Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: r05qPvxWQrfG0GvrEmLJpR2jxQgonJrnfiDoFtaweKI=
Subject key identifier: A8:A9:E8:AD:75:E8:99:02:6B:D7:3F:9C:4A:80:EE:71:5F:9C:65:B4
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019F92B5F479419BCB4EDA42EBD87F46ADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 12DC
Signing time: Fri 24 Jul 2026 06:00:25 +0000
Manifest this update: Fri 24 Jul 2026 06:00:25 +0000
Manifest next update: Sat 25 Jul 2026 06:00:25 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: NaIslWFBRxv4parpYefFcWYrii/SmqHL74Cxqd/WWlE=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:f4:79:41:9b:cb:4e:da:42:eb:d8:7f:46:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jul 24 06:00:25 2026 GMT
Not After : Jul 25 06:00:25 2026 GMT
Subject: CN=a8a9e8ad75e899026bd73f9c4a80ee715f9c65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:0d:d4:e3:b9:bb:85:17:27:64:31:15:68:
56:fa:b3:7c:6d:59:3a:5e:cf:b6:da:2a:56:7b:c6:
c2:65:c1:cd:8e:1b:df:de:0d:90:ac:38:f4:4b:75:
a7:4a:da:c9:b8:10:6d:10:6f:12:cf:a1:68:8f:ce:
e5:dc:e9:52:81:94:49:d5:c0:70:a9:70:33:b0:ad:
5c:80:da:75:82:db:a6:c0:06:f3:18:2d:42:c1:7c:
85:47:4e:36:ac:fe:3e:9c:26:3d:f0:f4:27:1d:3c:
bf:8a:1f:6d:98:b6:99:fe:28:5d:ae:5a:dd:eb:ee:
bd:53:6a:9a:26:76:20:da:9d:e5:1d:64:dc:2b:bc:
55:8b:d5:73:da:ec:b6:b1:53:6e:d4:13:30:4f:ce:
dc:5a:2a:1d:2b:ad:f9:d0:50:15:33:e2:d5:f2:5b:
df:7c:5a:b6:25:15:ef:1c:1e:db:2c:f1:df:18:7f:
10:2e:80:9a:10:d7:64:6e:1f:ab:93:7d:34:77:34:
b3:1c:50:44:35:35:38:56:ee:d2:40:ba:80:44:b4:
b5:c2:2c:63:ad:67:43:7d:09:38:dd:97:db:4b:b0:
9c:ba:a1:2a:5e:d3:8f:e3:f0:a7:7c:83:eb:d8:35:
00:32:b1:82:9a:89:bb:bd:33:dd:ad:3b:15:37:b7:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:E8:AD:75:E8:99:02:6B:D7:3F:9C:4A:80:EE:71:5F:9C:65:B4
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:73:e1:5e:f7:71:76:2d:b4:e6:13:47:3e:d1:33:9f:f0:
cb:e0:1a:a5:26:bb:b0:09:ee:ed:1c:7f:98:65:67:6b:cc:e3:
89:b9:81:a1:39:aa:66:85:36:21:fd:9a:0e:38:1e:20:8d:5d:
94:2d:df:1a:85:d2:75:6b:21:50:c5:8e:36:15:f1:c8:80:f1:
eb:cb:0b:65:cc:be:68:2f:f2:a3:13:18:a5:24:f3:12:d1:62:
0e:86:dd:eb:83:ef:35:0f:dc:47:0d:1f:09:d1:f4:9b:b6:66:
67:ba:22:2a:53:58:b1:10:84:e4:17:3d:88:22:f6:a3:03:bf:
fa:ff:32:e3:3c:75:e3:dd:eb:02:0f:12:ea:01:9c:01:3d:be:
fe:b7:90:16:a7:ac:94:49:39:96:6d:7a:db:48:d8:3e:b4:e4:
38:25:04:f0:13:fb:e5:3a:d9:13:77:01:11:65:54:dd:7b:8b:
84:cc:88:65:03:bd:fe:11:4c:e3:5a:8c:73:3a:08:22:91:67:
da:09:50:63:01:65:b0:8f:cf:dc:0b:c0:93:72:23:75:89:33:
5c:06:3e:62:03:f4:cc:ab:21:0e:3b:ea:50:55:41:14:3c:83:
ed:81:06:e0:1d:d3:cf:77:e4:4c:0f:9d:3f:ec:fa:83:24:0b:
49:2a:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:43:02 2026 by rpki-client