
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: Xh+tHVpctgW/OA6TqDkPKCpiarkCcT6KzaFB6KYMIqw=
Subject key identifier: 0D:DA:C5:08:7E:10:79:54:B3:C1:56:95:FD:33:7D:21:0A:B7:73:26
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019F94374DD1B9CF4FC7CC1D4B6918A27858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 165B
Signing time: Fri 24 Jul 2026 13:01:20 +0000
Manifest this update: Fri 24 Jul 2026 13:01:20 +0000
Manifest next update: Sat 25 Jul 2026 13:01:20 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: +iKmVgZPd+EPe9Yk2OlL7IDgKjVoB7+Sa+za/13H6h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:4d:d1:b9:cf:4f:c7:cc:1d:4b:69:18:a2:78:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Jul 24 13:01:20 2026 GMT
Not After : Jul 25 13:01:20 2026 GMT
Subject: CN=0ddac5087e107954b3c15695fd337d210ab77326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:25:99:d2:f7:9e:8d:51:49:ca:4c:6b:fa:
29:1d:bd:e0:42:1f:86:54:79:a0:a6:69:46:bb:ab:
2b:67:81:69:1d:71:58:87:74:1b:56:ec:65:31:66:
e4:bf:af:66:68:c2:cb:56:a8:59:e1:f4:7e:f2:a0:
e2:1a:c8:51:00:ef:11:c3:1a:df:92:a9:16:b6:2f:
62:85:99:f6:41:6c:de:83:d1:c1:08:7f:a6:a3:fd:
6f:66:71:83:8c:fe:81:ef:f5:12:cf:df:70:e0:94:
f9:b6:fb:c6:48:18:3c:fb:50:71:90:b8:fe:c5:d2:
55:08:54:49:39:2c:86:1b:ea:0e:bd:9d:26:cc:72:
58:e7:d9:13:e3:f6:b3:5c:3a:5d:f4:65:af:96:7b:
0e:d3:31:55:cc:19:03:5c:23:e9:6e:49:73:8a:29:
c7:28:93:b9:05:c7:a6:01:70:c1:b0:1a:88:8d:1e:
ce:a4:22:65:48:51:42:63:71:3f:c4:59:ad:b3:76:
9e:32:d5:de:ca:79:59:b1:46:79:3a:bd:ef:26:c0:
63:0f:79:95:90:89:80:93:2d:eb:18:61:83:64:a8:
b9:90:81:73:f0:3a:04:81:88:dd:be:4e:7e:53:df:
53:eb:d1:34:9d:a2:f1:c3:06:03:b9:8a:2a:14:2f:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:C5:08:7E:10:79:54:B3:C1:56:95:FD:33:7D:21:0A:B7:73:26
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:94:10:13:e2:30:f1:60:7c:57:90:33:b7:45:6e:05:da:52:
46:bc:c0:9e:15:67:6a:e9:fb:c7:13:b0:79:9e:25:9a:ab:07:
0b:f4:f3:1b:84:c9:24:10:29:3f:7f:f1:a8:29:1b:74:a6:f1:
bc:99:d7:27:d6:d7:ef:a6:19:2f:32:04:cb:9d:7e:3c:dd:d9:
e2:38:a1:22:53:02:cf:fc:b0:44:34:f8:49:38:07:72:a7:30:
64:5f:73:29:39:e6:db:cb:d2:c6:ea:5c:90:bc:70:24:ee:e0:
20:95:89:7f:f6:f6:e7:03:e7:b2:ab:a8:9f:4f:d4:fa:51:95:
43:0b:d2:85:1d:b1:fc:3b:4a:ce:12:a9:37:15:f6:05:b6:0d:
ec:9c:8c:e9:b6:88:58:72:88:3b:ea:13:ab:95:0f:78:68:13:
5d:74:33:23:e3:2f:cf:bb:1d:e2:b2:83:8c:38:92:6b:2f:2e:
1f:ec:99:17:ad:a0:11:53:20:26:9f:5b:5a:a7:86:e1:80:7f:
68:90:01:36:fd:f4:8f:42:41:9f:51:f1:2d:5d:7c:a7:24:10:
64:66:de:1e:b9:f2:b7:4b:da:41:93:8b:e5:c9:7c:a1:15:a5:
8a:13:d9:40:de:ea:89:31:7d:bf:1d:9f:49:ff:16:90:5d:16:
e1:33:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:25 2026 by rpki-client