Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
File: C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft (raw, json)
Hash identifier: FhpK02GYmub1V3BCBGA4jjXqAdMi/dz0xLs82PFM3QA=
Subject key identifier: 20:91:8F:07:7F:2F:F2:1B:13:A3:5E:87:8A:EE:0F:B7:6A:69:59:72
Authority key identifier: 0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
Certificate issuer: /CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Certificate serial: 019F8F7DEB8A49412A7BFEFD506EBE8F90BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:21 +0000
Manifest this update: Thu 23 Jul 2026 15:00:21 +0000
Manifest next update: Fri 24 Jul 2026 15:00:21 +0000
Files and hashes: 1: C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl (hash: ABJfb3vYV5afOH5pldPgLJY5wP0awSjD863QeWH8KUg=)
2: L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa (hash: /FF+sHYB7i2p1F+LkGmyZupdIg1ihT2WUmRZqDaJdeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:eb:8a:49:41:2a:7b:fe:fd:50:6e:be:8f:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Validity
Not Before: Jul 23 15:00:21 2026 GMT
Not After : Jul 24 15:00:21 2026 GMT
Subject: CN=20918f077f2ff21b13a35e878aee0fb76a695972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:7d:b6:f9:2a:90:4b:33:2e:99:fb:69:71:
03:9e:dc:cc:ac:6a:e6:5e:1a:6d:1d:3e:33:84:c3:
92:db:cc:fc:e3:51:40:59:58:9a:f2:09:9e:6e:b6:
88:70:97:2b:87:a7:9c:e8:9d:42:1f:d5:ba:62:06:
e0:2b:02:40:fc:3b:f3:a9:5a:7f:fb:53:fe:d8:90:
39:88:3b:b2:f7:16:48:70:94:32:de:6b:cb:f4:1a:
8b:d3:5e:da:90:30:03:f7:c6:a0:e5:8b:54:22:33:
1b:74:9a:50:2f:17:fa:24:75:6d:c0:9a:a5:d8:25:
aa:0d:f6:09:d0:af:9b:11:a0:e1:b9:4a:9a:9b:c8:
85:ff:28:3e:1e:7d:6b:4d:71:6a:b5:f1:64:70:2d:
96:b7:7b:47:26:97:61:2f:9f:3c:8e:01:8b:7f:c9:
5e:8c:c9:9a:08:d6:97:ef:82:ea:65:a1:0f:e8:c0:
f2:70:4f:97:98:bc:0c:55:6a:08:c8:a6:9c:15:1a:
cf:55:ae:35:ab:92:a6:2b:10:7f:73:b9:a8:8a:7e:
13:c8:81:94:d3:94:aa:ee:50:a1:4c:93:cd:85:1a:
7e:28:69:a6:aa:4b:59:7a:2f:64:f6:da:c5:9c:69:
f8:1d:b1:da:4c:7b:84:17:85:3b:9c:e2:9a:f7:9d:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:8F:07:7F:2F:F2:1B:13:A3:5E:87:8A:EE:0F:B7:6A:69:59:72
X509v3 Authority Key Identifier:
keyid:0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:de:36:3b:72:c4:c4:ff:6d:2e:2e:f2:c6:01:e6:b8:9c:
90:c7:22:fd:60:1b:51:2b:ae:a9:27:30:d4:dd:38:1c:8a:5d:
d4:7e:a0:ea:c9:6c:8c:1e:ad:f4:fd:71:1e:b1:46:dd:98:30:
75:14:36:d5:e5:c9:15:da:de:18:bd:65:9e:4f:be:23:fa:22:
ee:3f:9d:c8:62:f0:ac:61:b5:c7:e8:2b:2a:31:3e:63:ab:67:
5e:0d:b3:68:5e:b2:7c:fb:9f:4e:e1:41:cb:60:c2:6b:1b:cd:
cc:b0:d2:dd:5c:2c:11:fb:cd:2a:3e:1c:cc:34:2d:a6:a3:df:
0e:53:0b:5b:4b:a5:01:63:ad:df:6d:26:bf:ba:fa:40:36:80:
41:fc:9f:e4:6a:1b:9c:0d:be:02:ff:d0:39:23:f6:74:ac:6e:
fa:e3:0e:aa:e8:2c:c7:d5:cd:48:f4:3f:40:88:38:04:df:fb:
54:d9:ee:0b:f5:2b:2b:e6:b5:fa:db:25:4b:b6:ee:d5:8d:33:
78:b3:1a:dd:e9:79:35:0b:84:ea:00:de:9c:f2:e2:d1:80:6d:
8d:f3:60:6f:4b:77:0e:e8:a0:69:01:4a:39:a6:14:c9:59:a6:
74:5e:82:a8:55:3f:66:6a:b6:ee:30:e2:c2:3c:42:50:98:1e:
85:fd:f6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:36 2026 by rpki-client