Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: gQ5xNoJL8T4n/GhUt6QUc/Uq+ejC6hcArP92pQAnc2s=
Subject key identifier: B4:A3:40:1F:43:0C:E3:86:3B:8A:C0:DE:DB:8C:8F:3D:58:50:C1:8C
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019F9580658680C4AD5C558F1F343C9BBCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 16D1
Signing time: Fri 24 Jul 2026 19:00:47 +0000
Manifest this update: Fri 24 Jul 2026 19:00:47 +0000
Manifest next update: Sat 25 Jul 2026 19:00:47 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: 9iGNnUJ1UBiz2dXc+Jur3f5mxQYIuNSLJJRf6UhKaQE=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:65:86:80:c4:ad:5c:55:8f:1f:34:3c:9b:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jul 24 19:00:47 2026 GMT
Not After : Jul 25 19:00:47 2026 GMT
Subject: CN=b4a3401f430ce3863b8ac0dedb8c8f3d5850c18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:c2:e9:87:fe:1e:d9:b7:1a:10:f6:18:7b:
c7:a3:65:2a:6f:ae:6b:19:96:a6:21:6c:78:ce:3b:
66:08:05:42:36:6c:2d:8a:fe:64:8d:ac:d6:39:90:
68:4e:6d:fd:df:59:23:1a:29:11:ae:58:f5:6e:87:
52:2e:ea:f9:8b:bf:f3:4f:81:03:54:54:37:9c:f6:
3b:e1:d7:eb:37:1f:94:f3:8b:31:69:cc:6c:d7:9a:
29:b1:ad:b9:d6:74:dd:6c:70:ad:6b:a1:1b:50:e9:
9d:4e:df:96:c3:68:f0:65:21:f1:a4:f3:30:e1:8e:
83:8a:9f:9f:e5:fa:67:8f:d8:15:6b:45:5a:87:2c:
02:bb:05:de:cf:66:63:99:11:60:ca:18:7d:74:cd:
59:f0:1c:46:1b:32:25:4f:31:17:86:a1:d3:b9:8b:
84:47:d3:16:00:83:da:25:86:da:2b:50:d7:7f:e2:
03:05:ff:17:6a:b9:95:de:c6:70:9e:a3:56:d6:f8:
8b:6f:98:d0:05:14:90:a9:3f:d4:f0:aa:71:7d:df:
32:e7:02:94:4f:56:15:26:d4:4b:50:8f:65:29:48:
ea:f0:16:15:d4:b4:70:8e:4e:15:00:77:31:18:23:
2d:b0:26:49:78:03:0f:67:71:ce:ce:fd:85:b3:bb:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:40:1F:43:0C:E3:86:3B:8A:C0:DE:DB:8C:8F:3D:58:50:C1:8C
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f7:f8:a9:7b:64:43:f6:45:36:6b:a7:12:1a:68:1d:e8:13:
12:4d:72:15:23:37:60:6e:90:07:25:28:d6:ee:89:ac:05:b9:
ef:b1:41:0b:2e:26:62:7f:ff:87:46:db:e4:fe:5a:7f:00:af:
93:09:8f:75:eb:30:81:7d:13:a2:fb:ef:7f:ea:a5:45:11:33:
ef:61:38:9c:79:48:16:a2:51:14:f0:f9:54:44:a2:a8:c1:bc:
5f:85:76:40:29:4f:36:87:84:de:55:24:7f:bf:9a:2b:7f:a7:
59:7b:e3:9e:68:f5:5f:7e:06:fe:17:a6:70:d7:6e:cd:d7:5a:
14:6a:27:42:5c:3c:38:2c:9f:0f:d7:f3:27:e6:d4:e7:3f:f9:
06:96:e5:b4:e5:d1:8a:49:08:94:a0:57:8c:10:21:3c:f6:09:
ea:8e:bf:a0:f8:91:7f:6e:d0:1d:97:45:7e:7c:72:83:bd:b0:
35:0b:88:96:d1:f5:82:70:9e:20:fd:a6:45:ff:3d:60:98:97:
76:d9:d7:2e:65:7d:06:67:a2:4c:27:b1:76:4a:23:ca:9a:66:
bf:4b:e0:d2:6e:a5:86:fc:a8:01:23:3a:16:e5:1d:62:2c:1d:
6b:c5:ec:6d:5e:a0:a1:7f:1b:1f:01:10:fd:48:3d:df:36:5e:
95:ba:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:55 2026 by rpki-client