Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: oP1Y9/xak9lmE8GfwSeH9grKogXh9vJC2sDp+6YxFAs=
Subject key identifier: 25:47:93:27:BA:B1:49:50:D9:EA:83:98:ED:BD:35:01:5E:53:FE:86
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019F93FF6A18A49F759F7063DEEAAB5D773D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:17 +0000
Manifest this update: Fri 24 Jul 2026 12:00:17 +0000
Manifest next update: Sat 25 Jul 2026 12:00:17 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 27EIBVEaNaYEF7+7d3dwGlgMtu3A+L2JW0ijuBRvM60=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:6a:18:a4:9f:75:9f:70:63:de:ea:ab:5d:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jul 24 12:00:17 2026 GMT
Not After : Jul 25 12:00:17 2026 GMT
Subject: CN=25479327bab14950d9ea8398edbd35015e53fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:a1:96:58:0c:f8:7f:ff:31:8d:70:ae:88:
7e:53:ee:40:46:6a:28:82:34:bd:65:e2:53:13:78:
9b:11:65:06:79:29:33:d9:62:c3:06:7e:a5:12:04:
98:69:f3:f3:3f:14:7a:3e:dd:10:ba:b8:34:e1:6e:
98:c0:fe:57:d5:73:2b:5c:94:31:8a:ae:97:3a:f0:
4b:3e:21:a2:4a:6b:cb:47:a2:81:92:4f:1e:bc:84:
93:54:05:42:01:72:3d:ab:69:28:12:d7:d5:8c:b8:
17:e3:74:aa:28:5a:59:b3:32:5b:c2:ed:9e:46:8f:
d7:95:dd:3e:bf:8e:1a:b1:8b:61:b9:d8:c0:22:41:
d5:24:1f:83:92:09:e2:22:32:ec:43:b0:0b:a9:a5:
e4:99:b1:9a:18:78:18:5f:68:21:54:3c:ec:03:07:
d2:6e:a0:79:8f:7e:ee:d1:bb:db:ea:c2:0d:a6:4f:
e0:53:06:62:f9:9a:b8:cc:de:10:7e:a9:40:16:03:
e2:b1:ac:ec:1c:da:cd:3e:46:31:28:c0:0c:03:bf:
18:f2:a1:30:d3:15:8d:4d:16:6e:a4:96:76:25:a2:
8c:8b:2f:70:e3:3f:21:cb:92:28:9b:d5:dc:a1:ee:
cd:6f:6d:df:56:5c:44:d3:dd:e3:44:2d:5b:fb:ff:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:93:27:BA:B1:49:50:D9:EA:83:98:ED:BD:35:01:5E:53:FE:86
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:de:27:77:40:55:ae:7b:fb:a4:51:a9:1e:bb:63:5b:55:f7:
b7:20:89:b3:12:02:51:61:83:db:c0:89:67:77:fe:7d:52:d2:
c7:da:7a:59:c6:04:93:a6:c8:cd:4a:7f:1e:da:dd:c6:ef:dc:
f1:59:72:b8:66:3e:4a:b0:da:66:89:7d:7e:bc:53:23:57:c1:
c2:34:6c:da:e6:16:bb:6a:f7:11:db:65:82:17:31:2c:ea:70:
e8:ae:9f:5d:e2:01:a8:3f:07:16:c3:7b:d5:38:a6:b6:d2:15:
41:1a:10:41:70:9b:30:7f:5f:ed:67:e1:8d:59:34:03:e6:3b:
7a:73:a3:93:1b:ea:e1:f8:c6:33:45:7f:89:3c:a0:ab:14:db:
4f:f9:12:2c:69:5f:03:ba:d8:34:e9:8c:ce:db:99:13:0e:1f:
00:b8:07:1b:77:9e:53:e8:f7:9e:28:e5:7c:e7:4b:e7:7c:dd:
77:2b:85:e7:ab:6f:c2:56:12:c5:05:e1:5c:07:4e:71:24:40:
23:60:d3:dd:82:19:93:3a:8e:69:8e:26:f5:e0:3b:44:c2:74:
3b:b7:81:fa:3a:ae:8d:59:f7:05:d5:a3:e2:6d:40:a5:0b:52:
34:08:0d:06:da:87:d3:b5:72:4b:c6:61:13:69:47:ef:bc:65:
e0:c8:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:16 2026 by rpki-client