Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: zbwHRSYOL2Q3qPyRMBj0oNTtjJU9tm/VBKJvGye1Lw0=
Subject key identifier: E0:67:E1:64:75:33:C1:0A:A5:F3:31:CF:ED:96:84:20:D5:A0:D2:ED
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019F8F7F85E25C0B7A8AAF1EBCB159DF1D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0F29
Signing time: Thu 23 Jul 2026 15:02:06 +0000
Manifest this update: Thu 23 Jul 2026 15:02:06 +0000
Manifest next update: Fri 24 Jul 2026 15:02:06 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: OmM18K5AtyiSFiGtoLI2WN83NY3hsP/zAzKzOct9VmM=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:85:e2:5c:0b:7a:8a:af:1e:bc:b1:59:df:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jul 23 15:02:06 2026 GMT
Not After : Jul 24 15:02:06 2026 GMT
Subject: CN=e067e1647533c10aa5f331cfed968420d5a0d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:fe:2f:48:c1:09:4e:ce:3b:2f:b6:55:f3:
b9:67:8c:b4:f7:23:ba:cb:ad:1f:d3:e2:21:fa:f8:
d9:ae:21:9d:c2:17:3a:ae:ce:4c:56:69:4f:35:da:
38:32:f4:07:e0:f1:d1:10:88:5b:93:cc:9a:1a:4c:
4b:e7:f3:ac:44:d8:21:00:bd:5e:ef:b4:95:f8:f3:
62:8d:64:d2:13:b8:d6:16:57:16:ed:64:1f:26:ad:
78:bb:6d:ad:4f:4a:b5:70:94:16:e3:02:97:c6:c7:
5f:15:ee:e6:43:24:52:c3:55:39:b9:4a:28:2b:c7:
b1:c7:ad:f2:51:d5:e6:43:2d:e6:3d:15:f8:15:16:
08:b8:95:eb:b1:b1:37:28:f1:72:b4:0d:e0:24:6d:
67:dc:2e:79:b5:d4:d4:74:08:f8:a1:f6:19:8b:4e:
e3:f6:7f:3f:30:07:32:42:3d:76:50:c7:22:54:f3:
d3:8c:57:74:f9:bc:ca:fd:05:b2:55:0d:1d:92:5f:
1f:e3:c4:d0:29:33:8f:b1:fe:7d:16:50:bd:60:b7:
c6:3e:c1:31:65:d9:0a:6f:5d:6e:e1:60:97:7a:30:
a5:2e:88:a1:2f:a1:3b:14:42:47:4d:ed:fc:ea:bf:
90:51:e6:33:95:a1:3b:af:2b:29:42:10:94:06:ce:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:E1:64:75:33:C1:0A:A5:F3:31:CF:ED:96:84:20:D5:A0:D2:ED
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:75:63:db:3a:81:31:ae:58:4c:9f:5b:3e:48:11:f6:94:f1:
44:d0:8e:43:bb:7f:7d:fd:9f:94:30:69:df:00:70:6f:34:aa:
0f:6a:7a:f1:18:58:e6:5d:35:11:e0:ae:40:73:9a:0b:a7:a4:
95:4e:8c:aa:86:56:b7:10:d4:ab:6a:6e:8a:0b:69:f4:04:9e:
43:36:2e:ca:8c:09:e4:7b:51:8d:42:f0:43:77:1f:50:63:65:
69:4a:32:ff:c7:7c:c4:78:1e:db:4a:b0:40:5e:3c:fb:fd:f3:
11:61:8a:e6:60:f7:37:07:4c:0f:46:85:e2:aa:d8:1f:15:6c:
1c:1a:7c:3b:78:87:d9:b4:50:13:8e:7a:b5:b0:f4:0e:6f:41:
50:3c:a6:06:11:c9:04:82:33:15:e0:2f:60:1d:e7:c2:3b:14:
b7:a6:50:22:ed:ec:33:55:4f:45:da:df:05:5b:40:ee:66:70:
61:3e:5d:da:ff:1a:31:22:6b:f8:3a:b2:22:d1:78:19:87:7a:
67:01:f8:d6:b2:bd:19:9e:e9:be:74:bd:ce:47:b4:ee:2c:ce:
b2:ed:74:84:9e:f2:27:5c:c9:58:91:cf:94:15:c6:26:5f:35:
36:92:1b:d4:1e:65:d0:6b:dd:6d:00:83:25:63:6a:07:28:a6:
d7:e8:66:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf4XiXAt6iq8evLFZ3x0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz
OGM4YzUwHhcNMjYwNzIzMTUwMjA2WhcNMjYwNzI0MTUwMjA2WjAzMTEwLwYDVQQD
EyhlMDY3ZTE2NDc1MzNjMTBhYTVmMzMxY2ZlZDk2ODQyMGQ1YTBkMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlX+L0jBCU7OOy+2VfO5Z4y09yO6
y60f0+Ih+vjZriGdwhc6rs5MVmlPNdo4MvQH4PHREIhbk8yaGkxL5/OsRNghAL1e
77SV+PNijWTSE7jWFlcW7WQfJq14u22tT0q1cJQW4wKXxsdfFe7mQyRSw1U5uUoo
K8exx63yUdXmQy3mPRX4FRYIuJXrsbE3KPFytA3gJG1n3C55tdTUdAj4ofYZi07j
9n8/MAcyQj12UMciVPPTjFd0+bzK/QWyVQ0dkl8f48TQKTOPsf59FlC9YLfGPsEx
ZdkKb11u4WCXejClLoihL6E7FEJHTe386r+QUeYzlaE7ryspQhCUBs7CSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBn4WR1M8EKpfMxz+2WhCDVoNLtMB8GA1UdIwQY
MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt
NWU1YjhiMjgwNTlhLzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh
LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXVj2zqB
Ma5YTJ9bPkgR9pTxRNCOQ7t/ff2flDBp3wBwbzSqD2p68RhY5l01EeCuQHOaC6ek
lU6MqoZWtxDUq2puigtp9ASeQzYuyowJ5HtRjULwQ3cfUGNlaUoy/8d8xHge20qw
QF48+/3zEWGK5mD3NwdMD0aF4qrYHxVsHBp8O3iH2bRQE456tbD0Dm9BUDymBhHJ
BIIzFeAvYB3nwjsUt6ZQIu3sM1VPRdrfBVtA7mZwYT5d2v8aMSJr+DqyItF4GYd6
ZwH41rK9GZ7pvnS9zke07izOsu10hJ7yJ1zJWJHPlBXGJl81NpIb1B5l0GvdbQCD
JWNqByim1+hmOQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:19 2026 by rpki-client