c2:bc:b3:6b:9d:53:56:d9:
6b:87:f4:96:6d:19:7e:b1:cc:96:3a:f2:59:09:4d:
55:18:4d:af:70:e0:c1:c3:76:36:16:2a:90:cb:bd:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:CE:7A:D6:59:44:71:42:43:56:D1:20:7B:4B:56:36:5A:A2:5E
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:13:e1:2e:44:d1:60:3c:06:fb:c3:43:96:a1:e6:ef:fc:
5e:df:e7:f1:68:50:55:74:6f:37:60:99:f7:1e:dc:74:de:84:
05:a8:4d:15:1e:7b:c7:35:00:d9:f1:7b:aa:a1:ff:a6:40:ae:
83:fc:eb:f7:b7:c7:83:87:f3:8e:3e:1b:47:3f:56:ae:43:12:
22:27:d7:a0:8f:1b:34:26:aa:e1:62:fa:d3:0f:67:87:83:a0:
ae:d8:bb:39:26:a5:ab:18:95:bb:55:d9:57:18:76:bb:94:87:
4b:4c:c7:c5:39:25:db:7e:67:2b:aa:6b:bb:d7:5b:ff:bc:b6:
c5:70:97:ae:4b:48:fb:17:b9:d3:15:9d:09:0d:09:d4:0c:f2:
2a:9e:a2:b6:6a:e1:5b:66:c3:c1:10:ca:e9:2b:3e:6d:d5:77:
39:a6:54:6b:b0:86:f8:1d:80:70:43:42:50:85:df:43:7f:8c:
4e:72:f6:bf:39:19:cf:0e:1b:96:e7:24:43:96:89:07:db:7d:
e1:30:d5:07:d1:7c:1a:b3:6d:69:e5:5a:31:de:be:35:86:01:
18:12:78:11:64:aa:4d:ad:8b:33:b9:d9:ec:17:4e:ff:c1:19:
aa:17:db:bf:e3:79:05:33:66:d8:07:a3:5a:6c:41:27:e8:ae:
1e:00:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:28 2026 by rpki-client