Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: 1+UZkky9aDebrkB4trrDE0hSU9kdulFo7IlWgXhQnP0=
Subject key identifier: 70:14:29:E3:01:45:01:C7:C5:80:5A:19:F6:F8:B1:4D:C3:5E:22:D7
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019F927FD3BF0FA48651707123E7176CD222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 05:01:18 +0000
Manifest this update: Fri 24 Jul 2026 05:01:18 +0000
Manifest next update: Sat 25 Jul 2026 05:01:18 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: kNSIPqi+FsTzxLQdBCcmyHwqOVf01vwrrxHbweXdNEc=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:d3:bf:0f:a4:86:51:70:71:23:e7:17:6c:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jul 24 05:01:18 2026 GMT
Not After : Jul 25 05:01:18 2026 GMT
Subject: CN=701429e3014501c7c5805a19f6f8b14dc35e22d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:41:d7:03:ff:23:94:31:65:36:13:80:48:
78:33:ab:7b:43:70:bf:70:93:93:8d:8b:ae:c6:4a:
72:bf:8d:a8:6b:6c:62:8b:a6:ac:d5:17:e8:a4:0d:
09:96:41:df:cd:00:d2:5a:13:e7:7d:c5:fa:21:65:
6e:54:23:6f:ea:32:88:12:d8:93:2b:41:5a:fe:cb:
83:43:79:07:6f:e1:a6:20:35:4c:51:9c:17:f4:70:
ad:f2:30:95:d7:3c:ae:08:67:4e:7c:0b:dd:c9:34:
de:90:3f:f6:97:1e:b3:d2:31:2d:0f:b9:3c:38:27:
89:18:b8:c9:ae:ca:74:46:f8:05:00:a8:54:0f:95:
fa:a4:22:fc:4a:33:a8:eb:ea:7e:f0:f4:13:2c:94:
f0:45:4a:6b:e0:ef:ec:bd:82:80:04:2e:46:63:9c:
b1:d9:e6:90:9f:64:c7:38:39:8c:5c:80:c1:3b:f7:
5f:39:49:cd:b7:3c:e3:7d:cf:35:2f:33:ef:06:98:
fa:9f:7f:8a:d7:28:bd:be:c5:e0:82:9c:ab:d2:b0:
37:e4:e0:b4:a1:f5:d6:19:3d:69:6b:1b:5d:a5:b6:
85:09:39:af:55:e0:aa:fb:1b:54:cb:f0:3e:3f:22:
13:be:a1:74:34:1b:5f:ea:9b:b2:a6:b7:9c:ec:13:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:14:29:E3:01:45:01:C7:C5:80:5A:19:F6:F8:B1:4D:C3:5E:22:D7
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:9f:b9:d9:2b:39:21:11:01:24:bd:eb:d6:c8:68:fa:5b:
52:b3:f8:b4:6b:42:42:19:fd:89:dc:2e:f9:d3:03:d4:22:19:
3c:91:fe:5e:74:d7:4c:66:d1:f6:93:09:a9:5b:65:31:ab:8b:
9b:73:3d:68:c3:51:c4:e0:65:a8:26:4a:82:de:17:f4:94:c2:
98:2b:84:1e:38:05:ab:7c:d8:45:9d:14:86:6f:f7:7f:96:3e:
7d:b8:5a:32:30:01:83:94:dc:64:7b:b0:ce:89:24:59:6d:c7:
30:b7:f2:91:fe:51:bc:f4:4c:03:b8:59:2c:50:98:12:8f:58:
80:d1:7b:da:1c:41:61:6d:69:0c:a2:48:26:01:70:8f:f6:32:
7e:02:37:4e:82:b5:12:69:80:98:26:f8:b1:ba:b5:b0:da:11:
95:f6:3d:3a:54:cf:bc:d7:c1:42:b9:3e:76:e0:5e:48:70:7c:
06:e1:9b:61:b6:4a:ad:dd:f3:07:0f:4c:f0:c3:01:06:9f:f1:
ad:a9:e7:43:6c:2d:ee:13:9d:30:b5:bd:7b:1f:e0:a6:9b:3e:
0f:1b:d6:7f:54:95:af:e8:31:a7:d2:8d:e8:46:1a:65:40:86:
0f:8b:f0:b0:89:13:c0:c4:1c:8e:a2:0e:27:47:c8:50:a2:92:
6f:af:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:14 2026 by rpki-client