Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: oOBtA8veXBmOOD5vVPDI5CW5W5KNuGQKSgHF7t3V+gg=
Subject key identifier: 46:1D:D5:1D:1D:B2:6A:B6:DF:5B:52:01:76:66:12:D2:33:95:6A:A8
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 019F8FEC00DBB40F4A18CD7600BF5C0B67C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 09CC
Signing time: Thu 23 Jul 2026 17:00:36 +0000
Manifest this update: Thu 23 Jul 2026 17:00:36 +0000
Manifest next update: Fri 24 Jul 2026 17:00:36 +0000
Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: Zx4XM2haWgkcKtbH3wEaf4K+J+Uw+9KcLfxXImxWcXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:00:db:b4:0f:4a:18:cd:76:00:bf:5c:0b:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Jul 23 17:00:36 2026 GMT
Not After : Jul 24 17:00:36 2026 GMT
Subject: CN=461dd51d1db26ab6df5b5201766612d233956aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:8d:f1:10:4a:63:90:fa:a8:0c:c7:01:5b:
f0:d8:17:7b:e6:9d:6f:69:96:fa:3d:60:32:e8:a1:
23:a1:de:2e:d0:af:c2:87:2b:f0:24:2e:61:61:8a:
89:f3:2b:af:ac:7b:2b:57:2e:68:57:b8:d7:67:5f:
5a:3c:68:aa:40:7a:ea:71:14:50:29:03:17:43:c6:
f2:71:0e:74:c3:42:24:1e:3b:d5:06:a8:66:d3:4c:
15:ca:78:c6:48:71:07:5f:bb:b1:77:d7:e2:71:88:
4a:60:ef:55:6f:fb:f4:1d:33:09:3c:29:13:e1:3e:
38:46:21:09:66:11:76:eb:30:36:78:60:2f:87:ad:
6b:41:d0:35:20:bc:9f:12:00:fb:40:70:7a:dd:ca:
71:95:b1:db:95:3e:b2:b9:8b:07:f8:76:5d:9f:bd:
72:19:8c:7a:de:80:1f:65:d8:32:07:ab:72:e8:1d:
8e:a2:cb:27:f3:ed:7a:46:be:00:38:29:58:55:09:
9c:7a:ca:d3:27:17:c6:31:27:93:df:e3:8a:91:ca:
63:0d:3e:d1:6d:ad:6f:35:d2:48:42:38:3c:1d:5d:
01:71:1c:73:97:87:6f:89:7b:54:e1:bc:32:dc:71:
b4:76:fa:ef:04:80:6f:78:a8:07:69:7a:82:1c:99:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:D5:1D:1D:B2:6A:B6:DF:5B:52:01:76:66:12:D2:33:95:6A:A8
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:82:39:8c:96:6e:f1:cb:af:d1:6a:e9:db:c3:a0:25:56:e7:
a2:95:da:2c:d8:7b:07:ab:50:e0:8a:5c:f3:6d:bf:4d:5b:ef:
a6:cf:9f:28:c3:77:77:78:2d:a6:8a:c4:45:b4:44:f2:b5:02:
b9:c5:ef:0e:17:36:6a:af:1e:4f:2b:09:33:18:0d:6a:a6:ec:
bf:1b:17:b5:8a:79:47:e2:51:26:13:65:d2:c9:f1:d7:65:f4:
bf:f3:04:83:0a:cf:06:32:b7:3b:22:3a:c6:91:e7:9f:94:ea:
b1:70:c9:86:4e:ea:52:6d:d8:90:2e:11:80:63:a1:41:98:01:
68:69:0e:03:0f:e2:b0:3f:aa:e8:62:fe:82:82:62:27:86:8d:
bf:d2:e0:ca:ea:e6:b7:85:29:74:33:fd:06:ac:9a:18:60:56:
f1:7d:97:32:bb:6e:7a:eb:0a:dc:80:62:7b:2b:c4:46:45:64:
b6:96:4d:c4:73:ab:ea:41:87:79:44:12:ba:86:5d:a9:92:6d:
e1:ee:30:3d:94:22:6e:3d:d5:1b:1c:cc:22:80:2d:46:38:2a:
b0:7f:c8:c0:1d:52:2d:54:9c:56:5b:fb:7a:97:33:0c:de:2b:
62:07:9f:f9:f2:e2:c7:6e:4e:5c:4e:dd:02:ce:38:f8:4f:c6:
6a:bf:39:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7ADbtA9KGM12AL9cC2fGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk
Y2VmZTcwHhcNMjYwNzIzMTcwMDM2WhcNMjYwNzI0MTcwMDM2WjAzMTEwLwYDVQQD
Eyg0NjFkZDUxZDFkYjI2YWI2ZGY1YjUyMDE3NjY2MTJkMjMzOTU2YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim+N8RBKY5D6qAzHAVvw2Bd75p1v
aZb6PWAy6KEjod4u0K/ChyvwJC5hYYqJ8yuvrHsrVy5oV7jXZ19aPGiqQHrqcRRQ
KQMXQ8bycQ50w0IkHjvVBqhm00wVynjGSHEHX7uxd9ficYhKYO9Vb/v0HTMJPCkT
4T44RiEJZhF26zA2eGAvh61rQdA1ILyfEgD7QHB63cpxlbHblT6yuYsH+HZdn71y
GYx63oAfZdgyB6ty6B2Oossn8+16Rr4AOClYVQmcesrTJxfGMSeT3+OKkcpjDT7R
ba1vNdJIQjg8HV0BcRxzl4dviXtU4bwy3HG0dvrvBIBveKgHaXqCHJnn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYd1R0dsmq231tSAXZmEtIzlWqoMB8GA1UdIwQY
MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt
NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj
LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoI5jJZu
8cuv0Wrp28OgJVbnopXaLNh7B6tQ4Ipc822/TVvvps+fKMN3d3gtporERbRE8rUC
ucXvDhc2aq8eTysJMxgNaqbsvxsXtYp5R+JRJhNl0snx12X0v/MEgwrPBjK3OyI6
xpHnn5TqsXDJhk7qUm3YkC4RgGOhQZgBaGkOAw/isD+q6GL+goJiJ4aNv9Lgyurm
t4UpdDP9BqyaGGBW8X2XMrtueusK3IBieyvERkVktpZNxHOr6kGHeUQSuoZdqZJt
4e4wPZQibj3VGxzMIoAtRjgqsH/IwB1SLVScVlv7epczDN4rYgef+fLix25OXE7d
As44+E/Gar85ww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:15 2026 by rpki-client