Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: cu2ZYzlLfgo94MeuL1NfW1wbiQBeCuvCz+J9dfuW9Vs=
Subject key identifier: 80:B2:DE:99:AC:6D:B7:7A:C5:82:55:9C:B7:FE:27:79:3B:79:03:2F
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019F9022BBB2CB1DAC9A97CA05D8B8D81386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 18:00:23 +0000
Manifest this update: Thu 23 Jul 2026 18:00:23 +0000
Manifest next update: Fri 24 Jul 2026 18:00:23 +0000
Files and hashes: 1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: UXITVI9MGpBe/pN/ny9Z1/ncZtScVWupJfRZMtm5fEA=)
3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bb:b2:cb:1d:ac:9a:97:ca:05:d8:b8:d8:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jul 23 18:00:23 2026 GMT
Not After : Jul 24 18:00:23 2026 GMT
Subject: CN=80b2de99ac6db77ac582559cb7fe27793b79032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:87:f3:1f:59:2d:ef:d9:56:5b:05:fe:98:
8c:a3:f7:ba:75:0e:c8:66:f4:40:d8:fd:25:48:a6:
77:07:da:d5:90:c4:b1:31:cf:65:47:3e:09:e7:7a:
aa:c6:1c:a3:8b:ff:9e:d5:5c:88:bf:fc:a4:98:97:
b8:fd:01:7d:c7:36:5a:84:d7:59:4c:8d:fb:43:70:
5e:cd:3f:75:ca:c6:de:ad:e6:32:2f:9c:c7:36:3b:
94:79:0a:d9:55:ac:1e:8c:45:c5:4f:91:d0:13:f1:
65:5b:3a:d1:6e:17:05:35:d4:d8:94:e3:b3:9b:4e:
25:e8:2c:57:19:4f:b0:d9:f4:6b:c8:94:e1:9f:47:
73:80:7a:b3:25:ac:55:b7:36:31:93:81:81:97:b1:
8a:df:2f:82:94:b2:3e:b7:99:4e:3f:c6:6f:6c:2b:
d6:c4:1e:9b:18:09:02:98:7a:10:71:5a:bf:b3:be:
0d:04:6b:97:7e:1b:bc:a9:db:8b:c8:d2:e9:ee:ba:
84:0e:80:37:8b:2e:9e:7a:3b:24:18:d7:8e:cf:6b:
33:87:10:7b:93:fd:6e:2d:8c:fe:02:51:06:66:17:
b4:45:f7:9c:8d:b6:cf:db:a1:25:85:91:9e:78:cc:
0f:52:71:31:d8:81:36:59:1a:27:85:f7:f9:e4:f2:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:DE:99:AC:6D:B7:7A:C5:82:55:9C:B7:FE:27:79:3B:79:03:2F
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:03:88:c4:be:08:ff:80:2d:04:17:af:a0:83:14:ca:1b:
de:83:5c:38:a1:07:53:e6:57:cd:af:23:45:29:15:87:f8:8c:
33:9e:cd:e8:c1:c0:97:63:95:bf:34:e8:24:95:26:bd:43:70:
87:88:96:19:a6:8f:3b:09:e4:57:3b:6a:62:92:b2:5c:3f:8a:
78:b8:75:09:97:63:88:4e:03:5b:1e:33:b9:b0:ae:32:28:00:
dd:56:04:19:a0:86:67:c2:18:85:5c:0f:f8:5d:3e:81:f2:ae:
17:71:28:25:9c:bb:63:5a:6a:05:5c:23:5a:1f:fa:fc:64:3d:
e9:03:19:0a:da:73:cd:ec:38:91:b9:1b:eb:13:ee:03:a3:75:
35:e9:83:e1:24:a4:0e:91:14:b8:be:7e:51:61:d6:6c:19:3b:
85:a9:43:34:96:d6:17:e6:15:f5:0c:39:89:22:c4:64:bc:3f:
39:7d:1b:87:eb:d2:3f:6e:3b:8b:f4:9b:5c:be:37:0c:84:9a:
b7:38:03:32:b7:3e:64:25:8a:f0:64:4d:62:aa:77:cb:fa:17:
3c:a6:54:ea:a8:94:55:cf:58:0c:56:59:e1:6c:bf:0b:da:7a:
eb:85:cb:cd:fc:2a:7f:59:ce:80:84:b5:f1:3c:32:92:c9:88:
a5:d8:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:59 2026 by rpki-client