Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: NGaLCH128d58XHZHCKC6OQyhUxg5EFZ/S3MF0+rt9j0=
Subject key identifier: 5E:CF:7C:6D:49:ED:16:29:BD:32:7B:38:6D:67:69:B9:40:37:1D:79
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 019F90C81E896AAA0394B1625B298B8841E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 21:01:01 +0000
Manifest this update: Thu 23 Jul 2026 21:01:01 +0000
Manifest next update: Fri 24 Jul 2026 21:01:01 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: NMPBHnM+1/fdXlJP19zhYTyGLpNihV9IBq1mpylLH9g=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:1e:89:6a:aa:03:94:b1:62:5b:29:8b:88:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Jul 23 21:01:01 2026 GMT
Not After : Jul 24 21:01:01 2026 GMT
Subject: CN=5ecf7c6d49ed1629bd327b386d6769b940371d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:c2:33:29:b4:80:20:42:6d:c9:b5:4c:7a:
af:5b:d7:be:dc:00:ac:f5:75:15:00:cd:8d:71:2d:
91:70:ed:21:eb:46:3d:0c:d0:71:18:f8:76:db:ed:
86:85:6f:9b:3a:2d:59:7c:34:ec:c8:bf:63:83:97:
b9:21:15:ad:e2:e5:d8:dd:2d:89:46:89:6e:ea:34:
39:e8:f9:a8:0c:f8:ea:59:c8:b4:ca:9c:52:e1:c1:
34:29:53:ee:be:3a:66:2c:80:11:4b:64:e4:85:85:
48:91:0a:83:cb:84:57:34:4e:8a:05:93:3f:2e:d3:
d3:f3:c5:d0:60:fc:97:80:73:ee:c1:8f:e7:88:80:
53:3f:4e:67:1a:98:24:aa:c3:59:1a:b8:07:97:56:
75:ea:78:94:45:b6:95:6d:69:09:64:fe:31:51:04:
7d:b5:4e:0d:82:67:e4:74:d5:f9:96:09:d7:3d:52:
51:70:b3:66:da:d0:9d:64:a6:83:5d:91:7f:98:5b:
9a:ee:15:62:7e:cf:34:d6:2a:f5:50:a7:66:d5:8d:
5b:66:31:81:16:a9:5b:21:f7:9e:d2:1e:1e:66:7e:
b6:a2:1c:8d:78:40:f4:b3:a9:e7:33:04:12:ef:91:
2c:d5:ab:f7:c5:02:b4:13:15:59:2b:0a:92:7c:83:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:7C:6D:49:ED:16:29:BD:32:7B:38:6D:67:69:B9:40:37:1D:79
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:7f:9c:ed:8b:6c:5d:76:16:3a:06:fe:7b:3b:34:c9:29:
b3:39:73:2f:4f:46:91:95:79:30:25:14:35:fb:c5:cf:96:1e:
16:ae:e6:90:c6:71:b7:40:7d:ba:c9:c8:79:35:75:44:60:2a:
fe:b0:7f:70:94:b7:54:c8:a2:a0:9a:90:8b:8b:3e:c5:93:4e:
75:cf:76:09:7b:9f:2c:36:c5:10:7c:33:86:6b:f7:5b:37:64:
50:b7:d1:38:71:de:3e:59:68:52:55:7a:e3:53:d4:4e:0e:20:
91:f4:fd:76:e9:04:89:8c:c5:c4:9b:1a:46:16:e1:14:c1:f6:
f0:d9:32:b5:7e:6e:8a:ee:da:96:3d:18:bc:61:fa:a0:17:4f:
48:63:c3:d6:38:e7:b4:0a:6d:6d:10:2c:de:90:5e:13:fb:de:
1f:f8:87:cb:b9:fd:3e:f6:4e:42:6f:fe:19:c0:53:40:4e:0d:
59:0a:6f:42:20:05:4b:c3:01:5d:73:8b:d5:0e:29:bc:61:91:
98:d6:94:ba:8d:ef:6e:1f:02:49:f0:cb:08:ed:3a:68:91:05:
12:0a:a6:ce:fa:22:cd:cb:46:5c:1f:c2:fc:8f:b5:be:2c:7f:
72:12:d5:c3:b0:ff:ac:75:00:9b:3b:3b:7f:28:18:68:4d:23:
3f:f7:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:17 2026 by rpki-client