Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
File: c8NA1CPOqEv-S_GRbURn2yhPG9E.mft (raw, json)
Hash identifier: C4gvf11+QEIWz4mGck2QHvzrQX27hKGK0/q+2HPWCy0=
Subject key identifier: 87:FF:92:06:B0:B5:12:A5:D1:76:7F:E3:12:C8:8A:AB:EE:B3:4A:76
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 019FAC7653A5997647DD4D572C7ABCFD0ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:03 +0000
Manifest this update: Wed 29 Jul 2026 06:01:03 +0000
Manifest next update: Thu 30 Jul 2026 06:01:03 +0000
Files and hashes: 1: GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa (hash: 62+kuU98oy4EBWbGRZ1tg6jTebE/AiOSPPyh1dqPc7k=)
2: b29z0SmKuf57xTcfTwg8xTH0h9U.roa (hash: 7FbHeUWOoJSoqd/LHofesB/M+xhe9b4HJWzm53NLUIg=)
3: c8NA1CPOqEv-S_GRbURn2yhPG9E.crl (hash: HP3l6CWR3Yufytd0oqWuerUT3h7tHmT4anRy0sB7jzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:53:a5:99:76:47:dd:4d:57:2c:7a:bc:fd:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Jul 29 06:01:03 2026 GMT
Not After : Jul 30 06:01:03 2026 GMT
Subject: CN=87ff9206b0b512a5d1767fe312c88aabeeb34a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:0e:d4:78:5c:24:ba:b1:81:bb:d8:36:c3:
bf:27:90:90:02:b1:4b:52:40:fe:3d:8b:91:4b:8e:
13:1d:ef:ca:5f:d5:86:03:f5:af:ed:0b:c6:9d:6e:
8a:45:d7:d1:57:4a:97:21:c9:6d:77:32:b6:1d:a4:
cd:4b:3b:55:7c:03:0b:5e:49:f8:03:a9:14:da:ef:
f0:a4:32:12:e8:5a:94:dc:34:b5:7f:59:90:0a:1e:
98:fc:64:44:87:1d:65:12:bc:c2:90:48:81:d0:46:
b6:7c:4d:13:a9:f6:ce:9c:6f:ff:d5:8d:09:c8:b7:
f7:0f:f3:10:a6:43:bc:9d:24:12:7e:10:a0:7f:ca:
ee:26:3e:c7:b7:e0:c8:41:69:e9:c4:37:ce:9b:c8:
b7:cc:60:09:93:00:99:6e:b9:c8:67:40:7e:78:bb:
0f:64:a1:97:0c:7d:83:30:65:46:07:29:91:a6:2d:
cc:37:47:1a:97:eb:3f:31:58:3e:ff:06:00:22:1b:
27:77:4a:69:c8:28:ad:d9:e7:83:f0:a4:27:cf:26:
bb:50:b2:f9:50:91:77:34:5f:a5:bc:3f:0a:7c:a0:
0d:ea:e6:ef:6f:2a:f7:01:65:96:89:9d:2d:19:46:
1d:0f:b0:d3:1b:ef:b4:15:55:7d:83:ca:59:83:e8:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:92:06:B0:B5:12:A5:D1:76:7F:E3:12:C8:8A:AB:EE:B3:4A:76
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:84:59:ed:87:4d:18:6f:64:82:8a:10:1c:4f:62:66:a0:c3:
ae:20:ba:05:f4:7d:6d:6d:06:d7:d6:81:1d:5e:20:e4:04:42:
ca:8f:e6:cf:5f:1c:25:f9:30:48:d7:0b:e9:82:e1:3d:f2:76:
7f:dd:33:6c:2a:bc:88:c2:f1:17:29:77:26:01:5b:f7:9d:83:
fb:e3:2b:85:93:73:5e:7b:d7:9a:a1:12:05:ad:45:62:c7:1f:
a1:4f:90:43:96:ee:2e:0f:38:84:33:9d:9c:b7:30:53:88:d8:
e2:e7:ea:06:2a:1f:57:7f:9e:e1:80:df:bb:00:ab:89:ff:52:
09:ee:e0:24:75:70:fb:a8:a0:b2:d6:03:74:86:10:31:77:e4:
d2:3d:25:31:d7:a7:64:71:58:8f:08:c6:8b:11:fc:64:0b:1c:
7d:6c:f3:b3:31:17:b6:39:cf:15:52:64:95:dd:30:fc:9f:53:
db:c6:ef:ad:f4:3e:82:76:7a:40:62:88:81:4d:d9:4d:9f:e3:
fa:eb:b4:c5:6d:71:db:0c:c9:0b:ee:28:73:f0:ab:4d:9d:d7:
87:bb:c6:bd:72:c2:83:8d:15:b7:b1:fc:5d:93:88:03:61:76:
da:31:b3:15:ac:b1:d3:74:2c:c6:00:b8:3b:6e:a9:42:8a:f9:
4c:31:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:10 2026 by rpki-client