Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: mgGQ1Mv0kP60SDPl615NRrWuanyBPA7aequxyVa5AJs=
Subject key identifier: 72:57:AE:56:65:FA:A5:82:FE:59:88:47:D8:25:BF:A6:B5:2C:5F:CF
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 019F90FF184D10AF5E3C02DA9DE2B9FFFDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0A3D
Signing time: Thu 23 Jul 2026 22:01:04 +0000
Manifest this update: Thu 23 Jul 2026 22:01:04 +0000
Manifest next update: Fri 24 Jul 2026 22:01:04 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: qT2zH+MRVWC2M4uThJKMfHAhzugo4uAzgRSAelRk5HA=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:18:4d:10:af:5e:3c:02:da:9d:e2:b9:ff:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Jul 23 22:01:04 2026 GMT
Not After : Jul 24 22:01:04 2026 GMT
Subject: CN=7257ae5665faa582fe598847d825bfa6b52c5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:f5:2c:f5:70:84:19:a7:2b:00:6c:74:b4:
65:15:60:ec:f8:dc:6d:38:a9:18:05:5f:2b:54:88:
be:10:e2:8e:ff:7c:37:a3:b9:47:c2:7e:ba:42:9b:
6a:28:74:37:26:28:97:1b:f5:05:b5:30:a1:46:ad:
6d:71:d4:6d:1c:19:bf:e7:b8:68:56:c4:ec:ae:55:
43:93:1b:49:e2:17:07:7f:92:bb:fa:04:b4:94:7f:
de:07:d9:fb:2c:9b:38:5f:b0:1e:db:3d:d2:2c:1f:
d3:1d:79:c5:37:7c:37:72:48:06:09:dd:c5:d1:14:
48:fd:9a:bd:9a:6e:35:57:fc:d6:7d:84:9b:bf:ac:
b4:91:23:f1:58:46:c5:79:c3:9d:a6:cf:39:7e:ab:
59:7d:86:68:d9:81:98:4a:3d:0e:70:a4:ec:27:b2:
24:d0:54:fd:13:1e:ba:ae:7d:b9:48:3e:d0:db:8a:
24:02:87:b9:c2:18:c5:49:55:36:ca:25:f5:b7:62:
0b:42:9b:30:57:a8:c8:16:0c:f6:2d:d1:e2:49:8d:
6b:c7:63:80:e3:5c:b5:cf:75:de:c6:0c:92:0c:73:
e9:0d:1b:ec:de:3e:f9:59:51:a3:2a:c4:3b:ff:6c:
fb:56:f8:a8:23:d1:93:a5:65:26:b9:14:25:56:48:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:AE:56:65:FA:A5:82:FE:59:88:47:D8:25:BF:A6:B5:2C:5F:CF
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:a1:27:f8:8b:43:95:2c:57:0e:6d:34:ae:a6:f7:05:11:
67:e1:a9:68:42:e0:df:e0:ce:bd:18:ae:22:85:e6:c6:f2:4e:
64:ae:af:77:6f:df:a2:b9:4c:10:da:a4:a6:80:b4:69:db:bc:
3e:46:15:48:15:19:01:54:59:af:0d:02:25:01:77:1d:10:6b:
b7:85:19:9f:b7:e6:f0:35:4c:26:4b:b4:5e:d1:d1:ff:d2:d0:
2c:32:1d:83:de:fc:91:36:67:01:ce:42:53:e8:30:b0:52:d3:
b5:6d:fc:b4:b4:95:9d:4b:19:2d:d9:3f:38:48:d4:dc:aa:88:
22:a7:2c:5b:62:aa:05:bb:af:8f:01:8d:c5:7c:53:43:16:3f:
2b:65:66:6e:01:98:7c:4e:f7:05:f4:ba:2a:65:04:a5:59:74:
85:7f:8b:9e:30:bf:d3:ba:14:df:cf:e8:6b:db:8c:88:8d:e2:
20:98:41:c1:7a:92:29:53:6e:27:cf:53:c7:9e:06:4e:07:6f:
bc:76:02:2c:18:b4:d5:9f:33:a6:a7:f5:40:c0:59:ba:41:96:
2a:f5:95:d2:0c:47:8d:3d:e5:23:da:f7:4c:1b:23:a5:8a:2d:
e4:45:89:f3:9c:f9:62:8c:56:62:57:a0:c9:ca:e9:b5:70:69:
9e:9f:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:30 2026 by rpki-client