Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: tcOJNfTnJuqfkwuL0lKzmCnMwiFMd3MJ4GXsJbbcMRs=
Subject key identifier: BE:10:FA:F5:DF:1C:B1:84:80:2C:22:14:00:83:7A:49:3C:EA:20:0F
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019F92ED4FBB001F7DDC5DBE71905F615803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 5n3W/XswMAUC9BAw9yxag3car1dTmwOtWNnf7ulQMJs=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4f:bb:00:1f:7d:dc:5d:be:71:90:5f:61:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=be10faf5df1cb184802c221400837a493cea200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:8e:38:cd:1b:84:31:4c:67:79:6d:d3:b0:
1c:bb:15:11:7c:33:d1:57:63:3e:71:63:b6:35:17:
ae:dd:f5:e9:ed:36:09:56:2c:80:7f:95:77:1c:ef:
09:fb:8d:40:87:4f:ec:e1:f6:a4:56:5e:e3:e2:90:
39:c0:8f:c4:64:57:3c:b2:4d:24:b6:22:76:f8:93:
3a:f5:66:3f:b3:29:99:61:2a:57:87:a8:2e:b6:3d:
a3:fb:3b:3f:7c:9f:ed:e2:b9:cd:a4:e5:ea:61:69:
6b:d7:56:66:ad:7c:e8:45:31:f7:16:5a:0b:b1:13:
57:9b:da:15:48:ae:ee:7d:39:cf:c5:4a:7f:9f:ec:
cf:24:97:3d:0d:70:0d:b9:28:3e:68:a7:df:a9:17:
c0:ab:c6:c9:42:ea:e5:8e:fd:e8:ce:60:1a:9f:81:
b3:da:af:0a:0c:e6:14:2e:22:b2:e0:75:9b:94:d9:
5e:9d:21:8c:03:d8:fe:68:e9:6e:91:c5:ee:81:53:
17:77:ae:11:e8:6b:2e:d6:f2:eb:6d:22:b9:5d:48:
e2:62:6f:f1:12:a5:3e:13:97:02:85:81:cd:f1:a3:
19:fd:36:66:7a:31:95:57:1f:d3:07:e0:3a:51:96:
c7:8a:6c:17:e9:87:5d:e2:1d:90:e2:09:06:a9:a0:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:FA:F5:DF:1C:B1:84:80:2C:22:14:00:83:7A:49:3C:EA:20:0F
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:00:78:73:47:64:32:98:44:e4:bd:9b:19:90:d2:7a:a4:
6b:0b:64:9c:11:c6:c0:d8:29:d2:d2:d3:b3:d6:9e:52:65:83:
a1:54:07:fb:3f:f4:f7:2b:b6:35:64:7a:b3:10:7c:f6:77:89:
a2:dd:27:7a:ac:8b:c1:35:bd:70:56:c4:0e:00:6c:5a:8c:62:
05:c4:57:91:1a:fa:59:75:a5:47:38:4d:1e:cd:56:87:24:fe:
0d:27:a6:d9:f5:76:18:c9:58:4a:e3:4f:4f:df:e5:66:77:71:
38:13:62:26:6b:31:5a:72:22:3c:b2:bd:d4:cf:db:4f:26:e1:
2c:28:e0:1d:8f:d0:8c:79:a2:2d:f0:4f:9e:88:82:eb:a1:91:
f0:a4:57:4b:5e:29:7d:16:1d:fc:93:7d:a6:31:ab:30:5e:47:
8f:20:22:04:67:d9:56:0a:e1:4c:7b:f2:8c:e2:71:e0:2f:96:
39:3e:4f:f2:94:44:52:07:3c:e6:0b:32:0f:2d:f8:ef:f0:6a:
58:c6:9d:2e:fc:91:32:aa:c2:58:22:60:08:4b:dd:a8:36:75:
e4:90:2f:b2:b6:f3:11:19:9f:10:bf:46:01:1a:c1:19:4c:df:
96:b8:74:39:79:ed:ea:7d:ef:12:6e:fa:1a:57:2d:23:5f:08:
a9:e3:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:21 2026 by rpki-client