Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: OPcggDT8+StlO0f3tOkdijw9oxDc0S98p6VY42MoKjo=
Subject key identifier: 69:CF:F0:E5:2A:CF:D8:FB:7C:79:E4:8C:C5:CC:28:4F:49:AB:82:60
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019FAB6398B4E7E359DBB46543736D16FEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0CCD
Signing time: Wed 29 Jul 2026 01:00:58 +0000
Manifest this update: Wed 29 Jul 2026 01:00:58 +0000
Manifest next update: Thu 30 Jul 2026 01:00:58 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: zkzBj/FxUkwkOvNJqDh4AndtTMpJn7NeGW2a38DjJrc=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:98:b4:e7:e3:59:db:b4:65:43:73:6d:16:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jul 29 01:00:58 2026 GMT
Not After : Jul 30 01:00:58 2026 GMT
Subject: CN=69cff0e52acfd8fb7c79e48cc5cc284f49ab8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:b9:c6:e5:51:2f:e5:18:34:17:32:38:fc:
4a:90:09:ae:04:6e:1a:55:6f:65:c4:f4:2f:4e:b0:
1d:8e:c7:e1:1a:39:ee:f4:4f:50:1c:e2:44:50:d2:
83:69:13:fe:77:54:e8:3a:60:20:25:93:57:fb:4d:
bd:eb:46:f4:5d:12:7b:5c:9d:59:bf:c0:e1:91:9c:
9a:c8:df:4e:6a:c9:35:00:c1:9b:d4:f3:c7:ab:86:
23:b7:cc:19:49:f9:7e:31:d0:26:28:3a:33:a8:bc:
db:85:48:b6:ec:f6:21:da:fb:67:60:b6:cd:f2:f2:
8f:83:51:0b:a6:e7:d4:d1:de:99:f8:9c:0d:9a:f6:
49:14:86:3f:c8:12:a0:4b:d4:29:15:ab:59:65:c1:
3f:dc:82:33:2e:9e:b6:06:dc:ff:f5:d5:d3:21:54:
51:72:39:ad:1c:57:8a:60:89:87:eb:23:68:98:6a:
b9:1a:22:92:d8:29:cd:80:23:ba:2c:27:94:7c:27:
f0:36:c4:bd:9e:09:16:e1:a3:26:3f:09:98:e2:82:
b5:0b:8b:21:21:d6:36:e2:84:aa:32:55:ff:0e:92:
d2:29:3a:2e:9a:c1:a7:d6:0b:c7:b9:cc:45:78:77:
88:0e:7c:2f:1c:e3:6b:c1:6a:50:20:99:ea:58:ee:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:F0:E5:2A:CF:D8:FB:7C:79:E4:8C:C5:CC:28:4F:49:AB:82:60
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4c:76:c6:92:12:ea:6c:3e:87:ed:9f:cb:74:b2:9c:d4:b3:
16:9c:dc:0a:77:6f:e9:4c:1e:b6:51:bf:17:63:40:75:57:5f:
7e:5d:8e:62:3b:a9:2f:1f:5a:cb:f3:a8:e0:4d:fd:ed:65:19:
18:9a:a9:1c:48:ac:a7:91:44:43:46:7e:c1:66:22:23:9e:b4:
f1:e9:03:a7:7f:8f:12:b7:25:f4:50:5b:58:e5:8e:5a:7b:1d:
1b:25:ec:a6:a2:23:eb:ec:bd:ce:d8:85:e0:b1:f0:80:f5:62:
c0:f7:62:9b:40:8f:ae:4f:d3:99:5b:a4:53:10:93:d2:4c:0e:
c1:b6:bf:65:36:99:cf:88:55:f8:dd:29:5f:8b:b3:d6:c9:01:
d5:a3:25:e6:b3:33:f3:a2:ef:f3:f7:a4:9f:42:cc:01:85:12:
3c:9c:c2:82:bc:87:7a:71:b7:ac:71:c8:e0:b9:ad:f8:68:41:
31:42:bf:6c:68:90:68:48:69:cf:44:9b:d3:d7:81:3a:75:8b:
e2:df:17:10:87:3b:13:af:27:5a:73:f0:25:b5:75:6d:4f:0a:
4d:78:ef:e0:e8:a3:91:fb:24:18:fc:f7:c9:fb:9a:11:d4:9c:
c0:07:fe:8f:db:49:dc:73:3d:44:bb:c5:20:69:80:5d:bc:b4:
bc:74:d4:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY5i05+NZ27RlQ3NtFv64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjYwNzI5MDEwMDU4WhcNMjYwNzMwMDEwMDU4WjAzMTEwLwYDVQQD
Eyg2OWNmZjBlNTJhY2ZkOGZiN2M3OWU0OGNjNWNjMjg0ZjQ5YWI4MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmO5xuVRL+UYNBcyOPxKkAmuBG4a
VW9lxPQvTrAdjsfhGjnu9E9QHOJEUNKDaRP+d1ToOmAgJZNX+02960b0XRJ7XJ1Z
v8DhkZyayN9Oask1AMGb1PPHq4Yjt8wZSfl+MdAmKDozqLzbhUi27PYh2vtnYLbN
8vKPg1ELpufU0d6Z+JwNmvZJFIY/yBKgS9QpFatZZcE/3IIzLp62Btz/9dXTIVRR
cjmtHFeKYImH6yNomGq5GiKS2CnNgCO6LCeUfCfwNsS9ngkW4aMmPwmY4oK1C4sh
IdY24oSqMlX/DpLSKToumsGn1gvHucxFeHeIDnwvHONrwWpQIJnqWO7JoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnP8OUqz9j7fHnkjMXMKE9Jq4JgMB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0x2xpIS
6mw+h+2fy3SynNSzFpzcCndv6UwetlG/F2NAdVdffl2OYjupLx9ay/Oo4E397WUZ
GJqpHEisp5FEQ0Z+wWYiI5608ekDp3+PErcl9FBbWOWOWnsdGyXspqIj6+y9ztiF
4LHwgPViwPdim0CPrk/TmVukUxCT0kwOwba/ZTaZz4hV+N0pX4uz1skB1aMl5rMz
86Lv8/ekn0LMAYUSPJzCgryHenG3rHHI4Lmt+GhBMUK/bGiQaEhpz0Sb09eBOnWL
4t8XEIc7E68nWnPwJbV1bU8KTXjv4OijkfskGPz3yfuaEdScwAf+j9tJ3HM9RLvF
IGmAXby0vHTUaw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:16:21 2026 by rpki-client