Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: MjfNDGSNMf+m8QEb2dSb7d3DPXgtVOaeSK+0DewrPzM=
Subject key identifier: A6:21:29:63:F8:FB:CA:84:69:76:9B:25:AF:FE:28:1B:19:16:76:D5
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019F8FEBF74E2B2D9159805105DDE686FE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 17:00:33 +0000
Manifest this update: Thu 23 Jul 2026 17:00:33 +0000
Manifest next update: Fri 24 Jul 2026 17:00:33 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: hg0NIdAw3KqbkglZmK/FxroiQt6pYqp3orQZRIE9AQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f7:4e:2b:2d:91:59:80:51:05:dd:e6:86:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Jul 23 17:00:33 2026 GMT
Not After : Jul 24 17:00:33 2026 GMT
Subject: CN=a6212963f8fbca8469769b25affe281b191676d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:3e:ae:09:c2:cc:28:b1:91:86:97:f4:a8:
69:02:53:60:58:7b:2d:fc:1c:4f:cd:e2:8e:4f:7a:
fc:c3:00:7d:c6:cd:35:85:cb:30:6a:74:67:2b:54:
f4:7c:bc:45:e5:e8:c3:b5:9d:fa:58:ec:e0:aa:b8:
eb:c5:e8:ec:b9:42:12:86:33:06:1a:7f:26:71:c3:
40:c0:95:24:2e:73:bf:a5:4b:03:97:97:99:bd:7d:
ca:1c:0d:2e:b8:b8:b2:63:15:67:0e:98:20:b2:81:
a1:64:c3:a6:7d:29:35:9d:fd:78:b9:5c:42:08:f8:
ab:3a:7d:83:3b:93:11:dc:c4:49:0d:2f:90:0f:a6:
7e:72:39:d5:a9:b7:a5:7d:b2:c3:a4:05:61:24:24:
fa:d4:25:bb:26:40:73:f8:9a:c6:b4:cf:aa:0d:94:
b6:50:8a:88:99:95:f6:3c:6e:31:77:e0:87:75:a5:
51:6d:81:18:fc:ce:cf:15:7d:eb:9b:b5:83:4d:db:
3c:ad:74:de:19:55:1d:ec:63:95:31:89:fe:5e:93:
ab:7a:69:0f:3d:54:a8:58:90:ee:64:62:59:99:ae:
86:c1:cf:2d:c1:6d:90:34:21:d8:c5:ed:ae:2f:3e:
b4:e4:a7:96:1f:b0:46:ff:25:5d:aa:c2:10:e8:41:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:29:63:F8:FB:CA:84:69:76:9B:25:AF:FE:28:1B:19:16:76:D5
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:c0:eb:92:8e:d5:52:69:07:a1:ac:6c:a9:f1:ba:15:d1:
4a:b4:78:e7:ef:d7:5e:6a:52:2a:ca:2c:fb:c2:e4:84:33:f0:
b4:ca:b7:cd:06:2f:01:c7:5a:ac:96:df:16:40:40:dd:78:9e:
34:25:24:a4:59:41:2d:98:be:e2:d6:9f:3c:7c:a1:b4:12:f0:
07:aa:20:f9:6e:fd:01:47:39:b7:50:cd:d7:4b:17:e5:32:53:
17:56:06:e6:d2:8e:1f:81:9b:7d:d1:22:d2:e0:c4:2f:72:ba:
cc:10:17:ba:1b:ed:76:36:f4:7b:7d:3b:30:ae:69:0f:e9:4a:
e2:19:a5:8c:a6:5f:eb:48:11:12:c0:da:51:66:c6:75:1d:78:
4e:38:84:78:fa:b4:d8:5c:55:1e:0e:d0:fd:a5:c2:74:36:bd:
00:95:20:e0:5c:b1:7c:a7:63:6f:4b:25:7c:5a:a5:62:19:39:
10:65:b5:d7:51:ce:cc:33:c4:2b:c0:17:a4:54:bd:8d:92:03:
61:59:64:6e:3e:50:7b:6b:ce:ee:db:49:f3:36:d4:5a:30:84:
41:4b:60:b4:e1:42:8f:32:bf:a0:28:8f:f3:64:a1:70:41:7a:
aa:be:26:8a:f8:c5:67:56:53:47:87:15:2b:dd:25:42:c8:39:
ab:c0:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:03 2026 by rpki-client