Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: tm6uRHCYObsV4Ypf8ZL2+BnHjG78bL1ALxOVLrD4Y08=
Subject key identifier: 74:AE:F6:BB:61:3F:4C:B6:8D:42:EB:34:07:DE:77:1C:92:D8:AC:6C
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019FA9E279CED7DF317B46D89792EEDC5E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 1620
Signing time: Tue 28 Jul 2026 18:00:19 +0000
Manifest this update: Tue 28 Jul 2026 18:00:19 +0000
Manifest next update: Wed 29 Jul 2026 18:00:19 +0000
Files and hashes: 1: ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa (hash: InsWciE0zUkS0m+rNOT/nz98wQ4hGtre1IAaZoW7D1g=)
2: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: MMtdCKXzQo3SomFWX9oBkxFQVwkry0rbf0YO7nc2yZI=)
3: kyVhtDLZt4N5GPbTPKsk2ZaA_nU.roa (hash: VneHklbp3cXcKynFZ6D92CEpEIaz3npmX1Ls13JkQnc=)
4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
5: zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa (hash: 0f6kOQBqGXGCHT/mf7JYgdcKuqyqUXY4na2v3j9WykI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:79:ce:d7:df:31:7b:46:d8:97:92:ee:dc:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jul 28 18:00:19 2026 GMT
Not After : Jul 29 18:00:19 2026 GMT
Subject: CN=74aef6bb613f4cb68d42eb3407de771c92d8ac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:49:af:82:d7:ea:ea:91:f2:db:08:dd:5d:
e7:99:3a:77:da:bc:8b:72:9e:5c:85:19:8e:7f:52:
74:d7:d0:9a:bb:3d:56:42:4a:d9:99:a9:9e:8d:4c:
75:12:d8:7c:8f:28:ed:97:72:54:99:2c:c2:25:e8:
ed:dc:f8:55:c5:c2:24:fd:23:45:80:96:3e:07:c5:
84:3a:50:01:32:36:9d:d7:5a:23:0c:0a:fb:b7:95:
44:6e:1a:47:72:cb:54:f8:56:68:26:2c:f0:f7:67:
ce:5c:b4:81:e3:9e:c3:13:3d:b4:b4:7a:37:6c:a9:
9a:77:5e:2d:22:55:38:52:4e:55:6f:7a:f0:b0:4b:
4a:be:4a:76:58:ea:84:6c:86:81:c0:af:05:3d:b1:
76:a0:de:3d:f2:ef:08:33:a8:a3:04:ae:76:fe:b7:
88:c7:84:55:f2:3a:b0:e8:1f:52:20:37:f0:6d:38:
e7:07:9d:0d:43:30:89:2f:a3:84:f7:f2:6e:16:17:
23:4b:3b:95:95:1f:60:ee:f4:1e:94:4b:b5:fa:21:
4e:b6:c1:8a:28:56:3a:1c:3e:71:6d:43:18:d5:ff:
95:af:3e:a5:ae:32:61:ef:1a:0f:a9:20:d6:37:44:
2b:c9:07:17:bd:55:16:03:36:00:68:b7:9c:e6:1f:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:F6:BB:61:3F:4C:B6:8D:42:EB:34:07:DE:77:1C:92:D8:AC:6C
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:8e:39:76:1c:39:bf:12:de:43:72:25:a7:68:81:11:d2:
1e:34:08:dd:8a:36:ff:c7:69:6e:b5:52:6d:d4:40:3b:80:67:
6a:58:3b:ec:c4:3b:12:96:17:fc:50:20:a3:4a:fd:d6:50:28:
04:25:52:ce:6d:7a:94:e7:1e:15:39:05:e0:46:0f:30:c8:aa:
bc:fa:2a:47:b7:5a:db:d8:a9:ff:ce:63:ed:3b:c1:8d:8e:b4:
5d:61:5f:0a:fb:c7:e8:88:8e:5d:6d:d7:21:d9:09:16:41:68:
bc:f8:4b:d5:48:bd:3c:e6:75:aa:12:d5:d7:fa:20:0d:50:d6:
3e:1a:d5:18:6c:b4:85:71:13:60:99:cd:0c:35:eb:04:19:c5:
20:d9:ff:6d:29:73:24:d5:cd:2d:98:89:fe:b9:8e:b7:66:d3:
24:08:e1:98:46:2b:3a:11:67:28:19:ce:81:aa:19:b1:27:ff:
e1:21:12:d9:d7:61:cf:4e:75:b6:32:94:68:49:f0:98:89:17:
59:26:71:3f:6c:af:f9:8e:3d:d5:93:da:2b:b4:ca:7f:a4:74:
d0:4e:32:dd:e2:37:73:b3:b7:2b:0b:a6:34:33:50:15:04:6b:
e8:d9:ab:dd:b5:b6:62:b2:8b:95:68:94:7b:7a:82:71:9c:ef:
0f:44:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:21 2026 by rpki-client