Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: PwyoWfT8v7N68GnaWYj3Y+vb6hq2v8lzLWMB1PZgfgU=
Subject key identifier: 14:B7:BA:26:45:9A:EA:3A:CD:18:08:DE:48:A4:B8:11:ED:5B:7B:AC
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 019F946D5C6053309DD5B5C355ABA34A8F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 14:00:22 +0000
Manifest this update: Fri 24 Jul 2026 14:00:22 +0000
Manifest next update: Sat 25 Jul 2026 14:00:22 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: dbOZw5NHs5ITtiRNXsvX+/vlhXk2Ft6ewyqgHDhuyy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:5c:60:53:30:9d:d5:b5:c3:55:ab:a3:4a:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Jul 24 14:00:22 2026 GMT
Not After : Jul 25 14:00:22 2026 GMT
Subject: CN=14b7ba26459aea3acd1808de48a4b811ed5b7bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:25:50:f1:68:9d:e1:5b:0a:45:6c:98:84:
fd:af:7d:9c:d3:8f:ee:0c:24:95:24:ca:ab:85:ae:
f9:af:4a:54:f0:31:39:7b:b0:da:64:39:6f:6b:f9:
99:09:bb:36:4c:29:51:41:cc:5c:51:dd:89:80:60:
e5:95:43:68:3c:14:5f:b6:47:5e:b0:cb:ce:2e:ad:
7a:36:3b:ea:3d:e3:d5:96:0c:e2:ce:f8:69:c7:93:
f8:80:74:94:b2:88:13:83:85:0c:75:a7:21:44:5f:
75:34:3f:5a:ba:d0:a1:72:0e:06:d4:aa:07:5d:97:
3f:dc:87:17:69:60:b3:c7:f0:61:97:e8:fc:4e:b6:
90:18:36:ba:99:c0:a7:4d:38:70:ae:f7:b8:ac:dc:
31:9a:14:64:8c:6a:0d:90:4c:61:43:68:5f:37:f2:
03:64:90:b8:a2:08:36:e6:e4:16:05:42:1b:ed:d0:
67:43:4c:1a:e2:ef:8d:33:df:cf:8c:64:21:1e:35:
73:62:ce:51:5f:6b:6e:e7:d3:f2:5a:14:ed:d6:48:
fc:05:41:5b:a6:43:37:b6:1b:2b:90:1e:ea:47:80:
d0:e3:23:34:10:25:56:08:b9:db:a9:e1:e2:33:11:
ee:db:70:d7:9f:d3:f1:7e:d9:f6:92:62:1f:3c:2c:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:BA:26:45:9A:EA:3A:CD:18:08:DE:48:A4:B8:11:ED:5B:7B:AC
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:1f:7e:2e:6a:a9:60:5e:7f:34:70:83:ea:cd:16:68:05:
d9:6d:4a:1a:0e:3a:1b:1f:e4:9b:f8:26:66:70:2c:22:e6:21:
47:a9:86:96:52:4f:e4:04:cd:9e:36:9c:b9:1f:92:04:52:4e:
a8:04:ef:78:01:9a:12:96:66:c7:b4:7a:f8:57:23:b0:ce:a7:
6a:0b:ec:f0:b1:06:40:c6:80:56:42:75:fc:e1:8f:a9:d9:ef:
ad:8c:5a:b9:29:f3:cc:f5:2f:20:8d:fa:dc:c9:03:e6:08:52:
1a:4b:e2:f6:23:d8:c2:90:58:01:d5:0d:cd:f7:45:0b:21:90:
c8:8e:2d:9c:cf:b1:bd:4d:26:fc:26:78:a0:1b:33:c9:31:cf:
44:2b:40:00:ff:22:82:be:7a:a2:87:99:d7:d9:d5:e3:e0:86:
3c:07:29:fa:ad:d6:a7:1c:20:f8:5f:24:83:e8:85:cf:53:a1:
5c:c9:86:9e:95:5d:3e:c0:61:29:1e:d5:6a:f3:92:ac:45:cd:
96:57:a2:48:67:5a:b0:83:50:82:de:db:7c:4f:3d:c0:51:01:
f3:f5:49:16:87:b3:4b:7b:d0:33:72:11:34:10:9a:27:0c:49:
7e:26:3e:52:9d:fc:ce:2f:80:0b:90:40:81:0e:5c:38:f3:80:
1e:cc:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:44 2026 by rpki-client