
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
File: CMD4JPxpxHv1_teUYxbN_-P6BFs.mft (raw, json)
Hash identifier: zYqo0CVgtm5j8IBoF28qmMWus0DEUOuzKcsQoqaJyac=
Subject key identifier: E0:31:39:2F:2F:31:9C:86:FE:DD:C6:81:FB:D5:ED:CB:04:7D:93:5F
Authority key identifier: 08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
Certificate issuer: /CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Certificate serial: 019F9135F2A4BE640C7A50CF5E80AF3E007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
Manifest number: 86
Signing time: Thu 23 Jul 2026 23:00:59 +0000
Manifest this update: Thu 23 Jul 2026 23:00:59 +0000
Manifest next update: Fri 24 Jul 2026 23:00:59 +0000
Files and hashes: 1: CMD4JPxpxHv1_teUYxbN_-P6BFs.crl (hash: Q+pUSrlc6ceChWySKP5ibQC7Z1B7d7djVcUS/ksfJGU=)
2: EcOiKWkfENOhpUFqCuAv__VHhnw.roa (hash: Dg3pxaRe1cEkDH8sGf4s69+1RouBE83t1FQSJNv9iHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f2:a4:be:64:0c:7a:50:cf:5e:80:af:3e:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Validity
Not Before: Jul 23 23:00:59 2026 GMT
Not After : Jul 24 23:00:59 2026 GMT
Subject: CN=e031392f2f319c86feddc681fbd5edcb047d935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:a9:e1:9d:69:88:92:ef:20:db:21:de:fc:
9c:44:7f:7a:1b:5e:b6:81:05:0d:36:5d:87:85:63:
eb:49:eb:1f:a5:c0:06:5c:bd:50:2f:21:5f:f9:e9:
ec:d3:f1:cd:d2:7b:4d:53:e6:07:ae:07:48:55:3d:
6a:64:af:c5:aa:4a:30:93:1b:7f:ef:63:ee:a0:3f:
c0:35:c4:6e:e4:ed:95:b0:36:b5:53:89:52:ad:81:
03:b9:fc:50:9b:b5:34:fe:ad:68:c9:84:f6:9d:bd:
fa:01:78:e4:63:46:d8:85:84:18:68:60:67:ed:a6:
9f:f1:3b:c9:a9:24:58:09:12:97:f4:20:56:f5:29:
09:c3:4b:0e:9f:f2:6e:64:85:d9:bf:c8:1f:6c:4f:
ba:b5:54:6c:ae:bc:77:4b:4e:be:ef:1e:ae:30:36:
32:85:d2:fc:35:e5:68:45:f8:2b:eb:a2:2d:26:52:
06:4e:51:c0:19:2e:1f:47:f3:12:ec:a5:66:f6:19:
ef:8b:22:8c:e9:c6:75:ef:b5:c3:72:0b:24:03:0a:
dd:25:fb:b1:6f:76:65:9c:7f:08:cd:71:ad:eb:42:
6b:0b:03:a6:f5:75:f7:ef:5f:37:15:f4:29:ac:9e:
c9:d8:4d:a9:44:38:0c:09:df:e0:c0:ab:60:39:f8:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:39:2F:2F:31:9C:86:FE:DD:C6:81:FB:D5:ED:CB:04:7D:93:5F
X509v3 Authority Key Identifier:
keyid:08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:92:51:26:5e:d0:3d:ad:e4:14:66:15:04:6e:3d:f1:8c:02:
8d:bf:ce:b7:bf:d0:3a:c2:8c:a9:ba:c4:81:b7:eb:2f:f1:80:
21:53:cb:a3:2a:ad:d5:48:d1:68:7d:bc:79:1e:90:c3:96:99:
9d:25:8d:33:0f:c1:d5:44:3a:1d:48:7b:4c:4b:e9:2a:9b:a3:
08:f6:d8:f5:a7:e7:fe:55:f6:d1:9f:8f:ed:bf:d6:77:01:85:
bc:1c:75:3b:f5:ef:33:88:29:78:a6:6c:df:ff:37:61:06:4c:
98:aa:f3:0e:da:1c:b7:bb:c0:1c:5e:03:ce:6a:9a:00:9c:1f:
5e:90:d4:c6:ee:16:1a:3a:8b:9b:e0:cf:92:50:e2:c9:d1:7d:
86:88:58:28:d0:72:2c:6c:af:34:24:e2:f1:bc:7d:12:8c:d4:
bc:90:9e:53:74:08:aa:82:37:38:f1:c8:12:7f:a0:d6:32:33:
31:6a:68:ec:6c:69:9f:5f:06:bd:36:7a:86:bb:22:cc:33:ee:
d9:ee:ce:ee:5e:1e:c2:fa:0e:76:91:4c:46:65:f6:80:3e:89:
b4:cc:68:3d:77:96:a8:c1:0c:d3:47:78:87:00:0d:0a:d0:07:
66:d6:68:2f:fb:88:31:d1:c7:bb:92:bf:22:47:35:96:5f:4f:
cf:5b:7e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNfKkvmQMelDPXoCvPgB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YzBmODI0ZmM2OWM0N2JmNWZlZDc5NDYzMTZjZGZmZTNm
YTA0NWIwHhcNMjYwNzIzMjMwMDU5WhcNMjYwNzI0MjMwMDU5WjAzMTEwLwYDVQQD
EyhlMDMxMzkyZjJmMzE5Yzg2ZmVkZGM2ODFmYmQ1ZWRjYjA0N2Q5MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTmp4Z1piJLvINsh3vycRH96G162
gQUNNl2HhWPrSesfpcAGXL1QLyFf+ens0/HN0ntNU+YHrgdIVT1qZK/Fqkowkxt/
72PuoD/ANcRu5O2VsDa1U4lSrYEDufxQm7U0/q1oyYT2nb36AXjkY0bYhYQYaGBn
7aaf8TvJqSRYCRKX9CBW9SkJw0sOn/JuZIXZv8gfbE+6tVRsrrx3S06+7x6uMDYy
hdL8NeVoRfgr66ItJlIGTlHAGS4fR/MS7KVm9hnviyKM6cZ177XDcgskAwrdJfux
b3ZlnH8IzXGt60JrCwOm9XX37183FfQprJ7J2E2pRDgMCd/gwKtgOfh4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAxOS8vMZyG/t3GgfvV7csEfZNfMB8GA1UdIwQY
MBaAFAjA+CT8acR79f7XlGMWzf/j+gRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ01ENEpQeHB4SHYxX3RlVVl4Yk5fLVA2QkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNDlhYTQtMzE0OS00NTRiLTk1OGMt
NjI4MGYyZmVmMGU1LzEvQ01ENEpQeHB4SHYxX3RlVVl4Yk5fLVA2QkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNDlhYTQtMzE0OS00NTRiLTk1OGMtNjI4MGYyZmVmMGU1
LzEvQ01ENEpQeHB4SHYxX3RlVVl4Yk5fLVA2QkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5JRJl7Q
Pa3kFGYVBG498YwCjb/Ot7/QOsKMqbrEgbfrL/GAIVPLoyqt1UjRaH28eR6Qw5aZ
nSWNMw/B1UQ6HUh7TEvpKpujCPbY9afn/lX20Z+P7b/WdwGFvBx1O/XvM4gpeKZs
3/83YQZMmKrzDtoct7vAHF4DzmqaAJwfXpDUxu4WGjqLm+DPklDiydF9hohYKNBy
LGyvNCTi8bx9EozUvJCeU3QIqoI3OPHIEn+g1jIzMWpo7Gxpn18GvTZ6hrsizDPu
2e7O7l4ewvoOdpFMRmX2gD6JtMxoPXeWqMEM00d4hwANCtAHZtZoL/uIMdHHu5K/
Ikc1ll9Pz1t+mw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:07 2026 by rpki-client