Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: vbXyI37eYH/8jkWjgQTGFqdjguMhqK/CvtdcUb30qcc=
Subject key identifier: 9D:CE:69:4D:63:80:62:07:A5:3E:F1:F4:F9:D3:B6:FD:19:67:E4:63
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019F935AE56DEDA444695C938C0F2891F1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 08B0
Signing time: Fri 24 Jul 2026 09:00:35 +0000
Manifest this update: Fri 24 Jul 2026 09:00:35 +0000
Manifest next update: Sat 25 Jul 2026 09:00:35 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: fqjvmnQy9cTUS1VPnzvwKeaV5LBf3RCiP8z6JSQUN0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e5:6d:ed:a4:44:69:5c:93:8c:0f:28:91:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Jul 24 09:00:35 2026 GMT
Not After : Jul 25 09:00:35 2026 GMT
Subject: CN=9dce694d63806207a53ef1f4f9d3b6fd1967e463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:87:0c:f5:89:16:72:0f:3d:8f:c7:1a:59:
e2:c1:39:cd:c2:f3:0f:00:06:d9:3b:29:09:de:c6:
f1:a1:f0:d8:df:a9:ce:59:65:8b:64:4c:3e:ef:13:
52:68:f0:f4:52:e9:e1:00:c6:d3:9e:e4:f9:52:c2:
91:8f:76:44:59:41:ff:be:a3:25:28:10:a5:40:de:
ea:3b:2f:05:49:1f:98:d8:8c:47:5f:3a:82:1f:92:
18:61:d4:93:e3:2b:fa:3b:ca:3f:ca:50:d6:1e:52:
13:7e:cd:d8:0b:d2:76:3a:01:cf:22:d7:b3:7a:e3:
e0:46:03:c1:08:8a:27:d1:79:25:36:53:8c:db:44:
e0:ae:f4:a9:f0:31:46:43:f1:2c:35:a9:3f:0b:ed:
65:18:f7:55:bb:4e:fa:5b:05:f6:13:d1:bb:e7:79:
8f:0a:12:74:7d:e6:5c:15:53:bf:89:e2:da:52:24:
40:68:2d:d5:8f:c1:f9:50:73:26:9a:dd:cc:b3:4c:
ef:1c:fc:4e:b6:23:a4:dc:6f:86:81:cf:e4:9e:21:
68:64:34:69:62:2c:0e:c5:3f:30:cc:5c:f2:e0:b4:
41:d0:f6:0f:1f:4a:3d:68:a1:e5:97:9c:a6:f7:56:
a5:95:8f:b2:8a:a7:25:a8:d4:25:06:df:3b:6f:1e:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:69:4D:63:80:62:07:A5:3E:F1:F4:F9:D3:B6:FD:19:67:E4:63
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e0:65:85:2b:cd:85:21:73:f4:f0:19:2a:d3:7e:58:4e:8a:
d2:54:be:11:ac:5c:4d:56:13:ef:ac:36:0a:4d:49:ff:19:1c:
e0:95:c4:b4:ff:46:ff:33:85:74:ce:26:3e:84:a9:82:b1:b6:
ce:6f:7a:fa:b8:04:53:70:72:d3:7f:fe:63:84:bb:23:f9:01:
49:8c:b7:da:b3:fd:42:05:ce:32:ab:cc:4d:28:0e:a2:83:37:
9a:fa:82:12:10:1e:71:71:94:96:6f:4c:fd:82:bd:b5:d9:67:
ed:a4:65:1d:e0:5b:14:82:b9:76:79:d8:03:54:b2:0a:a1:01:
d9:a9:ca:54:33:88:a1:be:83:91:5a:ce:ec:e6:ff:95:05:a7:
08:e8:32:b9:be:1a:84:6d:0a:1b:25:13:1b:0e:ac:74:b0:7a:
a9:5c:f8:97:51:1e:88:65:2c:c0:16:31:18:40:11:64:0e:36:
95:43:59:79:87:8e:c7:f6:22:6a:78:b4:57:70:45:76:25:34:
11:c5:77:b5:77:8e:9b:ca:fd:d7:b7:40:d9:b8:b2:6d:58:4b:
10:0a:56:e8:bc:d6:c2:08:01:90:7f:58:ca:97:bd:5c:6b:9d:
1f:b0:bf:b9:d8:1e:be:b2:59:ea:ab:dc:4e:2a:f4:51:93:b4:
7d:c3:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:16 2026 by rpki-client