Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: A2BX+XiZU6Fpa03REZN8HJmTYK8MQSQczbU02XUppfI=
Subject key identifier: A2:CB:22:6F:B9:D9:7A:8B:17:AF:04:C3:13:9C:20:08:96:5A:FF:B7
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019F90C83968BAC7E34F8040C6410A1C31F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 14AB
Signing time: Thu 23 Jul 2026 21:01:08 +0000
Manifest this update: Thu 23 Jul 2026 21:01:08 +0000
Manifest next update: Fri 24 Jul 2026 21:01:08 +0000
Files and hashes: 1: 9-3_QvwXtOHHG58UKiynTLu14jQ.roa (hash: ySs8H3K/teKJ9R4r0VNoDDtNDBiXRJngnMoTb8cTLeo=)
2: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: i1srkijKipe5qUH4ZIse718INUlbY3oaa/oPyC1c5xY=)
3: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
4: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
5: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:39:68:ba:c7:e3:4f:80:40:c6:41:0a:1c:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jul 23 21:01:08 2026 GMT
Not After : Jul 24 21:01:08 2026 GMT
Subject: CN=a2cb226fb9d97a8b17af04c3139c2008965affb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:1f:2e:10:bb:49:4e:f6:c8:90:cd:8a:0e:
b5:62:cf:37:97:6d:21:18:37:79:1c:1a:d0:fb:3d:
cc:fb:ea:d8:7a:77:35:a5:04:bc:59:66:d5:69:36:
33:a3:a3:c1:d7:3f:da:c1:ab:a9:00:a5:ec:f3:82:
db:ca:1e:b2:d4:d0:52:f6:fd:3b:57:37:e2:57:a4:
63:ef:40:73:f4:23:0d:61:4c:df:1f:5d:98:59:5e:
12:71:de:0f:c4:73:e9:9b:cd:70:4a:0a:0a:1f:09:
4e:ca:00:af:fb:5a:b0:aa:7e:4b:60:0c:07:56:18:
d1:ef:4f:8a:98:18:c2:f9:07:f8:f3:2e:20:ef:7e:
c2:a8:98:60:08:d2:38:b9:b0:24:23:a6:9c:dc:87:
8a:bc:c3:33:13:26:f9:ab:52:7a:ae:02:20:c3:5d:
07:1c:52:56:a6:c9:a7:a1:15:8a:a6:bd:22:61:02:
b3:7e:bf:60:3f:d6:e2:c6:0b:97:ce:28:16:24:d4:
b0:a2:d1:bb:62:df:2b:78:78:af:4a:2b:c1:e1:2b:
56:e5:a7:dc:5a:b0:8e:10:bf:52:2f:29:c1:e4:98:
16:5c:f8:2d:73:d3:51:8f:2b:52:67:42:e8:cd:92:
03:36:0d:a5:31:1d:d7:2c:4b:51:6a:43:2e:47:d9:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:22:6F:B9:D9:7A:8B:17:AF:04:C3:13:9C:20:08:96:5A:FF:B7
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:90:a6:a0:66:90:0d:bf:3d:93:41:fc:3d:47:62:49:46:a2:
d0:80:12:b5:a9:58:e3:70:c7:7a:3a:4e:8a:4f:2f:e9:04:04:
98:8b:c3:4d:31:db:27:ca:91:89:78:e0:6a:c0:77:9d:60:cf:
e4:9d:c1:56:07:30:58:97:21:4e:6b:58:39:06:1c:1c:0b:c6:
7e:c6:0e:60:e4:1a:da:44:58:cb:ff:c7:5c:c3:9e:13:3f:02:
41:c2:fb:3b:1f:cb:bc:71:be:77:0a:30:7a:a9:d3:bd:b4:ec:
53:62:24:dd:7d:25:ee:10:d7:b8:de:d7:34:43:dc:ad:6c:31:
33:bb:72:c3:42:11:c2:50:e4:d7:e2:d0:8c:a3:29:ba:1a:f6:
e6:66:60:cc:c0:81:c3:4c:e0:ee:da:f3:f8:37:9d:5a:7f:9f:
7d:b6:93:b2:85:b2:e8:54:56:8b:6e:0f:b8:3d:3c:95:b7:6a:
68:a4:6e:d2:d3:ec:91:22:06:49:6c:6d:08:1f:2c:3d:21:64:
7f:5e:20:0e:cc:ab:48:94:03:9c:5a:2e:d6:83:48:15:8a:05:
f5:a1:38:62:5b:35:7b:6b:e1:f9:c3:27:e2:4a:26:d4:a5:f7:
fe:b2:85:a7:78:a2:1b:11:7e:c9:ca:72:42:a1:a5:84:98:be:
8a:91:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:40 2026 by rpki-client