Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: h1wJofzZJAL9t2pBAvL5hCGGD1DmNOuTZCn8HT5G26w=
Subject key identifier: AA:B8:FC:5F:C4:81:7B:C3:8F:9B:BE:A0:81:40:C9:3F:D5:43:79:EE
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 019F9022E97733F043ED8AB177B9C1B27A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 19D0
Signing time: Thu 23 Jul 2026 18:00:34 +0000
Manifest this update: Thu 23 Jul 2026 18:00:34 +0000
Manifest next update: Fri 24 Jul 2026 18:00:34 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: XX9WEvrSzJ5TXo9HeYxJjO87z+pvmY1xJrv5BdLK+ZY=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e9:77:33:f0:43:ed:8a:b1:77:b9:c1:b2:7a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Jul 23 18:00:34 2026 GMT
Not After : Jul 24 18:00:34 2026 GMT
Subject: CN=aab8fc5fc4817bc38f9bbea08140c93fd54379ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:e8:af:e2:b4:e8:fd:8e:c4:19:e4:37:d6:
a0:50:d9:25:33:2c:6d:88:5f:8d:78:fb:87:e8:35:
fc:d8:4c:9c:a9:84:53:c8:1a:b2:5b:0d:8f:99:1e:
54:fa:8f:d2:ad:f7:1b:c3:26:3c:ea:09:d7:41:ac:
f0:b7:2e:c3:6e:87:ef:18:de:85:15:0f:94:d4:77:
61:ba:50:cf:5c:83:a1:75:7a:e7:ee:54:ad:84:a9:
5f:67:23:a1:7b:c1:db:d3:55:ba:45:83:65:4e:df:
0c:db:db:3d:a5:75:cb:11:64:19:3d:0f:0f:27:3e:
27:fc:a4:a7:b5:39:9f:ce:08:ec:55:8a:3d:65:c7:
53:16:c6:27:df:4b:b5:08:27:40:ef:a8:be:76:6c:
ea:14:61:62:db:84:4c:ea:80:c3:dc:b6:be:66:2c:
ac:3f:46:d9:54:0c:4a:9d:89:6b:6e:6f:c9:cb:1a:
7c:d4:92:7f:1d:fb:f5:04:65:3f:8f:b4:e6:58:ca:
23:b5:9b:4f:e0:72:ff:1c:35:ff:85:61:cf:6c:eb:
16:1e:29:ce:98:d8:84:cf:10:44:a5:e9:ea:ab:29:
ad:4d:e6:52:14:37:cb:85:e9:a8:a7:e9:6c:ef:c0:
fa:ae:c4:41:ea:b2:dd:28:e9:e2:61:28:c3:f7:e8:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:FC:5F:C4:81:7B:C3:8F:9B:BE:A0:81:40:C9:3F:D5:43:79:EE
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:fb:84:09:81:05:39:98:68:67:32:fa:5d:ba:db:d6:59:
fc:a9:42:92:6c:40:2f:2d:6f:10:1f:85:ad:7e:55:6a:05:f4:
4d:73:4d:aa:84:73:99:da:25:89:8f:4e:5d:d2:11:53:d7:d0:
d1:c2:04:cf:2b:9b:aa:b6:4d:66:7d:fe:c4:21:29:cd:c6:23:
9c:c0:1c:25:69:85:61:3a:07:06:78:4b:6f:b6:ee:83:eb:89:
23:31:f0:d8:5a:4b:9a:d2:5f:5a:9c:a3:70:b0:58:77:05:b7:
3e:c6:f1:fb:1b:51:aa:40:26:6a:d0:df:53:64:d9:48:1d:54:
76:a2:44:60:20:dc:04:56:b2:5c:23:f1:43:ec:11:52:15:29:
b6:44:04:d5:95:cd:95:3a:14:4d:c7:c0:25:59:9e:0b:cc:57:
ed:29:7a:9f:cd:d9:5a:98:8c:46:eb:42:2d:44:2a:18:11:31:
8a:1d:63:fc:99:f1:fa:35:c5:ae:49:c1:1d:54:65:06:12:45:
27:1d:a8:45:42:bd:1d:4a:96:06:3f:a8:b5:5e:96:07:e8:9d:
32:46:26:63:31:20:eb:58:09:2d:fe:53:84:01:8c:07:40:e5:
47:66:f3:19:99:a4:a8:5b:2b:7a:f6:9a:e5:2d:9f:be:d9:8e:
3f:8b:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:32 2026 by rpki-client