Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: MKD14gZCVw8DshjTq5afaUqs2nvCdq/++AwUKpAnAOE=
Subject key identifier: 19:70:11:1A:5D:54:5A:C3:2F:21:4C:FD:6D:27:10:A8:56:ED:C6:8D
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019F8EA2AC1C0132551FD4BB5D38EA9ED733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 11:00:53 +0000
Manifest this update: Thu 23 Jul 2026 11:00:53 +0000
Manifest next update: Fri 24 Jul 2026 11:00:53 +0000
Files and hashes: 1: 1X2sgvq2OfT6Jdo40rIKwx5gDV4.asa (hash: VL+5JuAwjiAZeewO3OjhChR2ymlOyYa+cwBCn8pjvhQ=)
2: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
3: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
4: Bk2PVhSldiADwMhbVtnkp9pryqY.asa (hash: hx24E0I0fhbwVZplZBmeDNsFPlc70EP9j2DAqKTvSZA=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: J/v7imSK5tNRolqEgiOj/20+0rF6YnU+FZCPMR51l/c=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ac:1c:01:32:55:1f:d4:bb:5d:38:ea:9e:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jul 23 11:00:53 2026 GMT
Not After : Jul 24 11:00:53 2026 GMT
Subject: CN=1970111a5d545ac32f214cfd6d2710a856edc68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:d4:28:d2:43:15:5e:12:23:3d:c0:53:b6:
e7:82:d9:20:93:8b:48:d8:e9:e8:68:8f:f9:ff:16:
4a:8a:20:a4:e1:3c:bf:06:5b:c1:0b:e9:51:85:aa:
ab:ed:13:99:23:83:cc:93:4c:9a:8a:74:b9:1c:21:
48:5e:1e:71:26:b0:23:99:55:51:1f:74:53:4b:d8:
75:3a:c6:f1:8e:43:d2:f5:7c:a6:57:40:e0:3c:50:
1f:32:cb:56:a6:4f:6f:47:29:a8:ff:54:c6:09:b3:
84:7d:50:e1:07:96:70:f8:e3:ff:79:67:25:7a:81:
34:15:56:f5:74:73:a3:5d:ac:0b:99:4c:57:ed:e1:
c8:8e:8f:4e:0c:17:24:c3:4e:71:8e:a4:a4:44:d6:
ea:3d:11:ae:9e:2e:70:fb:2b:c6:b2:62:e0:60:76:
3a:24:01:82:90:ff:57:d3:0f:62:9d:68:57:06:ce:
bf:19:2e:2a:1c:3e:5e:a5:33:23:05:37:bf:26:58:
79:4b:26:6c:19:4e:57:d6:84:a5:24:f2:af:85:f7:
f2:b3:c0:e1:1e:71:19:cf:50:c9:a3:40:24:26:7d:
a3:00:f2:13:7f:eb:3e:14:66:80:1c:fe:be:46:69:
80:a7:8e:6f:20:83:7e:c0:96:08:f6:3f:d8:12:a9:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:11:1A:5D:54:5A:C3:2F:21:4C:FD:6D:27:10:A8:56:ED:C6:8D
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:a6:4c:86:fc:67:8a:a8:c9:3e:83:1c:98:3b:4f:25:b6:
d3:15:9f:c3:41:cb:3b:bc:08:f7:78:8c:ff:33:d6:17:5d:10:
ed:73:ae:ca:8e:96:0f:72:05:48:d0:2a:3a:ba:2d:bb:e6:61:
62:cf:a0:98:c4:61:6f:ad:47:1c:01:96:d5:56:37:bd:73:3d:
81:66:4f:bc:22:82:7b:69:ed:78:eb:8f:18:4b:24:2e:7a:45:
3e:57:62:88:ad:7a:87:d5:63:5a:98:53:ff:3d:84:95:18:ad:
97:bb:d6:d5:0e:e1:7a:c1:fc:2a:27:42:9b:de:16:63:f9:4b:
65:9f:60:52:8f:f6:4e:bc:f2:88:2b:ec:ad:e8:1c:bb:f8:ec:
3d:89:c5:dc:4a:90:97:e0:5f:4a:d0:92:03:53:77:0e:60:14:
3e:46:2e:ee:48:8e:aa:85:ba:cc:a0:fc:df:f8:b4:07:7c:31:
bd:1e:95:b0:59:d3:c4:f2:6a:68:7b:89:03:61:74:ce:13:f6:
78:b8:b0:4a:1b:da:62:44:45:fa:db:f2:a9:b2:9c:e8:16:a2:
8e:d1:88:ac:75:3f:29:28:3d:44:32:49:86:55:6b:b6:5c:3c:
c0:c7:bd:06:08:1d:7d:3b:9e:9e:46:21:8b:ef:1c:ac:40:88:
92:91:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:51 2026 by rpki-client