Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: INNHINXtzSWci/IAtVT9K+jcmYWupS9U7ARj1F8jC/w=
Subject key identifier: 75:EB:8C:65:18:59:EA:3F:AC:CC:77:25:21:A8:7C:F2:83:1A:42:0E
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019F92ED00173156F171396B69CFA3F224B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 07EB
Signing time: Fri 24 Jul 2026 07:00:33 +0000
Manifest this update: Fri 24 Jul 2026 07:00:33 +0000
Manifest next update: Sat 25 Jul 2026 07:00:33 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: Q3WBOb6qhfJtRa7enkI8rrT3Si83bVH09Pqr1PUiKCk=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:00:17:31:56:f1:71:39:6b:69:cf:a3:f2:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jul 24 07:00:33 2026 GMT
Not After : Jul 25 07:00:33 2026 GMT
Subject: CN=75eb8c651859ea3faccc772521a87cf2831a420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:96:91:af:c9:c7:92:b4:a5:32:8b:ca:63:
d2:d6:eb:55:d9:7f:b7:38:3b:c6:66:ad:cb:7d:d3:
c5:6e:e7:49:94:a4:45:d1:d9:40:c7:43:26:8a:5f:
b3:6b:7d:26:99:a3:e4:e9:17:12:c3:87:54:da:02:
76:36:58:ea:75:d6:c3:10:26:27:63:6c:69:cd:4c:
ba:3b:e3:28:b5:c2:34:bd:b4:dd:75:da:66:a0:c6:
6a:7a:47:18:d1:db:a0:40:0d:25:ac:3a:4c:33:41:
51:c4:52:47:7d:83:4b:99:30:06:36:c3:0c:e9:18:
10:b5:dd:ca:2d:c0:75:13:43:02:ff:52:a1:25:33:
c4:75:7b:76:11:9b:f2:4d:71:be:0b:a8:70:97:f4:
90:3c:8e:a8:16:80:c8:8c:05:b0:98:66:d8:0e:20:
bb:74:3e:09:67:6e:c0:9f:18:76:e9:80:4d:aa:bc:
04:0a:9c:a7:18:0d:81:29:e3:47:65:36:52:0f:de:
41:20:c4:7b:49:96:dd:ce:c5:12:a6:45:e2:ae:4d:
04:7d:bd:26:11:bc:f3:9f:fc:fc:c4:b9:dc:9f:60:
0f:0e:6a:31:e0:08:6c:f0:e2:38:a0:6f:43:e9:01:
c9:f4:ef:79:08:22:10:b9:ea:55:3f:8f:f1:d8:11:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:8C:65:18:59:EA:3F:AC:CC:77:25:21:A8:7C:F2:83:1A:42:0E
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:89:74:ef:51:e4:b5:c6:38:1d:32:55:45:c1:9e:28:20:
7d:42:fb:46:5a:91:cb:ba:e3:74:77:40:49:c4:a5:48:c3:d8:
1c:30:79:60:03:f5:ec:cc:bb:13:0c:cd:ca:e9:46:d8:a1:b5:
d3:b1:34:ee:6c:76:50:f4:2e:32:1c:4b:33:28:3c:1c:a2:dd:
3d:20:e8:74:16:69:f7:aa:63:16:27:b1:3b:03:e9:ef:7f:89:
99:bd:7e:3b:81:21:2b:59:e4:6e:f0:cf:b4:04:4a:9c:8f:af:
e2:b7:07:bf:53:ce:fa:a3:b5:93:f2:ad:e1:b3:58:cc:ca:7f:
a3:e5:fa:85:79:a2:70:56:31:c8:a3:91:f3:88:4a:7f:49:0d:
c8:e4:54:14:f6:10:00:4a:ae:ed:4c:b3:1b:b9:58:6c:c4:2e:
cd:1f:bd:e3:5d:eb:2b:e0:18:fb:28:69:d7:27:26:de:5c:a1:
20:56:9f:77:7f:98:81:9f:1e:ab:f4:e5:a8:19:26:85:9f:20:
96:f6:17:c8:99:39:bb:9d:ca:dd:26:83:09:ca:19:86:6d:89:
38:0a:c1:ad:2a:77:6d:8f:87:1b:37:1e:87:c9:e0:15:38:41:
52:8f:0b:92:38:13:f6:7d:f5:f6:e6:7e:d3:ee:c5:b4:2d:4e:
e5:c8:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:25 2026 by rpki-client