Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
File: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft (raw, json)
Hash identifier: qCRoXJAqRL940PynfOluzTanax8j7r19kz2q8Ejc5Yw=
Subject key identifier: 82:25:98:38:FF:18:18:F6:E2:45:C6:65:FD:C9:62:58:94:EE:60:3F
Authority key identifier: 0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
Certificate issuer: /CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Certificate serial: 019F90C8082CD2CBBEF6B027703D0EA2CE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
Manifest number: 010B
Signing time: Thu 23 Jul 2026 21:00:56 +0000
Manifest this update: Thu 23 Jul 2026 21:00:56 +0000
Manifest next update: Fri 24 Jul 2026 21:00:56 +0000
Files and hashes: 1: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl (hash: IGKJZr+ITuLmVpt4qUFNn6TxKej0zfZ46u3EA1kd/eU=)
2: VYr2J8PU6qvoHNkXxdUk2poOpeg.roa (hash: qyR8POc6dovbUK8HiGSmXu2L7YbxUwe4Rbtm4a/aTuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:08:2c:d2:cb:be:f6:b0:27:70:3d:0e:a2:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Validity
Not Before: Jul 23 21:00:56 2026 GMT
Not After : Jul 24 21:00:56 2026 GMT
Subject: CN=82259838ff1818f6e245c665fdc9625894ee603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:46:02:8f:f3:54:30:8d:eb:58:14:2e:1a:
15:21:b3:29:cf:5c:12:ad:f7:91:c9:68:74:f5:e5:
c5:af:2a:c5:4f:cb:08:6b:a9:ca:fa:a1:01:d3:2a:
a0:c7:ba:54:49:6e:cc:21:8e:48:19:1d:8d:e5:36:
a5:52:02:47:db:d7:e9:ba:17:6b:5d:e3:a9:3c:02:
49:b3:f6:d4:a2:80:71:b2:88:e2:f4:b7:df:37:c0:
70:f5:1a:16:21:3b:f5:ae:67:a6:73:f6:e8:f6:26:
86:19:e8:68:40:9f:f1:c1:d3:48:9f:f7:e1:f7:5d:
f7:d3:9b:a9:bf:c5:86:ec:73:65:f7:00:51:ea:68:
6d:55:4b:07:ea:ae:27:10:5c:6c:35:1b:bf:8a:69:
62:cf:72:59:dc:22:f3:85:0b:cb:1f:69:a1:8a:7d:
c3:2f:8e:1e:e3:91:bc:3d:17:a5:70:3b:74:7b:4c:
69:39:e4:45:e7:34:9b:a1:7a:73:14:e1:68:10:60:
b9:db:ba:59:ad:5f:34:75:49:46:02:29:2b:81:62:
2f:8f:86:a9:9a:8d:69:97:7b:49:8f:78:52:90:85:
53:dd:52:3c:21:6a:8e:f6:e5:1d:1a:05:cc:42:1b:
4e:d7:01:b9:8a:fa:d9:3e:2b:8c:9b:ff:38:a6:8f:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:98:38:FF:18:18:F6:E2:45:C6:65:FD:C9:62:58:94:EE:60:3F
X509v3 Authority Key Identifier:
keyid:0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:4a:1e:5c:ae:9e:e5:51:bf:60:32:2b:49:ec:85:70:76:
31:26:aa:68:83:58:ae:ca:22:35:26:51:10:8d:0d:08:bb:93:
74:50:80:f1:52:c3:d4:40:f2:61:32:38:7b:33:a6:76:f5:48:
f1:6f:ba:2d:2d:6f:4f:09:68:09:73:98:90:5c:93:47:9a:31:
02:f5:b2:39:4b:42:b4:b7:16:b7:12:50:b1:06:21:73:3d:cc:
15:54:df:af:7e:13:cc:7e:65:d0:c8:d4:11:49:5a:02:26:be:
81:63:5d:89:fc:1e:87:c0:e8:d9:f0:36:b7:4c:96:6f:4a:46:
af:f0:b2:ca:a9:4e:4a:0c:ce:97:2e:56:5b:cf:5a:22:41:95:
64:e8:54:42:43:02:2f:4c:48:3b:92:68:1c:0a:28:9c:c2:53:
c0:4b:51:aa:6b:ce:0c:07:6d:ba:84:42:c7:c5:ad:9a:0e:f8:
a7:c4:97:4c:49:63:9f:fa:2c:72:54:6a:47:08:4d:1a:7c:21:
e3:35:48:14:20:0d:69:6b:c8:c3:f2:66:46:02:f4:3a:03:c9:
bf:59:5e:5b:54:37:39:c0:43:b1:20:92:d4:b0:43:26:6f:70:
46:57:0d:a2:6d:99:d0:c0:db:a0:02:d0:db:20:39:ca:29:26:
89:db:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:54 2026 by rpki-client