Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: kTtm5uoqCQ62RZJBhBiCE7YD7u0HuYcfNpYwGjW5Owo=
Subject key identifier: A1:02:1B:F9:CD:E0:5B:97:AE:19:50:FA:38:4A:77:70:79:CE:DB:F4
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 019F92112A6C26A60B4BC42E05237830D996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 0567
Signing time: Fri 24 Jul 2026 03:00:26 +0000
Manifest this update: Fri 24 Jul 2026 03:00:26 +0000
Manifest next update: Sat 25 Jul 2026 03:00:26 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: tzu++dryhSDprcimyfkA5XAM7qx3kXaQwW8o4Mzw51M=)
2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:2a:6c:26:a6:0b:4b:c4:2e:05:23:78:30:d9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Jul 24 03:00:26 2026 GMT
Not After : Jul 25 03:00:26 2026 GMT
Subject: CN=a1021bf9cde05b97ae1950fa384a777079cedbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:8a:2f:f5:2b:0e:21:83:f4:2a:93:05:b6:
96:59:f8:08:23:20:90:6d:cd:f3:2d:ee:c1:db:31:
d7:83:28:f1:60:2c:2d:4c:67:7d:4c:8c:e5:df:a2:
c3:39:c5:2d:ac:af:0e:6d:4b:dd:c4:01:50:1f:35:
7d:6e:a6:a0:4a:bd:64:2c:63:37:8d:79:2e:4c:5c:
21:9c:74:a9:89:e7:3e:34:e0:c4:ff:aa:1b:58:b2:
24:7e:64:ec:99:f8:2d:bd:eb:d4:f4:89:5e:6a:74:
c0:b9:1f:dc:25:c3:34:81:60:78:2a:88:68:2e:aa:
78:c8:55:ac:73:65:7f:8d:2a:c7:18:8b:0e:cc:cd:
d2:d8:c1:53:c2:99:a0:4c:a2:a8:5f:54:e7:73:b0:
01:ab:1f:b4:58:6d:81:02:6e:9e:a8:16:3a:45:51:
17:6d:cf:41:d6:28:21:a3:55:00:26:ae:52:cb:32:
f5:7d:5f:58:ae:1d:df:76:a3:77:36:f6:55:78:a2:
3b:ef:11:5f:04:a2:32:b1:ea:f4:86:88:9e:53:dc:
6e:c8:16:5f:3c:77:f2:f2:2b:6e:8c:0d:d6:c2:4b:
03:df:09:90:7a:3c:82:bc:67:58:b9:ae:86:01:44:
b9:1b:38:c9:7e:98:23:a6:51:c0:00:5a:79:b2:0a:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:1B:F9:CD:E0:5B:97:AE:19:50:FA:38:4A:77:70:79:CE:DB:F4
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:eb:6f:30:04:cc:77:fd:49:f9:78:53:32:4c:10:ad:77:47:
d6:0c:e7:de:fc:f8:c3:28:3e:54:ec:a3:22:28:3d:15:34:64:
37:90:93:2d:40:c6:99:a1:f6:a6:6e:c6:14:3e:f8:7c:be:fe:
8e:ed:5f:f9:6e:99:80:ba:7e:fa:db:49:03:b9:16:10:0b:ba:
ca:c2:ca:b9:b4:b0:85:0a:ce:c5:c3:d7:66:48:b9:7d:dd:fa:
d5:7d:9d:a3:35:7f:b5:75:45:06:9e:ed:71:35:f5:a0:a5:37:
42:4c:2b:9a:d0:52:96:6a:68:ab:54:9e:cf:c0:68:96:9c:6a:
43:71:d9:b6:cb:50:de:fc:78:6e:68:b9:09:8d:ce:f3:7c:7f:
26:56:d6:fe:99:0a:e1:d6:24:56:4b:9c:a8:eb:b7:3b:75:73:
26:e2:69:0c:1b:3e:55:43:54:3b:a8:d5:54:61:55:a3:83:9b:
bd:3b:42:5f:ec:53:89:be:35:44:e2:af:9c:42:94:74:f7:e4:
73:aa:f5:0b:94:89:78:2f:34:9c:38:b2:11:0d:59:c1:fe:08:
b1:47:fb:fc:04:a0:7b:3a:9f:bb:cd:c5:cd:1f:b3:8f:28:bc:
ea:a2:31:65:30:be:f2:57:09:fd:a5:e2:59:6e:2b:0f:c3:cf:
8e:28:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:45 2026 by rpki-client