Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: ZFCeLoDm5wVNmTf1w9kb8AUH0fBnIH0KEJ8dny/r9Ao=
Subject key identifier: A3:92:93:33:E7:F0:8C:10:77:21:C6:4D:C4:AD:19:10:73:B2:ED:8B
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019FAD1B1EB61D11268A6AD4E97838C9218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 16C4
Signing time: Wed 29 Jul 2026 09:01:03 +0000
Manifest this update: Wed 29 Jul 2026 09:01:03 +0000
Manifest next update: Thu 30 Jul 2026 09:01:03 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: Qn5iGfSbz4K3EnyGAqs3hK/Kvluldm6zNfn9KR1Mv/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:1e:b6:1d:11:26:8a:6a:d4:e9:78:38:c9:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Jul 29 09:01:03 2026 GMT
Not After : Jul 30 09:01:03 2026 GMT
Subject: CN=a3929333e7f08c107721c64dc4ad191073b2ed8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:ce:89:f4:0b:4d:8d:55:81:54:60:7f:dc:
17:34:de:87:96:6b:51:49:e2:27:3c:b6:f9:d8:ba:
ce:4e:59:a1:b3:06:f6:d4:7e:67:01:c4:ee:3a:5b:
9a:1e:23:d1:28:e9:a9:09:4d:20:fd:4b:4f:c1:f6:
91:aa:f2:33:ee:92:16:a2:0e:83:9c:27:ef:c6:2c:
30:92:b3:53:fe:1e:01:2c:5a:cc:c1:7d:9b:e1:67:
c8:a1:08:ac:31:dc:22:73:de:b2:22:7c:37:f2:2d:
ff:d8:38:ef:50:a0:d1:47:f2:14:80:23:56:45:b6:
e3:07:a7:10:3c:1a:a5:ec:73:ed:91:2a:4a:1f:db:
0d:4f:ef:b9:49:3d:a1:94:cf:a9:83:05:45:a0:8b:
c7:51:07:a6:ca:79:eb:e2:7b:6e:f7:00:47:1a:b7:
10:7d:be:4b:5c:55:ee:3f:ac:dd:fc:68:60:20:16:
bc:f1:45:12:db:d1:bc:98:56:34:49:3c:4c:e0:26:
1a:0d:75:40:5d:cd:ed:60:c3:a2:21:d1:5d:96:e4:
f1:ba:6d:df:33:7b:af:54:c0:22:60:dd:e0:e7:de:
63:0a:30:3a:55:18:fc:05:9c:e6:1f:47:fa:08:ec:
3d:d9:19:c5:b4:e6:e5:bc:fb:90:b5:b2:c2:c6:61:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:93:33:E7:F0:8C:10:77:21:C6:4D:C4:AD:19:10:73:B2:ED:8B
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:5f:ea:1d:6f:f0:d8:cf:69:35:02:19:b7:43:06:fb:ae:
39:7d:5f:5b:b3:50:93:1a:5f:c8:f7:0c:0a:db:12:9f:3e:aa:
3e:82:4f:f7:5f:17:22:54:20:ce:b8:a8:2e:4d:bd:38:55:cc:
af:1c:2b:c7:9c:7a:19:cb:c9:3e:ec:b4:30:d3:38:97:7d:11:
85:e6:b5:5a:de:45:bb:27:a5:12:35:19:48:7b:d8:6f:5c:38:
fa:ac:b2:04:b3:70:21:a4:6a:0e:37:13:b1:b3:fc:94:83:8e:
89:4f:76:17:66:9c:9c:93:20:d5:ac:5f:5c:fd:3e:cf:98:d5:
3c:c5:c1:e5:b8:16:eb:5f:43:d7:20:a3:f8:43:04:88:27:6a:
dd:ab:da:a2:32:47:c0:4d:38:c1:9d:8a:c9:15:59:a5:0f:bb:
ba:ee:aa:3d:e0:2d:59:66:f7:62:e2:43:81:a6:2e:ed:4c:db:
23:31:39:c7:5f:12:e1:4f:95:97:a2:24:d5:0c:ee:10:82:a9:
f8:a3:c7:fa:a5:9e:37:4a:18:be:b8:34:a6:70:10:be:00:99:
18:fe:08:bc:dc:da:c2:11:ac:40:85:46:21:aa:f4:72:ec:e9:
cc:71:fd:1c:e7:75:0e:60:07:2d:0e:6c:6f:51:b3:db:84:32:
ad:32:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:34 2026 by rpki-client