Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: 11++FJpJxV+g83hA9nzgEcmap7rVbOYA/hHN6N8UiYU=
Subject key identifier: 6E:9E:D9:6C:ED:AC:01:F0:A0:9F:C2:77:12:75:3B:17:C4:45:9F:1A
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 019FACE456CFABEC1A4BCA74588BF525B20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0578
Signing time: Wed 29 Jul 2026 08:01:13 +0000
Manifest this update: Wed 29 Jul 2026 08:01:13 +0000
Manifest next update: Thu 30 Jul 2026 08:01:13 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: CWPpO4vovBDzINSM2i1TTnm3sdy3Duh+fPvwblJzYNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:56:cf:ab:ec:1a:4b:ca:74:58:8b:f5:25:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jul 29 08:01:13 2026 GMT
Not After : Jul 30 08:01:13 2026 GMT
Subject: CN=6e9ed96cedac01f0a09fc27712753b17c4459f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:8a:31:f8:29:c8:6e:ac:64:e8:21:f8:19:
0d:d7:2d:9e:37:16:a2:db:4c:d2:f6:41:8d:d2:70:
40:45:da:23:3e:36:ca:8a:52:42:aa:5b:13:fa:bd:
01:e1:3b:75:27:9d:af:77:8a:1b:1f:f7:e7:c7:3f:
f1:94:8a:00:9f:8e:f4:53:4d:dd:0a:0e:79:1e:0c:
c3:83:3d:81:ed:63:2a:33:9e:9f:cc:df:07:34:43:
21:08:b9:fd:0b:a0:4b:72:74:b6:b6:fd:46:6d:e9:
a2:76:8d:5e:af:7b:52:77:20:ec:01:38:4e:d0:fa:
3f:c3:73:c2:99:37:9e:d7:88:6c:a0:d7:46:cb:76:
13:ae:c8:f4:70:d3:16:8e:3c:a4:5d:ce:91:82:d2:
71:c6:42:52:63:f6:e6:c9:bb:ce:90:e6:02:52:bf:
e3:68:ff:d0:21:c3:22:00:ab:0a:18:6b:8a:1a:ca:
9f:95:11:44:0b:19:4d:21:ae:c2:66:d0:54:14:4b:
7c:ad:7d:63:96:6e:cd:71:0d:8c:05:74:b9:a8:25:
ac:35:61:17:c2:0a:5b:ea:3e:75:d3:9c:f6:39:12:
2b:ae:10:c6:56:cb:29:5f:72:58:e8:c6:ee:c7:86:
a2:09:c8:c3:0b:93:fb:aa:a6:6d:b9:43:d5:ce:e7:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:D9:6C:ED:AC:01:F0:A0:9F:C2:77:12:75:3B:17:C4:45:9F:1A
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1a:27:a9:55:56:4a:f8:b7:0d:a0:8f:4a:3a:2a:47:d6:88:
ab:e5:5b:c3:99:f1:8a:b6:24:d3:f1:dc:2c:d3:ed:41:d5:8f:
a0:0c:04:cc:54:10:f9:da:46:81:d8:04:fd:97:ab:5f:38:75:
ec:4c:49:2e:ce:38:b3:4b:9d:65:62:21:28:ff:1b:e6:b5:b8:
59:22:07:8e:c0:a7:f0:f4:96:75:a1:a3:98:92:28:e7:f8:47:
69:86:af:f9:af:52:88:69:8f:fb:bc:47:15:f2:ff:56:91:e7:
90:2f:bd:dd:cd:c9:07:81:59:a3:d1:ef:f1:46:97:d3:0d:12:
67:35:04:e7:98:06:84:9c:c0:f9:ad:e0:02:f6:08:26:c5:8a:
6a:cb:4b:b9:9b:b0:43:0b:ef:61:0e:8e:ea:c1:ff:68:6d:0d:
84:91:b7:b5:33:e7:77:9a:fa:1c:d3:77:59:1a:6b:6d:f3:80:
4a:a6:9f:fc:fd:b1:ff:c7:b2:31:6b:df:ee:fa:19:43:e5:0a:
51:43:8c:ee:ed:f3:2f:48:e9:54:bc:51:4d:cb:e9:54:e9:76:
6d:31:9d:d6:09:68:09:2f:b0:b7:ae:39:49:1f:1e:f0:54:41:
a2:43:a8:91:f5:b5:19:8f:4b:08:c3:40:6b:8b:8a:2f:73:41:
42:b0:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:09 2026 by rpki-client