Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: lWtvG2QekNlQcdDT9cMNX7muPUxZU/NGSPlNSwOVMZo=
Subject key identifier: 88:E3:12:40:DF:21:3B:F0:19:1E:1D:AC:FB:D0:AF:11:42:0B:E8:72
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019F8F7E5875EF324EE4F2128990D6B7852A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 15:00:49 +0000
Manifest this update: Thu 23 Jul 2026 15:00:49 +0000
Manifest next update: Fri 24 Jul 2026 15:00:49 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 3vwrBS6nFJ6if4K4xDaZHd8vqsNmbUFlMmGuAbM8+JQ=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:58:75:ef:32:4e:e4:f2:12:89:90:d6:b7:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jul 23 15:00:49 2026 GMT
Not After : Jul 24 15:00:49 2026 GMT
Subject: CN=88e31240df213bf0191e1dacfbd0af11420be872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:3e:22:b6:cf:7b:0b:71:70:fb:ad:60:f1:
55:a6:7e:db:cf:51:57:5c:b6:5b:28:02:fe:59:85:
43:26:f0:d3:e4:c4:77:dc:ae:03:b2:47:86:8d:a6:
19:81:bf:fe:73:d0:c6:2a:db:0d:9c:a2:8f:ad:35:
a0:f0:f4:9d:7c:9c:8b:74:7f:cd:d9:c9:e2:6a:67:
e6:46:83:c3:e3:5b:e7:01:71:42:62:7f:7c:6e:58:
2c:5e:55:7c:dc:c6:17:8f:02:b7:79:4c:21:6f:e5:
de:bd:98:9a:68:99:9d:06:77:1c:e3:ee:62:86:b4:
46:55:97:90:ed:d0:dc:7a:8d:78:b1:63:72:3b:68:
3a:df:bd:8c:f6:25:eb:4a:78:40:23:6d:44:92:4f:
95:7b:d5:98:86:0a:6a:22:f5:d7:3b:97:42:ea:b7:
5a:6c:fa:d0:8d:0d:35:56:46:cc:3b:ef:80:63:8b:
31:df:60:07:20:17:02:7e:b5:11:0b:16:aa:99:bc:
ab:90:ec:cd:40:1f:21:f2:e6:7f:d1:3a:e3:bf:01:
34:60:e0:de:dd:e2:10:cb:83:2c:d8:12:a0:e6:af:
ab:64:4b:35:48:e5:a8:71:6d:f0:5d:22:40:bd:e3:
85:b2:87:3c:da:6f:dc:be:2d:ce:e3:dc:f9:dd:bc:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:12:40:DF:21:3B:F0:19:1E:1D:AC:FB:D0:AF:11:42:0B:E8:72
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:06:0d:fc:a7:a2:da:ef:69:23:05:cf:26:4c:92:eb:3d:
18:f2:31:b0:88:6e:55:0a:e5:0a:5e:e8:b1:6b:e4:f5:42:bf:
23:19:49:6b:13:7d:01:61:19:5d:66:97:b8:56:f2:92:2b:93:
24:f8:7c:ac:e7:ab:e5:79:c8:b2:7f:86:2a:ec:db:d8:04:83:
d4:d2:2f:3b:3b:8c:d8:1a:3c:92:e5:0b:9d:50:18:f2:21:72:
ea:14:24:3f:6c:a8:ea:69:6f:3b:91:fd:db:19:9c:8e:34:57:
3a:fd:db:47:3d:4c:67:ad:76:11:d7:41:df:83:5e:4b:f0:65:
d0:71:dc:ce:3e:b2:18:93:ff:c4:e0:7d:47:8a:be:13:3e:d3:
eb:1b:c8:11:a1:c9:44:a8:05:e1:0d:34:5b:90:8d:d6:67:d8:
26:a7:6a:6a:04:a0:a6:70:ed:5f:06:97:0e:28:5a:20:1d:28:
37:b5:91:3a:4e:95:9d:2a:e2:aa:dd:06:00:14:75:1f:93:59:
aa:d1:a0:4c:c5:57:f8:ff:54:5d:ba:71:77:66:d5:ac:51:d1:
e4:44:41:fb:b8:23:a5:39:96:ad:6d:68:25:5f:0f:62:cf:ad:
c4:20:1d:e6:2e:f9:4f:a3:92:9c:aa:70:10:b2:5b:00:9e:05:
5e:29:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:10 2026 by rpki-client