Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: Hrn04tE+3bPg90XMq7+A0ndlAB+EwGCeyjbtZ5p6ErI=
Subject key identifier: 9D:B3:6D:8F:A4:B4:95:48:E7:41:34:2D:AF:35:08:63:5E:CC:AE:62
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019F8F7E599849DA7683938271672DC2A61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 15:00:50 +0000
Manifest this update: Thu 23 Jul 2026 15:00:50 +0000
Manifest next update: Fri 24 Jul 2026 15:00:50 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: xoRAMx/NaLCCgOxsqsrfzt7RiSICn0BBtyopr81T2sw=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:59:98:49:da:76:83:93:82:71:67:2d:c2:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jul 23 15:00:50 2026 GMT
Not After : Jul 24 15:00:50 2026 GMT
Subject: CN=9db36d8fa4b49548e741342daf3508635eccae62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:16:c2:de:89:3c:56:7b:10:c2:7f:cd:5e:
99:98:f5:61:7f:0d:34:6b:29:9b:c5:79:81:54:fe:
42:7a:44:f4:49:ff:1a:bb:73:b5:f6:c1:a2:55:2b:
06:8b:38:cf:cf:a7:a2:55:95:b9:21:6d:94:7c:1d:
b0:96:29:28:d3:ba:b8:16:ba:d1:09:f4:c7:37:03:
d0:f4:a4:e7:29:77:80:ac:68:5b:d1:5e:cf:eb:7e:
43:73:ba:81:84:9a:dc:30:7a:01:67:4e:54:56:22:
8e:be:2e:d3:0a:a2:dc:c8:94:72:42:d1:0c:5d:f6:
aa:61:e4:98:f2:63:35:e4:7c:7c:08:8c:a0:2b:4c:
fd:11:f9:bc:60:4f:fb:34:c1:15:fc:0c:b7:98:0f:
b7:49:38:3e:92:a3:f2:25:e2:72:82:cd:51:6b:25:
5b:9f:d7:d6:87:d6:9e:ab:27:59:49:2b:a7:75:d8:
6d:41:01:f7:37:44:af:9e:45:ec:d3:1b:89:c0:58:
de:05:29:73:d1:bf:fd:36:93:48:d2:5b:72:34:cd:
aa:09:1d:48:1e:8e:e2:f7:0c:62:a4:d1:52:cf:20:
a9:73:be:82:76:5c:0d:24:3e:ed:80:ac:b4:dd:90:
ba:50:4e:c7:e6:10:a8:de:23:3d:79:e5:c4:65:ac:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:6D:8F:A4:B4:95:48:E7:41:34:2D:AF:35:08:63:5E:CC:AE:62
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:a4:55:43:48:1f:ff:2a:e4:2a:34:63:1e:14:df:0a:4c:
f8:7f:ea:fb:dc:3c:a1:bf:ee:8e:70:00:3e:7f:72:3c:2b:c1:
fe:16:e9:d5:0d:79:8b:2b:48:40:ef:36:72:c6:5b:db:c8:6a:
15:08:5b:04:7b:f6:8e:55:1b:20:f0:27:04:a2:f6:55:36:e9:
b9:8e:ac:60:b8:39:58:d6:f6:43:a5:b1:6a:62:3f:fe:16:8c:
c7:fc:10:17:03:b6:a9:c7:64:3e:d0:10:ab:8c:10:87:c4:c2:
d0:33:ee:a2:8b:0a:9e:1a:23:41:9c:a2:dc:53:e7:d5:64:d4:
dc:73:f5:2a:83:09:3f:d8:0a:68:ae:ed:36:ba:7a:15:00:78:
c3:72:d2:e0:5e:4f:dd:6f:ea:d8:eb:0e:be:f5:33:69:9f:b9:
cb:b0:03:79:1e:d4:1b:5d:ed:04:1f:de:8b:7f:c2:75:74:18:
cb:e4:d5:42:60:55:0e:f4:79:ef:1c:af:e8:27:82:8c:be:f4:
c1:7f:47:ee:66:18:8b:c3:27:3a:aa:cb:1c:cc:8a:f9:92:1c:
5b:12:6a:56:5e:84:da:cb:18:34:a7:52:dc:a1:01:bb:54:63:
f6:2c:e1:4b:d6:20:68:c9:87:9b:62:40:0f:8f:34:9c:de:0e:
0c:50:78:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PflmYSdp2g5OCcWctwqYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjYwNzIzMTUwMDUwWhcNMjYwNzI0MTUwMDUwWjAzMTEwLwYDVQQD
Eyg5ZGIzNmQ4ZmE0YjQ5NTQ4ZTc0MTM0MmRhZjM1MDg2MzVlY2NhZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIYWwt6JPFZ7EMJ/zV6ZmPVhfw00
aymbxXmBVP5CekT0Sf8au3O19sGiVSsGizjPz6eiVZW5IW2UfB2wliko07q4FrrR
CfTHNwPQ9KTnKXeArGhb0V7P635Dc7qBhJrcMHoBZ05UViKOvi7TCqLcyJRyQtEM
XfaqYeSY8mM15Hx8CIygK0z9Efm8YE/7NMEV/Ay3mA+3STg+kqPyJeJygs1RayVb
n9fWh9aeqydZSSunddhtQQH3N0SvnkXs0xuJwFjeBSlz0b/9NpNI0ltyNM2qCR1I
Ho7i9wxipNFSzyCpc76CdlwNJD7tgKy03ZC6UE7H5hCo3iM9eeXEZawG0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2zbY+ktJVI50E0La81CGNezK5iMB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZ2kVUNI
H/8q5Co0Yx4U3wpM+H/q+9w8ob/ujnAAPn9yPCvB/hbp1Q15iytIQO82csZb28hq
FQhbBHv2jlUbIPAnBKL2VTbpuY6sYLg5WNb2Q6WxamI//haMx/wQFwO2qcdkPtAQ
q4wQh8TC0DPuoosKnhojQZyi3FPn1WTU3HP1KoMJP9gKaK7tNrp6FQB4w3LS4F5P
3W/q2OsOvvUzaZ+5y7ADeR7UG13tBB/ei3/CdXQYy+TVQmBVDvR57xyv6CeCjL70
wX9H7mYYi8MnOqrLHMyK+ZIcWxJqVl6E2ssYNKdS3KEBu1Rj9izhS9YgaMmHm2JA
D480nN4ODFB4LQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:52 2026 by rpki-client