Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: Hnj9F1l+oL68vedJYKFKfK7j9Fos9V2EbFfjEbuZBOA=
Subject key identifier: 67:86:D5:07:77:94:4E:36:D3:E4:14:B5:6F:C3:AA:3A:B4:40:63:21
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019F9580A6D69492B959380215E1B303E569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 19:01:04 +0000
Manifest this update: Fri 24 Jul 2026 19:01:04 +0000
Manifest next update: Sat 25 Jul 2026 19:01:04 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: cpfW0CSye2wW715x6zHQ/R3SZEUET7UEfuGZN9I6V0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a6:d6:94:92:b9:59:38:02:15:e1:b3:03:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jul 24 19:01:04 2026 GMT
Not After : Jul 25 19:01:04 2026 GMT
Subject: CN=6786d50777944e36d3e414b56fc3aa3ab4406321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:e7:55:47:1c:4d:7c:19:51:c4:17:ae:6f:
d7:b3:c3:55:94:36:a2:65:c9:9f:a1:b0:ff:4b:bb:
d7:c4:d1:e9:18:b1:04:4a:f1:0e:7a:16:ac:28:b2:
a3:d4:79:4f:27:ec:92:2a:08:05:db:8c:fd:73:45:
e4:da:e3:96:a4:0b:d4:a2:27:44:e1:c0:8d:be:52:
27:d6:a3:88:23:d3:9e:3c:a6:df:a2:5a:c8:d8:50:
f4:f1:c0:bf:ab:29:a0:20:0d:b2:fe:2d:1f:de:1e:
d8:a3:36:98:25:4f:70:e2:e5:fb:02:20:a0:56:ce:
64:fd:bb:a6:4b:19:2e:2d:2a:aa:82:6b:1f:a7:5a:
2e:57:84:84:7a:9d:45:5a:d8:78:c6:31:8f:0f:95:
59:86:36:d1:ba:17:73:f1:2d:90:0b:7e:7f:a6:c8:
b8:83:8b:fb:af:77:70:11:91:c2:0a:94:7c:fa:bb:
e3:c3:e4:2a:c7:a6:09:cc:ec:0a:ec:c3:30:28:d2:
7f:40:14:21:ed:13:10:a3:37:6d:77:60:03:21:d4:
c3:a9:a6:b2:c9:53:fc:55:f6:0c:c5:66:b8:33:4a:
f1:94:5e:a3:ab:f5:59:d3:e3:b8:80:54:80:4f:ab:
73:44:4e:18:83:17:be:79:b8:d0:37:6d:06:c5:b6:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:D5:07:77:94:4E:36:D3:E4:14:B5:6F:C3:AA:3A:B4:40:63:21
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:ce:75:96:d4:0d:25:b6:87:38:2a:64:70:c5:a0:0f:19:
51:61:04:25:98:bd:49:34:da:83:69:ad:fc:5b:af:18:b7:96:
94:92:72:4b:63:28:a4:65:2f:30:b7:e8:bf:09:c0:1d:c1:62:
ac:fd:51:4f:db:ee:5f:a9:59:04:86:9c:c8:19:fb:08:9f:1b:
11:a0:7d:7d:39:cc:57:f3:dd:80:7e:46:b3:68:e5:21:19:41:
e9:a2:be:b2:b4:6e:38:3b:12:61:56:92:da:bd:7a:87:5c:06:
93:b1:74:c9:d1:ec:e3:ed:42:a8:c4:0f:d9:ad:cf:71:53:f5:
e0:ac:6a:8e:4f:97:f6:38:23:61:c7:41:bd:6e:1d:ff:33:fb:
6b:b8:53:ce:ca:c8:4e:18:b6:2c:74:cd:d1:b3:b5:e9:6d:0c:
4f:3f:a3:f8:93:48:90:af:5b:23:0d:8f:eb:53:b6:79:d6:dd:
7d:42:e4:0c:5b:0c:d4:bc:8d:30:0b:ed:33:ef:61:0c:8d:0e:
a7:1c:46:f4:a1:24:53:0a:86:5a:41:bc:85:f6:6d:46:ef:eb:
e2:71:b0:eb:ec:fe:85:e8:e9:5e:1c:04:b0:58:61:56:ce:ab:
98:0d:90:7f:b2:05:c4:ea:1c:ca:39:ca:46:19:84:61:aa:7f:
8b:fb:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:12:05 2026 by rpki-client