Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: ZFmm6UtFiN3TOght+Y5NMSvOOIF1H9WUIYvuOfRNxS0=
Subject key identifier: E1:8D:A0:E5:AC:06:10:A1:E5:81:97:02:0E:6C:48:30:6B:EF:91:F5
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019FAAF623094BA7DC5E1A88D6FCA3603BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0D17
Signing time: Tue 28 Jul 2026 23:01:25 +0000
Manifest this update: Tue 28 Jul 2026 23:01:25 +0000
Manifest next update: Wed 29 Jul 2026 23:01:25 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: t4bf5MFaL1Mj6dwK7wIp1+cPiO/mAGNk2P5Z1IaV0jE=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:23:09:4b:a7:dc:5e:1a:88:d6:fc:a3:60:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jul 28 23:01:25 2026 GMT
Not After : Jul 29 23:01:25 2026 GMT
Subject: CN=e18da0e5ac0610a1e58197020e6c48306bef91f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:69:ae:45:54:89:ed:a1:a0:1a:05:f7:48:
79:d0:16:f2:2c:0f:6f:e8:ea:e2:d0:02:ec:26:3b:
b1:db:d4:a7:25:58:5c:c8:64:5e:21:1d:c5:37:d0:
57:3e:75:1e:f4:00:37:c2:60:97:8d:92:3f:46:51:
fd:f0:fd:7e:b4:7e:68:15:e5:f3:86:73:23:f1:7d:
9d:fe:55:3f:d0:95:30:1b:2d:41:b3:b6:09:8d:82:
93:0a:88:b1:8d:85:51:9d:7d:e6:d5:7f:cb:b3:18:
5c:e5:a3:29:50:89:41:b5:47:5a:58:5b:c3:8a:51:
4d:1d:eb:e8:91:39:8c:b7:a3:60:5c:11:6b:b5:c7:
fc:36:6b:8c:be:c3:f5:69:d4:d5:9d:af:a4:47:dc:
0a:69:25:2a:5a:83:2e:da:d5:c6:2d:0c:4d:df:3c:
b1:89:ee:2e:86:3a:a8:d5:35:11:df:ca:94:20:72:
1e:36:c1:99:f0:51:a4:a4:c4:4e:59:71:cf:11:1e:
f5:3a:2c:da:22:fb:e2:fe:42:2e:83:75:2f:63:a0:
07:b7:6f:9e:12:05:be:4b:7a:18:be:6c:22:6e:d5:
b1:61:e4:10:de:94:e2:7a:98:0e:8c:1c:06:17:4f:
8e:8c:37:19:2f:4e:21:3c:cd:ed:e2:0b:3c:f5:3e:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:A0:E5:AC:06:10:A1:E5:81:97:02:0E:6C:48:30:6B:EF:91:F5
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:4f:f9:9b:b1:73:45:d4:51:82:02:c1:05:5f:e0:fc:95:
ae:33:4e:57:2f:5c:55:45:5e:fe:27:5d:14:b7:b5:50:e3:29:
57:ea:37:f2:7d:6d:a9:ab:50:2c:f1:75:46:ff:7d:18:b8:81:
f9:7c:22:fe:3b:71:2b:c8:98:3b:c3:6f:1e:84:eb:e4:00:4d:
19:52:3c:19:75:31:af:62:07:36:ea:82:6c:8a:2f:0a:48:30:
b9:d5:16:55:56:51:6a:b1:e8:ca:69:da:eb:e8:a7:79:11:88:
00:45:3e:78:ff:b5:2d:3c:6e:c0:eb:17:2b:16:52:4b:81:f9:
bd:22:fa:db:c3:cc:a2:fd:e9:e6:3e:26:7e:1a:c6:f8:0c:17:
9d:6f:f8:3e:83:ad:cc:eb:9b:e1:18:3d:61:37:1f:8e:ed:65:
72:e1:23:b0:85:39:30:fa:2c:50:b6:21:a7:f9:07:66:e8:2f:
e5:7a:71:80:c6:0d:7f:20:4c:5a:d0:d7:79:a2:ac:27:47:92:
6b:69:d7:d7:92:0c:ae:56:35:f9:fd:cf:31:61:3b:dd:94:db:
98:83:e9:10:4f:9a:0b:ec:25:26:f4:02:99:2c:6e:5d:91:4c:
cc:1d:33:72:01:63:77:ab:43:05:37:06:7d:ed:9a:bc:2f:37:
1a:c0:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:59 2026 by rpki-client