Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: m3WNaFXhJdr9ocWx6WBQStFHWivtjDiTkkRBoNJMsXo=
Subject key identifier: 7F:F2:73:6B:81:2D:DD:20:A4:99:01:6A:99:ED:71:A0:2C:3C:F0:7B
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 019FADBFCF30476E653D84182B41741A32C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 12:00:56 +0000
Manifest this update: Wed 29 Jul 2026 12:00:56 +0000
Manifest next update: Thu 30 Jul 2026 12:00:56 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: dJOYzDIhDQM+5dOs4mGfKK+ihuut6YGm0J+fIPotEWU=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:cf:30:47:6e:65:3d:84:18:2b:41:74:1a:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Jul 29 12:00:56 2026 GMT
Not After : Jul 30 12:00:56 2026 GMT
Subject: CN=7ff2736b812ddd20a499016a99ed71a02c3cf07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:fc:c6:5b:14:6c:a8:ac:f2:81:33:c4:f6:
04:e5:40:3a:46:9a:fb:10:96:4a:9d:2c:5e:75:d3:
a6:9b:fb:48:b5:d6:9e:c2:d6:c8:7c:c2:09:21:ac:
6b:a9:58:a9:9d:4a:0e:6f:ee:33:56:15:0e:d4:63:
e9:06:3a:22:73:a9:f4:29:c8:59:23:40:12:29:7a:
ed:22:6b:55:2a:55:b7:1b:d3:20:12:70:b8:11:61:
4d:bc:f5:81:f2:ad:88:28:c4:71:05:4d:c2:6e:3b:
82:b8:87:f6:aa:a8:cc:dc:7a:d5:f9:b3:ab:42:31:
9d:30:42:02:a5:a8:b5:ac:da:4b:37:43:a1:ce:c1:
1c:d6:65:e0:4b:c3:a3:f6:6f:d2:d7:a7:12:04:f9:
58:c9:54:63:5c:0f:30:29:37:b2:40:cd:53:78:57:
d7:08:f1:15:72:f1:3d:36:df:c0:0a:9c:92:9f:30:
1b:9b:59:3e:df:23:0e:11:a5:60:71:7b:da:70:65:
53:16:b7:42:54:a6:be:a8:bb:01:f1:ae:38:d4:b7:
57:7e:bb:7d:25:b4:1a:2e:6b:11:9a:60:ec:5f:32:
6a:72:a3:e5:9d:d6:59:1a:dc:09:8c:e0:f8:5d:b0:
37:69:a7:20:ea:1f:e9:ab:12:e3:3a:27:3c:ec:a3:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:73:6B:81:2D:DD:20:A4:99:01:6A:99:ED:71:A0:2C:3C:F0:7B
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:97:ad:e4:f6:de:11:a7:63:f7:0d:f8:97:6a:3e:bb:19:84:
3f:f0:56:7b:82:8d:bc:33:fa:1f:71:59:de:88:a4:76:e2:8b:
40:00:93:f3:7a:0f:26:1e:88:b5:f8:5e:a4:57:5e:77:55:04:
2b:17:59:e1:46:65:07:97:57:ec:2a:68:fc:ab:d7:41:31:29:
29:96:7e:e9:37:d4:d3:c3:cb:f1:d8:45:52:b5:22:ad:2d:21:
39:63:cc:b3:9d:00:bc:b0:81:ea:b3:d1:09:5f:1a:e9:df:85:
61:0f:ff:b8:dd:9d:60:1a:8c:c1:cb:95:e2:de:9c:1b:c6:cd:
02:e5:d5:27:23:69:cc:c5:50:36:7a:a0:06:b6:19:20:57:c1:
d9:d4:71:5e:0c:50:87:b2:e4:51:b6:b8:74:d4:f2:d1:8f:48:
c3:84:b0:40:89:fd:be:c7:5a:d6:67:3c:c8:48:00:73:32:91:
2f:b0:b4:d6:ad:45:1f:3b:0c:d1:a4:95:9c:b4:3a:dc:f6:68:
33:50:28:98:e1:9d:b8:ab:6f:67:de:f5:7f:43:41:4f:9d:e6:
d2:bf:aa:96:6c:b1:63:71:d7:d0:88:6e:93:21:f3:f4:f1:cf:
31:ce:ad:3a:c8:bc:48:2f:e0:7e:27:e8:a2:de:fb:ba:33:72:
b2:c8:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:05 2026 by rpki-client