Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: beJfkxtngxyjTiHCfwH3rhc0QIjKGuNNDHjlZex3ewQ=
Subject key identifier: 3F:BE:CE:F0:C6:D3:B4:ED:6D:26:EF:CB:79:47:94:3A:49:92:D2:80
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019FACAD6A9E2C8D31CB819E4A046A31E698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0B48
Signing time: Wed 29 Jul 2026 07:01:13 +0000
Manifest this update: Wed 29 Jul 2026 07:01:13 +0000
Manifest next update: Thu 30 Jul 2026 07:01:13 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: FA5TBlAOEKRaaqoDwFrNh+WbBMlHx/FS6DWozdL8ss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:6a:9e:2c:8d:31:cb:81:9e:4a:04:6a:31:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Jul 29 07:01:13 2026 GMT
Not After : Jul 30 07:01:13 2026 GMT
Subject: CN=3fbecef0c6d3b4ed6d26efcb7947943a4992d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:e8:89:84:b0:50:67:56:d1:14:58:db:8e:
63:90:f8:0c:34:ff:a7:fc:b1:1d:6a:57:f3:e3:bd:
57:12:2d:3b:7f:16:df:e2:f5:9d:af:a0:38:dc:5e:
83:b3:55:31:50:59:7e:a3:0c:64:81:76:23:c8:9a:
0c:c2:62:26:ff:f2:26:b3:af:17:73:5f:4f:b9:13:
43:51:61:fc:45:7a:6b:a7:77:f2:c4:6a:d9:71:02:
d5:e3:97:d9:6f:5f:2b:e6:f4:c1:02:0c:5f:18:36:
16:21:71:e0:60:0a:f2:82:49:42:e2:9c:2b:cf:61:
9f:ff:38:0d:88:25:92:79:5b:e7:e5:2e:c5:f9:4b:
71:d6:fc:f9:ed:06:a9:2e:70:8a:4d:96:96:35:a1:
60:06:92:61:29:64:90:80:c3:0b:2c:2e:0c:5b:52:
d6:ab:82:f1:09:05:29:1d:36:cd:20:31:69:bb:98:
2f:b5:52:71:71:cd:38:d3:b8:49:05:d5:32:89:99:
39:b9:60:db:cd:35:3b:98:05:35:73:35:c8:79:b2:
f8:6d:b7:c4:03:e5:ce:05:96:fa:90:8b:94:a4:16:
8e:29:18:bc:98:62:e3:0a:77:a8:6a:fe:8b:30:19:
d2:20:15:b9:9b:6e:ea:ba:22:22:ec:99:c5:b8:ac:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:CE:F0:C6:D3:B4:ED:6D:26:EF:CB:79:47:94:3A:49:92:D2:80
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:68:fe:8f:ca:49:34:e3:50:c2:e7:0b:97:7b:d0:14:1c:
42:c8:d2:b2:0d:82:99:e3:72:19:4e:fa:f0:f5:16:d0:1b:da:
98:05:7c:25:a4:85:46:ea:5e:23:fe:d7:f8:5d:41:d0:5c:96:
72:27:33:80:26:f5:ef:1b:fb:49:6e:6d:62:5a:ce:02:13:c4:
0c:30:57:f0:53:f9:ad:7b:0f:63:09:ed:dd:6d:0e:81:7b:ae:
95:c8:9b:6c:75:c3:69:97:9b:27:0d:af:d0:a1:c7:5f:bf:f5:
37:5d:15:8c:a1:5e:12:f5:be:c1:7e:16:06:86:59:cd:01:ee:
f7:b5:08:57:3d:6a:83:78:71:93:70:83:53:44:e8:df:03:6a:
19:99:33:1f:00:7f:6e:96:25:e4:f2:6c:8f:5f:84:a1:57:5c:
a3:05:48:3a:02:ce:c7:7d:d5:a3:61:5a:82:4b:fd:32:b9:48:
c8:26:2f:3a:52:0d:e9:26:63:92:f6:c7:8a:11:07:22:46:41:
1c:ad:ff:d6:9c:db:db:74:c5:13:0e:52:4a:5b:62:5b:96:5b:
d5:b4:16:13:a9:80:c4:a9:c4:8e:30:47:5b:a8:60:08:74:f7:
56:07:bb:cd:59:7c:5d:f9:ec:fe:ad:d8:2f:fb:f7:36:c5:7f:
ad:d5:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:16 2026 by rpki-client