Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: YIr6KLW7YYpCACB4RbBTUVNAwJoCPQR8aFL6rwr0/yc=
Subject key identifier: 15:F7:0E:14:84:67:CB:A8:F1:13:8C:15:40:30:5A:2C:BE:F7:82:72
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 019F951273EE32E8A7E86867109D78153871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 154F
Signing time: Fri 24 Jul 2026 17:00:42 +0000
Manifest this update: Fri 24 Jul 2026 17:00:42 +0000
Manifest next update: Sat 25 Jul 2026 17:00:42 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: bUlD86XwE0n9Xi7HuJkZMa+disy9Id0v6V8LdCNkkUo=)
2: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (hash: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q=)
3: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (hash: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:73:ee:32:e8:a7:e8:68:67:10:9d:78:15:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jul 24 17:00:42 2026 GMT
Not After : Jul 25 17:00:42 2026 GMT
Subject: CN=15f70e148467cba8f1138c1540305a2cbef78272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:f0:ca:5a:0d:c5:4c:84:4f:b1:8b:a5:51:
aa:10:37:f0:b5:66:aa:14:ce:d1:f8:3c:4b:6b:a5:
3a:ab:ce:9f:ac:b9:03:bc:83:01:b7:bd:18:8f:45:
ab:d9:0c:5b:4e:98:5a:bd:cd:dc:37:fc:a0:7b:24:
fe:3d:3d:f3:37:71:25:7c:0a:78:41:1e:14:66:a1:
8a:55:02:d8:9f:a7:d4:6b:6f:24:8a:c0:f5:71:26:
15:8d:cb:4d:fe:1f:12:37:13:4b:06:ab:94:f7:98:
99:46:c0:92:69:54:11:65:f7:dc:63:e8:ce:29:79:
f8:f3:8a:e9:92:8f:ae:1b:96:2c:fe:bf:81:1e:27:
fe:78:5d:92:f7:cf:a2:95:13:d7:44:89:c8:6c:1f:
28:df:cf:d3:82:4a:25:db:4d:44:4c:81:cf:2a:d8:
a5:d6:1c:97:c9:34:7e:fb:e5:70:1f:81:80:a5:63:
40:9d:aa:51:e4:9c:b6:42:ae:8b:21:8b:6f:59:d5:
53:68:03:66:27:50:4a:a0:b1:6f:70:c1:b8:2c:da:
04:a0:6a:69:e7:a2:56:ab:54:a2:d6:fc:9d:05:71:
c5:f6:a6:5f:85:51:97:65:f4:03:b2:9a:ac:34:bb:
42:ae:3a:cd:68:df:17:75:4e:83:f0:d3:e7:22:29:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:0E:14:84:67:CB:A8:F1:13:8C:15:40:30:5A:2C:BE:F7:82:72
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:7f:ce:10:e8:f2:02:2e:63:ec:1d:a1:14:05:ec:05:22:
ba:d5:83:70:57:f4:c5:43:e5:e2:98:7b:72:84:d2:58:72:cb:
6f:81:78:e0:55:91:85:ce:7c:ed:c5:e3:9b:4d:3c:63:9e:2d:
8a:f2:bb:03:a4:4b:93:d9:ca:8e:d7:00:29:fc:80:21:c2:c0:
74:b1:91:23:40:9c:e3:5f:12:cb:d6:8c:47:cf:18:e0:1c:4e:
70:23:a1:6c:c4:c5:02:30:85:af:41:bd:80:8d:c0:c6:97:74:
23:64:35:37:81:aa:89:5e:17:dc:ce:a6:27:5b:bb:40:fc:17:
9c:fa:32:ef:7b:b2:68:57:b3:ef:33:5d:89:dc:24:7b:04:d8:
ae:84:95:77:95:e8:2f:8e:04:8e:1a:b1:02:c6:ca:1e:d7:56:
29:47:b4:7c:14:0a:f9:87:74:f5:4b:ce:b9:dc:f0:5c:f5:a5:
ea:07:fa:41:d6:19:f3:f4:6a:4e:72:8c:18:c8:49:1b:db:cb:
69:a4:67:d5:35:39:8d:6d:63:2e:13:f3:76:6a:8b:04:fe:a2:
54:c3:c1:dd:5b:fd:70:9f:82:1d:ca:98:e5:44:bc:30:84:61:
09:3f:62:1f:bb:91:5f:26:cc:94:b0:4f:ae:1b:7f:4d:ab:a3:
8c:ad:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:51 2026 by rpki-client