Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: 1ozbsime/e9DlKgonzekZuvQsTQWf6V9KoQM6Li/Jis=
Subject key identifier: E8:53:8A:E9:8B:BE:53:79:96:FD:FD:C2:5B:5F:74:C6:91:EE:DF:86
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019F93924E60A45B8396C29A4E05A64C48A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 10:01:06 +0000
Manifest this update: Fri 24 Jul 2026 10:01:06 +0000
Manifest next update: Sat 25 Jul 2026 10:01:06 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: Nekxx9R9N3PvAlbJ3oDwxvxxXJwM2g46A1sl5pKCj88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:4e:60:a4:5b:83:96:c2:9a:4e:05:a6:4c:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Jul 24 10:01:06 2026 GMT
Not After : Jul 25 10:01:06 2026 GMT
Subject: CN=e8538ae98bbe537996fdfdc25b5f74c691eedf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:e5:02:08:4d:47:13:3b:48:d3:08:c9:6d:
6d:32:f4:bb:8f:72:e9:c6:4e:61:6d:07:7f:02:f3:
32:d7:1e:bf:d1:ca:20:be:e4:d0:05:88:38:8a:1e:
ab:b1:ac:13:78:e8:03:1e:08:3d:0d:61:a0:96:65:
79:66:74:3b:08:2e:13:a8:1f:75:e5:61:d5:cf:fc:
0e:94:0d:06:3c:64:25:79:7b:b5:74:e4:b4:45:a5:
9f:0c:1b:4a:1b:f0:11:f9:95:83:97:d3:e9:2c:29:
72:ac:c1:e6:2a:af:fa:1e:a8:d0:57:13:c1:0e:50:
fe:43:07:da:e1:1d:6c:d3:60:ea:7f:7c:a5:af:c2:
35:95:49:db:40:97:29:96:c4:80:7d:1f:d3:06:40:
6c:ce:cf:01:4b:e8:ed:40:0c:4d:88:08:4c:2b:e2:
e8:4f:07:68:a4:cc:4a:5f:0b:f1:77:09:35:be:7e:
78:4f:f2:f2:d9:44:5a:ff:34:af:95:9c:1e:8a:f0:
ba:08:64:5b:49:66:12:33:f0:c1:3c:ad:d4:71:45:
c8:71:16:c9:79:38:a2:b4:31:9e:a3:d2:67:6a:30:
66:76:cb:d5:25:1c:c4:10:81:0a:4d:2d:18:f2:98:
a8:b8:bb:9a:e5:e6:f3:02:ce:5d:44:ee:0a:87:73:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:8A:E9:8B:BE:53:79:96:FD:FD:C2:5B:5F:74:C6:91:EE:DF:86
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:05:02:9b:34:1c:e1:da:ca:e7:14:a8:38:2a:e7:56:4f:
d4:57:f6:f2:12:29:eb:bc:ba:cc:33:39:e7:d5:f5:10:a2:6d:
36:08:f5:4e:c4:6c:9a:d3:8b:67:75:34:76:d5:c0:8f:7e:ab:
99:80:41:09:12:03:30:bd:66:77:3a:bf:32:22:77:e6:2c:4b:
81:45:2c:f0:f3:a6:ea:3e:68:51:06:27:28:8e:8f:bb:62:59:
9e:5b:2d:07:4e:7d:c6:8b:f9:57:61:7b:86:99:83:81:e8:0b:
1f:8e:56:63:7c:7d:98:3d:3e:d3:4c:29:25:f5:5f:2e:47:91:
59:ea:73:fe:81:6a:58:34:75:44:e6:b2:4a:4d:28:8b:d3:84:
d5:45:1a:85:67:4d:18:de:c1:47:66:36:de:de:1d:db:ee:f9:
84:3a:80:13:2b:9f:1e:22:f5:de:1b:90:89:d1:f1:94:e3:c6:
45:36:c8:48:72:32:49:e2:d7:dd:e3:5a:c4:5e:ea:63:b4:94:
37:c3:cf:15:d1:39:1d:5d:75:2e:75:5c:66:23:9f:09:b2:b4:
13:28:f0:5e:58:ff:b4:66:c5:73:79:47:7a:14:32:95:62:06:
2c:a7:3d:ce:55:e8:db:25:3d:d6:99:94:61:db:df:57:64:a6:
d1:6f:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:35 2026 by rpki-client