Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: iCECx7EFISSkshMkq1bDHFyA+8pcZfmBp6FNYuyoxac=
Subject key identifier: A6:8F:9C:AC:9A:EB:8B:2A:53:40:7C:A0:66:9B:73:AC:21:75:40:AA
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019F905A99A7A7C6E1EA211A027CB806441B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:01:24 +0000
Manifest this update: Thu 23 Jul 2026 19:01:24 +0000
Manifest next update: Fri 24 Jul 2026 19:01:24 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: LmBzU0Qlz+fEkCoSNtk64g73xkhNEW83+kbkC2qTj6M=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:99:a7:a7:c6:e1:ea:21:1a:02:7c:b8:06:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Jul 23 19:01:24 2026 GMT
Not After : Jul 24 19:01:24 2026 GMT
Subject: CN=a68f9cac9aeb8b2a53407ca0669b73ac217540aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:2b:66:b0:d3:4c:ac:84:26:38:98:ed:6e:
e9:b2:a3:65:a5:49:96:c0:33:07:58:62:77:50:d9:
00:e2:2a:82:0d:bd:c6:9f:e1:c6:1b:93:0a:be:ea:
e3:71:2d:68:0b:d9:b1:08:23:74:39:fa:45:50:97:
3b:a0:e2:cc:05:af:03:80:b6:17:11:29:15:45:1a:
a6:cf:49:6d:6a:f9:5b:e4:41:2d:f3:3e:1d:18:c9:
02:ed:c6:f1:8e:00:35:88:03:9d:04:bd:6e:e3:a6:
19:24:96:01:2d:86:d0:b5:16:56:f9:ca:4e:f6:c3:
04:65:4e:de:5b:41:bf:69:9a:f0:c0:2b:62:86:54:
bf:f3:34:6d:08:5b:2f:ce:fb:c4:db:ae:c9:2b:86:
ab:e7:7c:4f:29:1c:b0:85:59:3b:5d:42:93:07:4a:
95:68:31:0a:5f:23:11:8c:7d:cc:ba:94:60:a5:a9:
e4:2a:c3:e2:47:e5:4f:0e:1c:4b:79:67:a4:ca:63:
fc:dd:8d:cc:ef:c1:35:84:d6:66:81:0e:1b:96:29:
7d:f4:20:4b:11:71:28:e6:2e:52:08:c4:5e:9b:f3:
c0:79:50:3e:e3:d8:50:4f:df:21:0b:04:0e:93:e4:
e8:51:cc:b2:95:23:00:5a:68:70:b4:4c:b7:be:22:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:9C:AC:9A:EB:8B:2A:53:40:7C:A0:66:9B:73:AC:21:75:40:AA
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:72:3a:2f:84:28:e6:6f:3b:db:7b:4c:18:57:cf:e9:73:e2:
e5:a7:ab:10:31:aa:15:41:0a:ef:ce:88:59:58:b7:10:42:ab:
a0:b0:2d:1e:95:07:de:9d:cc:92:74:3d:71:3b:a0:e6:8a:3b:
6a:01:39:59:31:ef:bb:4b:55:40:e6:90:76:07:13:57:68:7e:
3d:cd:9f:97:09:6e:40:99:d4:f8:16:47:27:06:fc:dd:63:d2:
46:11:67:11:7f:2a:23:31:57:72:ee:78:ef:3a:98:82:e1:f4:
f9:1f:1f:b7:f7:1b:86:81:61:ba:30:58:25:22:41:b5:e0:70:
42:d1:62:9d:a6:f7:90:30:e0:07:11:6b:1e:79:66:5d:84:88:
b3:1c:0d:ac:f8:ba:67:8b:6e:8e:c9:1c:ed:6a:45:f3:13:b1:
b0:31:57:d2:0e:78:7e:60:cd:e8:20:a3:74:a6:6c:65:9a:64:
f5:2a:7e:26:fc:e9:20:61:ae:0e:5c:a9:16:e4:f3:19:6d:d6:
18:c1:16:8d:25:58:06:81:8a:37:2b:fe:4b:8e:a3:38:2b:e6:
3d:68:50:9e:dc:4b:03:30:b2:27:24:eb:a0:56:58:6a:5c:5e:
b3:0a:e7:ec:1f:6e:29:7f:20:1d:23:c8:22:c1:97:d3:91:48:
c3:80:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:58 2026 by rpki-client