Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: HEmrwInAZljnrawJm9JNhcAakFiKe0KdePHLjXp/Sak=
Subject key identifier: B2:FE:C4:22:86:FF:A2:01:4C:91:FB:1E:F0:41:13:B8:C5:2A:1D:52
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 019F8F7F4C5F522DC6E42DB9B5831A4EC040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0CF3
Signing time: Thu 23 Jul 2026 15:01:52 +0000
Manifest this update: Thu 23 Jul 2026 15:01:52 +0000
Manifest next update: Fri 24 Jul 2026 15:01:52 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: 5b005F6eeJt+p7QLaTr4kDOG0XH7rQUTuQnUSELG0mY=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:4c:5f:52:2d:c6:e4:2d:b9:b5:83:1a:4e:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jul 23 15:01:52 2026 GMT
Not After : Jul 24 15:01:52 2026 GMT
Subject: CN=b2fec42286ffa2014c91fb1ef04113b8c52a1d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:0e:81:67:37:7d:b6:b8:fa:29:d2:4a:2a:
61:30:4a:fd:0a:0f:d4:f3:3e:0e:2f:d3:52:8f:d8:
37:c2:55:ba:72:9d:a4:e3:17:17:85:25:30:2c:7e:
f0:61:1f:42:76:d2:12:b6:4a:7c:42:49:cb:3d:8b:
34:7f:8a:9b:77:0f:1e:a9:9e:c1:20:1a:d5:09:24:
f4:4a:d7:fc:4b:99:98:90:e7:5c:ec:21:90:64:7f:
78:c4:55:3a:05:3a:8b:18:35:18:9f:c1:fe:e1:90:
45:ab:96:24:13:d9:98:9d:65:5f:39:c1:f4:4d:8c:
4f:fd:bc:ac:2e:f5:7d:1b:47:10:d1:58:a9:5f:19:
93:63:1c:c2:20:05:07:24:e0:40:93:82:60:57:bd:
6c:5f:14:fd:31:cb:29:e8:77:fc:f1:af:45:ed:9f:
c6:74:a2:1c:2d:bf:3d:2e:be:0c:48:af:e6:4f:8c:
1e:e5:01:8d:e7:b3:7e:c4:72:7a:48:8e:db:2d:c9:
d6:cb:ab:50:aa:53:53:40:96:0b:e3:ec:bf:13:6d:
16:57:d3:ac:b2:cb:2a:b3:ff:0b:2e:c2:c2:e2:40:
3a:d3:bd:6c:4e:1a:91:15:5b:68:47:9d:94:f3:58:
f5:f2:60:72:b7:62:a5:99:d2:ac:e6:b0:0c:28:b9:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:C4:22:86:FF:A2:01:4C:91:FB:1E:F0:41:13:B8:C5:2A:1D:52
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:de:f6:e6:16:c6:65:de:27:b3:20:29:b4:29:6f:14:3a:
fe:ca:54:cf:eb:ea:26:2d:f3:ec:5c:70:22:27:53:4a:64:37:
d2:ad:53:e5:5d:8b:10:6a:4e:8b:d5:e5:38:fd:b3:f1:5b:8d:
f8:17:39:51:43:5e:fe:8a:28:15:fc:d8:cc:7a:0e:d2:5a:8e:
e6:04:6a:4f:2f:0f:54:b0:33:7d:7d:a6:5b:3a:6a:6e:fd:7d:
43:30:5a:44:6a:ad:42:03:c8:a9:f3:2e:0f:e0:4f:5b:57:4b:
00:e2:7d:41:4d:bc:0d:34:d1:2c:82:dd:40:c1:59:5a:de:5f:
54:87:76:7e:92:15:bf:c3:30:6f:91:72:1c:54:80:c0:d4:f2:
00:cd:e5:62:f8:da:e0:ad:2f:c3:4a:fc:67:4d:4c:6b:6d:5c:
ef:29:6b:9f:55:17:17:8b:2e:25:1c:87:e7:7a:99:a8:1e:1d:
39:bc:c4:e7:2a:c8:cf:cb:c0:4c:3c:55:0c:f6:9b:00:b8:4a:
b4:89:a7:58:65:ed:cc:db:ab:a4:57:b2:f4:bd:a8:32:3a:47:
53:3f:9d:82:1b:02:d9:43:f8:df:e1:a9:41:02:40:08:88:30:
7d:66:28:2d:45:ba:e5:05:4b:e0:54:05:e6:76:b4:0f:4a:a4:
f0:3a:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:33 2026 by rpki-client