Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: cPaRIWrXiQAMAnZxiXzoe7H1owzODwBirPyr4w61NS8=
Subject key identifier: 99:91:BE:F2:FF:59:6C:7A:80:58:71:DC:E8:80:CE:BB:E1:DC:EB:6F
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019F92B5E2515CDB92BCE45C3AC458BD64E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1964
Signing time: Fri 24 Jul 2026 06:00:21 +0000
Manifest this update: Fri 24 Jul 2026 06:00:21 +0000
Manifest next update: Sat 25 Jul 2026 06:00:21 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: cQzckTwZqA2QDa1DcKTCTJugj1gP1LA/CmGw46rLIZk=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e2:51:5c:db:92:bc:e4:5c:3a:c4:58:bd:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jul 24 06:00:21 2026 GMT
Not After : Jul 25 06:00:21 2026 GMT
Subject: CN=9991bef2ff596c7a805871dce880cebbe1dceb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:a4:e7:04:51:d9:43:17:b2:cb:9b:dc:58:
a4:25:4d:1e:d7:4b:bb:d7:60:b7:b1:13:28:27:8d:
88:ef:e9:8f:35:df:10:70:f7:05:fa:e6:68:b1:c1:
4f:6c:2c:6a:1a:64:ac:14:bb:c3:3e:1f:d0:3a:ec:
1b:59:21:a2:bc:86:55:f8:55:04:c8:fb:1f:42:16:
a7:bf:a7:b8:d7:cd:71:19:5d:76:d8:3e:60:02:ac:
a8:4a:ac:75:f4:96:73:31:b5:c2:99:a3:33:55:0a:
72:be:f4:d8:0a:f4:e7:90:0b:69:5e:51:d1:0c:a4:
73:81:8a:60:07:58:b2:1f:c1:df:5d:01:1d:d5:c5:
f4:60:79:64:35:6e:ee:f4:8c:d4:7b:f0:21:bf:19:
c6:1b:f8:ab:f5:be:4c:bf:fa:17:d5:85:a7:e1:dc:
56:69:4e:be:ec:76:82:df:99:06:e2:8d:d3:f0:30:
e6:41:98:23:11:d3:9d:42:4f:bd:82:00:e7:fb:e5:
26:dd:3f:4a:cf:49:11:b9:4d:67:28:8f:af:19:46:
b7:4f:50:bb:94:30:9b:3c:c0:88:92:f0:5e:bf:f4:
2d:b1:de:38:11:c2:7f:83:38:53:f8:e4:8b:a6:89:
0b:12:f8:c7:59:eb:b1:96:7e:df:f6:bc:1a:e0:53:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:BE:F2:FF:59:6C:7A:80:58:71:DC:E8:80:CE:BB:E1:DC:EB:6F
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:31:7e:e8:93:00:24:b6:10:7b:14:62:9d:86:71:60:4e:
45:4f:76:e9:00:e7:b0:f0:7e:0d:2f:e0:4f:cb:52:df:83:3e:
c6:f9:b3:c8:f9:a3:4d:70:6b:a6:8d:f6:d7:73:5b:26:61:f0:
e2:f4:4e:f4:75:86:5c:01:8e:da:86:a0:43:cb:ab:ea:51:c0:
45:80:aa:8e:db:4e:00:45:dc:9a:9c:3d:52:7c:28:d1:ca:c4:
55:f3:01:f6:f0:a2:d6:4a:99:4b:03:5f:57:fd:31:64:2c:e6:
ea:d9:e4:88:17:66:92:27:ab:d3:59:7b:89:04:b7:2f:76:5b:
23:c4:0a:af:26:bf:a6:ca:3a:13:ca:63:84:67:d6:f1:2c:6b:
8e:d5:15:12:6d:7c:6f:b8:a3:b7:d0:e6:b7:e4:38:93:f7:de:
58:83:2e:6c:31:9e:8a:f1:c1:70:34:3d:34:d3:ad:6c:fe:43:
db:0c:2c:5c:04:4d:4b:a3:cb:70:d5:35:96:a3:05:ae:d4:0b:
54:9c:c7:eb:7a:58:d6:89:f1:54:0e:38:ff:63:80:44:9a:ed:
3c:44:58:1f:2a:87:49:f0:e4:d8:86:ed:c2:3e:c3:d7:a5:f8:
b9:e4:f0:72:64:c8:9c:c7:ca:b0:54:e4:d1:4b:66:57:c7:38:
f8:30:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:46:39 2026 by rpki-client