Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: mjwUH0nHVHJHbdgBjzgJj8z7jsfjOW9U/xu54vv7iRc=
Subject key identifier: 97:D1:35:AC:72:6F:D6:3A:70:14:E5:BB:2F:FF:13:F4:47:BE:9D:4B
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019FAE647259CCF02CD9AF9B29A008218B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 15:00:46 +0000
Manifest this update: Wed 29 Jul 2026 15:00:46 +0000
Manifest next update: Thu 30 Jul 2026 15:00:46 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: h9vUeYTyXkM1srXC+5hE3l4hf2Rjf+SzROZQSyQwIIc=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:72:59:cc:f0:2c:d9:af:9b:29:a0:08:21:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jul 29 15:00:46 2026 GMT
Not After : Jul 30 15:00:46 2026 GMT
Subject: CN=97d135ac726fd63a7014e5bb2fff13f447be9d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:a7:45:74:0f:b1:6d:9d:2b:df:2f:7c:9f:
ee:1b:53:f6:a4:5d:05:07:ee:f3:07:c8:57:0f:dc:
76:a1:52:b2:b3:3b:60:d7:27:1f:e2:47:2c:30:9a:
77:0b:be:44:34:6e:9b:5e:81:13:74:fd:89:b2:70:
a6:84:95:bc:ee:62:39:33:30:12:7b:dc:83:8f:f9:
0b:dd:3b:b7:b6:05:cb:7d:9d:26:71:65:27:8f:98:
a2:e8:b0:d1:b6:f8:84:5e:6a:98:80:81:b8:4a:3c:
7e:87:c3:0f:4d:d6:9d:f1:86:ef:31:f0:2d:a5:b7:
70:26:47:ec:5a:6c:8b:80:d6:06:56:8c:47:5e:f0:
a8:3c:46:90:41:f1:cf:e5:a1:f8:ef:08:0f:6c:70:
16:46:0f:38:d6:02:87:64:1b:c2:fa:8a:ae:32:bf:
37:ec:96:bf:f7:0b:7e:59:46:df:d7:0d:3f:94:1a:
f4:84:dc:c9:1c:12:d2:4e:4c:b5:79:db:f9:7c:cb:
48:17:57:24:a6:b9:81:ac:31:68:ed:ad:4c:df:10:
e1:7f:71:fe:a8:8a:58:f0:85:55:e5:cb:ac:18:4b:
2b:25:f3:09:24:e6:6b:fe:71:a9:25:ea:c9:b5:05:
0f:cd:67:a7:7c:86:a7:30:7e:ce:9a:bd:d4:41:da:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:35:AC:72:6F:D6:3A:70:14:E5:BB:2F:FF:13:F4:47:BE:9D:4B
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e2:b2:04:49:5d:fa:7c:38:54:b6:39:79:41:70:57:86:f3:
e4:e5:f4:e0:7e:53:f7:aa:b9:61:c1:ca:dd:9e:c8:63:8e:10:
f2:8e:d1:2e:ed:43:02:4b:a0:37:e2:cd:78:7f:56:6f:92:0b:
cd:15:a0:53:f8:10:2d:67:65:07:64:3e:30:df:26:62:3e:88:
2a:4d:a4:af:42:9d:42:ad:35:d5:b5:fd:6d:03:39:54:3b:eb:
3a:61:9e:c9:93:ed:c0:2d:3b:a7:8a:58:68:b4:39:cb:e8:50:
15:6e:c3:ad:26:fb:d0:17:02:5d:38:1c:42:05:ab:58:0e:6d:
b0:5d:be:61:e6:13:71:27:27:90:b8:b6:71:98:4d:4c:d1:cb:
a5:ed:4a:f1:e0:75:fc:46:67:67:51:df:30:b9:6f:81:a9:e3:
d0:ea:98:7a:b3:f5:3a:a0:cf:2e:44:ef:a1:f2:98:ea:fc:40:
54:72:4d:c6:64:09:86:7a:16:36:38:fc:0a:32:26:35:56:e1:
05:58:1f:ba:83:d4:93:ed:d4:5e:4e:75:ba:7f:58:ae:53:53:
1b:71:f2:8f:d4:44:8b:b4:d9:7b:9c:ec:c0:d5:01:b2:bc:a5:
8c:bb:11:ee:1f:c1:8d:43:b5:88:40:8a:f0:72:cf:4b:fa:d7:
f3:35:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:51:38 2026 by rpki-client