Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: yBdw1gMoDDy1OUYdfXIjcANFEKKIFNbSMjn1OctdJXI=
Subject key identifier: D0:97:F3:E8:3E:04:E7:B2:3D:7A:5F:F0:3D:2B:84:47:8C:03:A5:9F
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019F9135C79A99ECFD7CFD2992A4C77B5B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 041C
Signing time: Thu 23 Jul 2026 23:00:48 +0000
Manifest this update: Thu 23 Jul 2026 23:00:48 +0000
Manifest next update: Fri 24 Jul 2026 23:00:48 +0000
Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: tM4hMxhVzT38vA+fQ/KULjYcZOiJ5bgtg64pTNXObvo=)
5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c7:9a:99:ec:fd:7c:fd:29:92:a4:c7:7b:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Jul 23 23:00:48 2026 GMT
Not After : Jul 24 23:00:48 2026 GMT
Subject: CN=d097f3e83e04e7b23d7a5ff03d2b84478c03a59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:65:88:50:5a:e4:66:91:8d:bc:ae:11:44:
7b:86:6e:12:80:71:c6:84:41:60:d6:89:90:f7:8d:
b2:88:96:10:0e:0a:d9:88:e8:89:4b:40:3f:f0:e7:
28:17:f7:d8:41:b3:77:00:59:23:e4:7e:83:94:7b:
81:41:46:e4:57:be:e3:a1:1c:39:38:17:80:f2:dc:
2c:12:ca:08:c1:93:a3:ea:41:db:f7:b3:16:ea:9c:
96:53:92:17:70:17:9d:2c:be:44:cf:dc:bb:b8:cb:
66:14:db:be:65:b9:78:9f:24:03:aa:38:60:d1:0f:
65:ee:9e:a2:54:ee:e7:ab:8f:c3:a5:4b:a0:a4:cd:
e5:e2:16:14:e6:40:19:03:5b:61:f8:ff:6f:b0:e5:
49:e9:46:2e:0b:e6:c9:19:e4:de:34:33:94:f5:08:
43:ba:0c:89:d6:fe:45:72:26:06:3d:33:53:c5:4e:
88:6a:78:e9:a9:8e:ab:d3:32:e5:62:20:93:46:ba:
14:40:73:43:db:ad:9a:b3:8d:eb:43:fc:84:9a:93:
d3:56:5b:7e:0e:6c:3a:ab:c3:bc:b6:c2:b5:f4:62:
fb:4d:cc:72:da:e9:7c:84:86:bd:7e:f6:17:fc:ca:
e4:5a:d3:4c:2d:8d:8e:62:57:2c:b3:6b:ab:26:9a:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:F3:E8:3E:04:E7:B2:3D:7A:5F:F0:3D:2B:84:47:8C:03:A5:9F
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:ef:ef:a7:79:4c:ea:dd:1e:eb:68:91:22:6c:30:bb:a3:
77:02:c8:87:ae:b5:0d:13:dc:c2:64:a5:e9:21:fd:93:63:f7:
c7:15:95:24:63:94:f2:12:40:31:26:3c:fe:7f:99:ea:78:4c:
21:78:b4:4f:42:04:23:4a:33:52:26:c5:f4:08:2e:d7:ab:83:
b2:21:5d:c8:de:af:47:c4:2f:94:7d:9f:e9:93:72:bf:21:91:
bb:76:fe:28:99:7e:15:3c:7a:82:e7:2f:17:b8:a3:6d:99:89:
d2:a0:e6:a1:7a:ff:1e:0d:c2:ed:68:46:b0:45:d1:d6:4d:1d:
30:ca:7f:40:db:24:be:bd:81:ab:96:ef:c1:03:11:92:32:93:
93:b7:47:8f:b5:00:5d:08:9b:fe:bc:16:ee:58:de:d0:20:2e:
58:82:54:4f:7f:b0:78:cb:92:a7:29:d8:ec:af:8e:ed:1f:37:
3e:70:62:aa:d4:22:09:63:5f:fc:cb:92:1c:d1:d8:02:70:aa:
b2:17:3b:b6:74:bc:00:a4:3e:b9:2b:d4:81:80:ae:dd:1f:b1:
49:34:5c:ca:82:98:0c:a3:f2:63:aa:33:2e:0f:d4:d1:e6:cd:
be:e9:ae:06:0b:19:76:9b:dd:ef:d0:64:7d:e6:c1:17:6a:7e:
b2:01:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:35 2026 by rpki-client