Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: JnMlstuNYcOfmibyl4qiYwGGP3etU4LBtRAh8/HFOQU=
Subject key identifier: D8:A7:58:B0:C8:E7:7E:C9:CE:1D:BE:ED:FC:74:10:6F:16:C8:57:6A
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019F9091048FD08FCA9FDA0298B4B5F9DA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 06BC
Signing time: Thu 23 Jul 2026 20:00:50 +0000
Manifest this update: Thu 23 Jul 2026 20:00:50 +0000
Manifest next update: Fri 24 Jul 2026 20:00:50 +0000
Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: Twc6uXxt6E8cBhyJ/AbirqsUyoee369tTK+fBZU2hP0=)
2: MepLmZbt23727bu7i1sZtq5TYHU.roa (hash: CEQGpaoQctPR7fkdzqVk8v2fKY5oxVttH1xe6bXTouQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:04:8f:d0:8f:ca:9f:da:02:98:b4:b5:f9:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jul 23 20:00:50 2026 GMT
Not After : Jul 24 20:00:50 2026 GMT
Subject: CN=d8a758b0c8e77ec9ce1dbeedfc74106f16c8576a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:31:7d:4d:5f:bb:b2:13:5d:a3:ba:a8:de:
d4:a2:63:63:8b:c8:7b:96:40:c6:de:0e:11:10:31:
6e:a4:65:d3:f5:bb:95:87:b5:8b:c3:f9:ea:e7:3f:
67:34:4f:c0:34:4c:5a:16:21:bd:01:ff:c9:f7:5d:
55:0f:17:65:ee:dd:6c:68:18:5c:39:cc:06:34:3c:
90:b1:b2:51:d7:6f:2f:18:0d:dd:3a:66:f0:45:e1:
85:4d:1a:98:22:2d:fd:ec:bc:80:d0:cd:24:48:14:
3f:cf:b5:73:9f:07:d5:cd:66:fe:f3:53:20:d6:91:
07:a1:f4:c5:6b:57:85:87:71:a4:a6:eb:62:80:c4:
48:87:60:12:60:2e:1d:c8:b5:71:7f:a0:db:e1:d7:
18:f7:a8:d9:62:27:44:ef:4a:2e:52:d6:92:19:db:
91:01:cf:07:69:b7:63:36:a8:8e:0b:12:c9:7a:4f:
ff:08:dc:c0:65:5a:f6:ce:52:67:44:b6:07:8d:3d:
2f:96:3b:d6:00:75:bc:78:41:0f:4d:59:da:b0:06:
fc:90:9e:73:18:b6:fb:f1:21:13:4a:12:87:10:51:
d8:62:a2:e4:27:41:0c:6a:c6:f0:24:a3:79:39:9f:
e9:ed:5d:c0:49:26:52:3a:45:18:fd:a9:9d:3d:36:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:58:B0:C8:E7:7E:C9:CE:1D:BE:ED:FC:74:10:6F:16:C8:57:6A
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6a:e5:9a:ab:99:5a:df:ba:f2:cd:73:3a:d3:02:27:da:d4:
98:e7:b8:e7:42:44:74:c4:ed:40:0d:3f:02:67:d5:d9:68:91:
12:dd:0b:bd:1a:fb:1b:93:96:95:65:94:71:4a:9a:ad:6f:07:
4d:7c:72:fa:e9:bf:ea:64:5b:85:b0:d3:90:b5:de:72:7c:b9:
5e:5e:2a:c1:62:97:c3:62:9e:79:35:ba:41:b9:90:01:fa:6a:
72:c4:d1:3d:f4:9e:62:68:97:07:e2:93:7f:36:90:9e:f8:c4:
ed:0e:fd:63:23:d9:6f:db:21:63:91:38:46:21:12:7f:47:4e:
61:b3:39:46:1a:33:d0:bb:ca:14:b2:20:fe:32:7f:7e:ba:bd:
c8:7b:7c:c1:f8:28:83:e0:c8:26:a2:13:01:20:17:e1:3f:5c:
26:7b:50:14:0b:af:54:62:0a:89:db:83:39:3d:52:29:ef:a8:
e4:b4:89:c8:7a:86:9f:5c:b4:03:ab:25:d7:99:ea:eb:57:c3:
e4:cb:65:bc:2d:f5:5a:85:1a:db:85:15:39:21:91:2e:55:dd:
94:a4:4a:4c:2b:7c:d6:c9:59:7b:a3:37:5d:a0:3f:da:a3:9e:
f8:ca:09:3e:d8:be:e0:6d:17:91:ef:54:cc:17:57:5d:43:f6:
63:74:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:38 2026 by rpki-client