Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: U1jB0O/WYjAgjHIAMI73KLYRkuQ1wad5/kfg01xfWkg=
Subject key identifier: D8:99:82:9A:05:5F:C8:73:C9:2C:75:C3:90:CC:9B:EA:4D:0D:8E:84
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019E20C828CC67A3DD0307BBED75E54F96DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1610
Signing time: Wed 13 May 2026 10:00:48 +0000
Manifest this update: Wed 13 May 2026 10:00:48 +0000
Manifest next update: Thu 14 May 2026 10:00:48 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: HrVFoc0Nwso/b00tfJGFtHmnYTklCkS+DoQMFMZX3hg=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:28:cc:67:a3:dd:03:07:bb:ed:75:e5:4f:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: May 13 10:00:48 2026 GMT
Not After : May 14 10:00:48 2026 GMT
Subject: CN=d899829a055fc873c92c75c390cc9bea4d0d8e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:58:07:10:c3:5c:d7:42:ad:e9:80:fc:63:
3e:95:c3:8c:49:00:f0:3d:8f:b0:04:68:2d:00:0c:
6e:71:ea:d9:74:df:d9:c2:c6:a0:5c:a2:5c:87:c4:
85:6f:cd:8f:67:9a:57:1c:f9:f7:3c:ac:ae:6a:76:
70:f0:dc:17:40:ba:54:79:2f:92:69:b1:4e:a2:32:
b5:fc:a6:72:80:0b:7f:1f:ae:92:a5:91:15:da:f7:
85:4c:a4:71:58:30:e7:82:47:2d:74:ab:d0:ce:c1:
db:00:98:b1:0c:36:62:b4:d7:a4:88:a4:06:2e:6c:
df:05:b6:ee:21:6f:17:c9:9c:00:eb:9a:d5:f4:2f:
12:aa:03:88:9e:10:0e:be:4f:68:9b:0e:e3:24:21:
80:27:56:53:de:ac:a1:e4:fe:cb:20:04:b0:92:01:
73:02:2e:d1:9f:47:a8:6a:06:15:5c:8d:03:e6:6f:
da:13:8b:e8:6d:57:18:84:6e:26:71:9c:33:90:68:
cb:13:87:e7:44:3c:da:76:85:85:c9:f5:7a:55:53:
f8:76:38:73:67:f9:86:8e:e8:a1:93:cb:d2:18:a1:
98:ab:9a:27:73:20:b0:bc:1a:05:be:d6:1f:b2:0b:
33:ad:92:46:af:ea:42:92:98:a2:f7:92:91:ac:f6:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:82:9A:05:5F:C8:73:C9:2C:75:C3:90:CC:9B:EA:4D:0D:8E:84
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:66:45:83:13:d8:ec:eb:5a:1b:66:bf:f7:5c:46:42:d3:41:
36:2f:ab:42:71:d0:02:6c:13:de:9d:a4:47:42:b1:37:a8:f8:
5f:ca:25:81:df:58:8c:ae:ba:b3:cb:50:79:6e:81:6c:7e:63:
43:48:aa:ac:3b:a5:fd:9b:46:60:17:b0:a5:12:2f:5b:aa:bc:
a1:03:73:ca:3c:8f:df:d9:8c:25:8e:3d:cf:c6:d9:93:2d:d2:
10:08:88:f1:40:4e:37:f5:44:ed:46:27:76:e8:76:0c:b9:2f:
52:95:2b:79:74:bc:e7:07:82:32:a4:d6:ed:56:38:7e:1f:e9:
dd:83:04:4c:2f:00:c8:f7:7f:bd:c3:13:cb:d5:5e:c8:f0:a8:
8d:c5:6a:cf:da:af:74:77:6a:2a:8b:b4:7e:de:8a:18:e4:d0:
bd:ca:83:83:75:6c:ab:c7:c9:e3:8a:b3:ad:ed:e4:15:60:3b:
d2:5d:df:bc:ea:e6:3a:51:9a:00:df:10:59:b7:88:7d:c6:24:
7d:35:af:38:cd:d9:7a:17:39:69:46:3f:49:b1:30:16:20:03:
2b:f0:d9:f7:02:7f:2f:6f:f6:f9:80:01:a5:9a:27:65:0b:38:
e9:03:52:0f:b9:c2:13:48:99:aa:ee:35:56:53:c8:c4:b7:ee:
25:5b:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:38 2026 by rpki-client