Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: e+UK50ZihJp0S8RejpBE3fBC0KBSO2+4lSN3e1c7SZE=
Subject key identifier: 03:D2:FF:FE:06:D7:79:B4:1F:22:CD:DA:03:83:68:29:57:ED:49:DA
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019FAABE6336D4C29EFD7EA270456A3ACE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 22:00:31 +0000
Manifest this update: Tue 28 Jul 2026 22:00:31 +0000
Manifest next update: Wed 29 Jul 2026 22:00:31 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: iqX2N/7VEOFGzI/ggkaaOYr0zXQgsthFqTSE3MSYkNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:63:36:d4:c2:9e:fd:7e:a2:70:45:6a:3a:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jul 28 22:00:31 2026 GMT
Not After : Jul 29 22:00:31 2026 GMT
Subject: CN=03d2fffe06d779b41f22cdda0383682957ed49da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:f9:da:d4:b2:ca:cb:66:d3:c5:57:d9:ae:
3d:4e:2c:74:f5:73:b6:91:36:86:13:b5:84:87:3c:
b8:18:ae:8e:95:71:5f:6f:a6:e9:8c:10:75:30:6e:
59:9a:b8:e3:bf:be:4c:d2:8f:06:e0:32:15:b5:5b:
51:63:27:9a:fd:3f:ef:51:f7:5f:5d:08:87:a4:e9:
e9:b4:9e:8f:f0:02:cf:c2:69:58:ac:f8:ce:0f:06:
87:dd:c1:b5:cf:c5:5f:39:95:e7:b6:78:06:a1:a7:
75:89:18:bf:09:23:b9:19:7b:6f:b5:c2:a8:5b:22:
8f:b7:ec:65:4d:10:57:97:8a:db:5e:20:23:cc:45:
09:07:6b:ef:30:e5:17:d2:44:f3:5e:60:d5:06:9d:
b1:61:c7:56:1b:6c:be:89:26:a7:69:c6:65:0e:c3:
40:c4:48:03:6c:73:f6:c1:ec:76:1e:c9:7b:55:74:
c3:5f:f8:a4:50:bb:6e:56:5e:41:80:ad:bc:a5:3b:
cd:76:c6:44:81:88:1c:a4:79:7c:ae:6e:a1:8b:5a:
f3:1a:fd:9f:9c:e3:7f:01:e0:b4:43:ce:62:08:12:
95:17:e7:52:e4:9e:29:3a:ea:53:5a:28:42:2e:22:
bf:d2:e2:5f:a2:ef:2e:34:27:75:ac:ee:cb:8e:ea:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:FF:FE:06:D7:79:B4:1F:22:CD:DA:03:83:68:29:57:ED:49:DA
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a8:0c:73:6f:b4:6f:2a:a2:24:66:f0:1e:de:d3:40:80:02:
45:1e:bf:b3:a7:e2:c4:f9:56:c0:80:24:93:0c:6f:12:12:d6:
a1:5b:aa:b0:0d:ca:c7:20:d8:78:8e:3a:f2:91:85:76:a7:32:
98:4e:e0:3c:89:4a:42:77:d1:02:00:e2:43:2f:7c:0e:98:91:
43:e3:02:9f:de:ca:e4:ae:80:cf:11:c1:80:b2:87:9a:49:ef:
45:29:a4:9b:79:d1:af:e0:5e:a3:14:8f:af:73:bd:40:3e:e8:
0a:5c:c0:72:02:2d:a2:0f:06:57:7e:ff:43:b0:5a:95:9c:43:
ba:a1:a1:05:f9:b5:e2:14:61:99:ca:58:45:65:9d:31:36:e1:
17:40:3e:9f:0f:dd:f2:e8:c2:0a:87:63:4d:1d:ea:eb:4e:3a:
a2:1a:22:8f:63:df:89:83:6d:62:28:ce:34:49:bd:f0:45:1b:
0d:f5:f8:39:e8:1c:29:d0:a0:66:4e:bf:6d:80:c9:e9:2b:bd:
97:08:24:f7:54:0c:20:39:18:de:d6:32:c0:fd:7c:58:3b:d4:
94:ed:f2:5a:6a:f6:1c:e4:24:00:8e:5b:40:97:97:b4:b0:20:
fc:93:25:a8:80:0a:86:c5:33:c6:52:75:cf:1b:95:3f:64:30:
dc:87:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:22 2026 by rpki-client