Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: zgJ939JYUlWHuTygkp0HdWqZSnFEAc0jfrX2OqwBXlA=
Subject key identifier: 59:53:C3:62:5F:9B:74:21:C7:54:8A:EC:0D:42:D2:56:AE:AD:2B:57
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 019F9323B3BBEB5CAC0CA899F99AE7DFA29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 154E
Signing time: Fri 24 Jul 2026 08:00:18 +0000
Manifest this update: Fri 24 Jul 2026 08:00:18 +0000
Manifest next update: Sat 25 Jul 2026 08:00:18 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: F8vd0HwmsEj4c5S/bu4aZEGIsCRa5OKG5Y2K0LBrVzs=)
2: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (hash: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q=)
3: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (hash: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b3:bb:eb:5c:ac:0c:a8:99:f9:9a:e7:df:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jul 24 08:00:18 2026 GMT
Not After : Jul 25 08:00:18 2026 GMT
Subject: CN=5953c3625f9b7421c7548aec0d42d256aead2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:d2:1d:a6:39:2b:4e:fb:66:37:c0:b6:a7:
2b:d0:e7:c1:54:eb:e0:c2:38:dd:06:a0:04:ad:44:
f4:e6:dd:74:82:32:b8:77:77:af:05:95:ab:c2:60:
1f:32:03:f1:5f:ec:44:f9:f9:9c:62:02:7b:e4:b0:
94:5e:d3:08:a4:76:46:13:6d:8f:29:c8:6d:4f:ba:
90:80:42:e9:4c:39:df:40:a1:72:c8:93:90:a7:70:
7b:e6:6f:23:91:5f:98:2e:af:3f:0a:4b:52:95:7a:
15:3f:b2:27:c8:00:ce:a1:9b:78:f1:ac:90:c8:b3:
6b:45:d6:b8:cd:b5:28:2d:22:99:1b:7f:de:d4:35:
ab:8b:ee:e1:8c:dc:cb:bb:8f:1d:88:0e:2a:43:06:
94:d7:96:a1:a4:06:da:86:7e:cc:0b:11:4f:f4:b7:
ac:db:aa:f4:1a:64:e9:5f:bd:5d:31:d3:2c:56:40:
06:be:ba:f4:84:fe:1e:3c:a8:dd:4e:96:5f:49:8c:
8b:a8:b3:a4:fc:ec:e5:e9:89:d3:55:d5:ea:e0:d6:
6d:68:2f:cd:9d:95:07:d2:c3:48:2d:f8:0a:a0:71:
1e:73:14:32:e6:75:e4:fa:51:9c:00:60:e1:6e:49:
04:3f:be:55:e5:e9:fc:e5:4e:83:aa:fc:96:64:cf:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:53:C3:62:5F:9B:74:21:C7:54:8A:EC:0D:42:D2:56:AE:AD:2B:57
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9b:80:5a:59:d4:fd:5e:4d:bb:de:c5:5f:2f:4f:ad:b8:50:
45:53:a5:58:1a:be:b9:ef:5f:5b:dd:ee:50:a1:2b:61:b8:ac:
5f:3e:bb:4f:29:66:c2:3e:b2:cf:08:c7:55:b2:ab:04:00:51:
8e:33:d7:51:b0:2f:30:a5:b5:56:79:28:d2:73:b4:ba:31:dc:
6b:a1:67:cd:71:fb:49:30:c6:69:93:fc:98:9b:d2:dc:88:ce:
bc:d1:14:0e:6c:8b:a2:8e:97:8a:98:45:e6:40:61:20:f3:43:
03:f2:a8:d2:88:5e:77:4a:30:68:b1:9e:87:15:44:02:c7:b4:
aa:a0:74:23:03:f7:7c:ce:3e:30:27:10:54:71:5f:3d:30:71:
c4:59:37:bb:d4:05:b1:ec:5f:41:6c:18:3a:3c:23:33:ec:ad:
63:4b:5f:d0:44:cb:54:5e:fb:b7:55:f3:f4:ca:8d:53:ac:cb:
4a:d6:0a:27:cf:66:f7:97:6b:7a:9a:b5:1b:ef:b3:6e:40:b4:
77:df:63:31:67:0a:1b:78:05:9f:4d:7d:d8:f1:99:a8:42:af:
f1:7b:cb:f1:4f:7c:ca:b2:d2:94:85:d3:1c:be:ee:e3:ae:04:
fe:84:59:eb:96:b0:eb:14:c5:b1:01:81:5a:ea:ed:fe:60:4e:
f7:34:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:58 2026 by rpki-client