Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: fooZ9t64MS0gFycFrgzsZ29ugNGAZvVj5F0kKnjgp4I=
Subject key identifier: 9E:74:16:BD:AF:ED:4A:CF:2F:93:1C:35:16:1B:BB:AE:5E:0B:8E:C6
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019F90C7BF4D3F56E91CB7ED8C9BEB93231F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:37 +0000
Manifest this update: Thu 23 Jul 2026 21:00:37 +0000
Manifest next update: Fri 24 Jul 2026 21:00:37 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: 6vuJR0qDJTZ1uKC6lKxjCB37oxTuUtzPVbsMio4UkVc=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:bf:4d:3f:56:e9:1c:b7:ed:8c:9b:eb:93:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jul 23 21:00:37 2026 GMT
Not After : Jul 24 21:00:37 2026 GMT
Subject: CN=9e7416bdafed4acf2f931c35161bbbae5e0b8ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:7a:18:48:4e:d6:40:e9:00:9c:b6:e5:10:
61:b7:e2:a8:b4:dc:ae:ae:29:75:53:20:9d:cc:f2:
1b:26:56:0c:a0:1e:76:79:e2:ff:14:16:07:ad:f7:
71:27:76:b5:0a:99:9f:96:f4:6a:1f:1f:80:e2:e9:
0f:f4:a3:7e:36:71:a9:a7:95:db:f1:93:fe:a3:a7:
cd:f3:2d:ca:e0:6e:0c:ca:8e:7f:c6:4c:19:73:fd:
a7:d7:c0:a1:78:d3:e1:e6:bd:37:67:f5:79:ee:50:
b8:2b:0d:d8:16:ad:2f:5e:2e:f4:e4:fd:b9:75:6c:
38:6f:f0:27:b0:ba:ea:d8:9b:35:a2:ec:9f:61:06:
e1:57:09:10:76:a0:d6:be:26:f2:7f:cd:a5:3f:1f:
8e:d2:a3:78:c8:a0:f6:19:0a:68:ef:81:7a:18:f6:
a6:37:c7:6e:9c:ba:00:17:cc:4b:c9:f6:15:f6:5f:
40:34:2c:3a:bf:d8:85:f7:dc:3c:16:2a:ca:20:52:
a1:f7:f2:a9:a3:10:9f:fa:4f:a0:e5:90:b2:97:59:
ff:bc:b2:5d:d5:ac:50:02:db:46:9e:ff:7e:ec:df:
26:16:4a:c3:db:b7:66:4c:55:35:3c:5a:67:73:8e:
61:24:c9:81:ea:cd:00:3f:d3:31:f4:68:7a:27:81:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:16:BD:AF:ED:4A:CF:2F:93:1C:35:16:1B:BB:AE:5E:0B:8E:C6
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:2a:f9:b5:39:e8:02:72:fd:ef:52:62:73:c8:d4:b4:8c:
2c:a7:9d:4a:0d:f1:2e:d9:8c:f3:18:ab:48:19:45:ef:c7:7b:
a1:ea:db:5f:2a:ce:ad:ec:8a:cb:2f:52:b6:58:94:c0:c3:c6:
68:6d:ed:5a:a4:26:47:c7:03:b2:b1:84:21:cd:8c:fa:bb:0d:
a9:74:6f:5c:4a:fb:bb:fb:72:d5:55:c2:f4:a3:bf:78:88:8b:
d0:b7:6c:c0:5e:19:47:7a:d0:df:fa:97:d5:39:7f:b1:4a:24:
ca:3b:61:81:8d:10:46:2c:34:65:1e:59:7c:3e:6d:ff:ef:e8:
f1:29:b3:7b:b9:3e:4c:31:2c:15:23:f1:40:b1:03:b1:12:6e:
8d:b4:dd:9b:9a:e4:5c:4c:93:af:47:97:58:e3:33:c9:8e:2b:
ac:4d:40:14:63:4b:12:41:f3:ad:dc:9b:ea:73:a2:39:e2:a0:
e4:72:9d:4f:8e:01:7e:88:62:f4:49:ad:36:1b:33:e5:f4:22:
bf:6a:dc:10:c3:9f:5b:b3:4f:41:23:72:e2:05:e2:9f:39:67:
e8:82:14:0c:2c:72:d7:18:3d:f7:3e:17:de:65:36:ca:75:c8:
f3:4b:30:69:91:cb:94:ed:1b:85:2a:b6:3a:42:14:63:e4:21:
b6:0d:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:44 2026 by rpki-client