Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: B8vseD+IHQCEb+vDd8bgaerXQW+Us0dZDNDmm3Eb/6w=
Subject key identifier: 20:FB:8E:58:99:96:2B:EF:FC:B2:68:11:7C:EA:EB:33:11:8E:3F:01
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019F8FB52FB6A390FE3678EE7BBE4812577B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 16:00:43 +0000
Manifest this update: Thu 23 Jul 2026 16:00:43 +0000
Manifest next update: Fri 24 Jul 2026 16:00:43 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: G+5dOw7Q+rTv4NFgi+DOYssiifqyvFDGzze+qauDnMc=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:2f:b6:a3:90:fe:36:78:ee:7b:be:48:12:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Jul 23 16:00:43 2026 GMT
Not After : Jul 24 16:00:43 2026 GMT
Subject: CN=20fb8e5899962beffcb268117ceaeb33118e3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:0a:45:46:29:08:ae:c0:17:12:97:6d:58:
59:53:f1:e9:a9:eb:97:14:ec:bd:b5:84:45:59:40:
25:30:d2:bb:05:20:56:16:d5:f8:de:eb:98:fb:1e:
7f:d0:a1:c5:24:0a:41:62:9d:bf:08:a3:37:cc:a9:
4b:f8:a1:90:d6:c0:85:28:f3:e1:07:c4:99:ef:32:
13:4a:df:14:01:26:cd:d3:fe:6a:4d:1e:c6:71:4b:
d5:02:74:c1:6a:5c:97:cb:08:60:ad:e7:0b:a8:74:
a4:8d:18:75:41:44:c3:c3:ee:f3:c2:8c:71:1b:6c:
77:43:ad:96:70:83:d8:63:b6:a7:a0:e7:68:ad:0e:
64:f9:c7:50:48:a2:56:72:79:6b:6f:9c:58:1e:e9:
55:01:50:1d:6f:da:74:3a:5b:66:02:22:df:02:8b:
a7:9c:41:67:8b:56:c7:22:77:b8:92:a0:98:4a:50:
0c:ee:33:2d:e0:18:f9:c3:8c:5b:61:32:dd:00:25:
5d:7b:34:ee:e5:58:28:51:7d:41:f3:8e:c0:4e:5c:
74:18:3d:0f:ae:56:3a:88:25:7a:28:31:59:16:96:
0b:cc:db:12:9e:dd:79:e8:ff:59:58:e1:cf:ae:e7:
e2:3f:29:a7:d4:80:10:0e:61:c4:45:7e:b6:2a:f2:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:8E:58:99:96:2B:EF:FC:B2:68:11:7C:EA:EB:33:11:8E:3F:01
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7f:30:47:94:8b:34:19:fc:ba:9d:be:72:62:7a:0a:76:ef:
ec:9d:3d:ff:fc:7f:43:b6:51:5c:48:09:bc:8a:88:2d:3e:73:
dd:c1:98:27:4b:8d:9d:61:43:d7:5a:db:85:4a:a0:fb:74:ba:
b6:2d:b1:4a:fe:b8:53:9e:e2:d6:2d:8e:86:87:c1:02:3f:94:
f9:20:f2:48:63:f9:06:51:52:aa:28:46:d8:a0:39:25:a8:07:
1e:1c:6b:0d:b9:10:4a:3a:81:0f:59:6b:fd:dd:6c:42:43:26:
59:a9:f2:fb:28:d0:a4:c2:32:7e:cf:fd:ba:74:95:a9:c9:bb:
a5:84:7c:2b:29:eb:65:5f:2c:63:08:5a:fb:af:7e:e8:d4:b1:
58:23:b8:26:35:93:2a:0a:07:65:8c:07:ba:7a:91:f4:7a:5b:
2d:ee:98:9f:8e:ae:48:08:27:a5:b1:9d:6c:da:9b:47:25:66:
52:93:19:eb:a5:ae:79:5a:ba:f9:b1:74:80:43:55:0f:fd:dd:
54:5f:b1:38:ea:ee:1e:af:5e:56:d6:d4:6e:9b:52:a6:9a:ae:
ae:a9:78:56:1f:75:50:07:3b:51:a6:aa:6a:ce:1d:74:7c:7b:
cf:6a:02:0a:80:05:3f:f8:c2:6c:37:b9:3c:fc:a4:c8:05:9f:
9c:23:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:52 2026 by rpki-client