Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: 01qlj9HdBN5ODmDUQyjhpNfgG3wGkyY4hDeTCgC5MRw=
Subject key identifier: B5:1C:17:43:4A:50:B4:D3:35:1E:55:8B:4E:01:3C:C7:94:31:C1:99
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 019EBEED245F8D70691E78C9672B118076B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0C87
Signing time: Sat 13 Jun 2026 03:01:12 +0000
Manifest this update: Sat 13 Jun 2026 03:01:12 +0000
Manifest next update: Sun 14 Jun 2026 03:01:12 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: gGlvd2sWnVjxGJFKGss4CGHjmBLA1GyFwMXix6XeR4E=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:24:5f:8d:70:69:1e:78:c9:67:2b:11:80:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jun 13 03:01:12 2026 GMT
Not After : Jun 14 03:01:12 2026 GMT
Subject: CN=b51c17434a50b4d3351e558b4e013cc79431c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:4b:6a:17:65:83:22:90:e2:80:b6:91:60:
50:0f:cf:a0:69:18:45:e3:c9:14:7a:e8:c6:32:ec:
df:7c:98:27:56:cc:32:55:f2:04:64:0e:7a:6f:39:
d0:41:c2:14:fb:1b:48:a8:47:54:9b:b8:b4:85:07:
78:df:99:d4:6f:69:a0:70:12:1c:82:0b:0f:8a:66:
0c:d7:19:5a:c2:1f:b1:ac:55:e6:25:c4:88:dc:f1:
02:1f:a9:7f:b9:ce:e2:7d:80:84:7e:3e:43:1e:8d:
a2:43:d4:d1:94:8e:91:23:0d:c0:4a:db:67:51:e9:
dd:81:8a:76:36:d8:20:c6:7a:9e:82:fa:08:c6:59:
b4:b3:5a:49:a8:93:45:62:2e:84:9c:a3:51:50:6c:
44:4b:34:14:a0:3a:4c:25:07:c3:e5:d9:95:3c:f5:
2a:e2:66:f4:36:0f:ac:f6:aa:88:9a:35:11:40:48:
d8:ea:66:74:0d:12:9c:70:e4:99:79:0f:27:27:aa:
78:09:98:68:ad:44:a1:e4:9a:a0:b3:7c:db:23:3d:
99:9f:84:ca:e8:34:e7:53:a7:48:32:44:b0:5d:ef:
c6:a5:05:f2:5d:86:8e:15:ec:af:4f:1c:76:db:ed:
ab:63:27:f9:48:fb:57:e9:a8:44:0b:84:5d:5b:69:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:17:43:4A:50:B4:D3:35:1E:55:8B:4E:01:3C:C7:94:31:C1:99
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:80:34:55:ec:86:3c:50:bf:41:3e:4a:86:df:79:cd:68:de:
b5:3a:16:68:a9:37:c0:f4:53:a2:9a:e6:7f:bc:0b:1b:2b:a1:
e1:b1:29:04:3e:f1:6c:93:82:d4:ee:00:2d:cf:f9:99:e2:db:
ff:e0:19:ef:de:4c:e0:c5:4c:6d:13:25:55:85:90:a7:c0:ae:
f6:f5:3a:8a:a8:1b:0b:bc:96:f2:1c:df:92:9f:e2:47:9b:fd:
b6:41:87:a6:df:04:ac:7c:18:41:e8:00:c5:85:8c:cb:b7:a5:
e4:6f:d2:c5:00:04:1b:e2:bb:49:a8:a7:c9:38:bd:87:72:01:
c4:fa:8e:88:89:a5:aa:af:6f:c4:70:56:8b:7c:60:ef:89:b4:
18:f8:6a:2f:b3:55:c2:fd:eb:45:95:8f:69:85:9d:fd:e3:a9:
0e:89:af:89:7f:fb:73:7d:42:e3:37:92:4f:42:fa:f7:b0:5b:
b9:ad:f9:7e:e9:06:78:f6:8d:5e:af:78:6f:c7:27:ee:37:3b:
d4:1e:d5:5c:40:6c:3c:fc:b0:8b:86:5a:37:b3:10:d9:a2:52:
84:36:0c:8a:b6:93:bb:8b:8c:ad:9f:14:bb:0c:d7:2a:c4:08:
7d:cb:14:e5:40:29:32:ba:06:2f:d6:b4:13:c3:26:ec:b5:d7:
2c:79:fe:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7SRfjXBpHnjJZysRgHawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzAyMDJjMzEyZGQyYzdhNmZmYzMxN2FhODZlNGUyMDY5
MjQ5YTYwHhcNMjYwNjEzMDMwMTEyWhcNMjYwNjE0MDMwMTEyWjAzMTEwLwYDVQQD
EyhiNTFjMTc0MzRhNTBiNGQzMzUxZTU1OGI0ZTAxM2NjNzk0MzFjMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEFLahdlgyKQ4oC2kWBQD8+gaRhF
48kUeujGMuzffJgnVswyVfIEZA56bznQQcIU+xtIqEdUm7i0hQd435nUb2mgcBIc
ggsPimYM1xlawh+xrFXmJcSI3PECH6l/uc7ifYCEfj5DHo2iQ9TRlI6RIw3ASttn
UendgYp2NtggxnqegvoIxlm0s1pJqJNFYi6EnKNRUGxESzQUoDpMJQfD5dmVPPUq
4mb0Ng+s9qqImjURQEjY6mZ0DRKccOSZeQ8nJ6p4CZhorUSh5Jqgs3zbIz2Zn4TK
6DTnU6dIMkSwXe/GpQXyXYaOFeyvTxx22+2rYyf5SPtX6ahEC4RdW2lFxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUcF0NKULTTNR5Vi04BPMeUMcGZMB8GA1UdIwQY
MBaAFApwICwxLdLHpv/DF6qG5OIGkkmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMt
NjhjODQ5Mjc3ZDczLzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMtNjhjODQ5Mjc3ZDcz
LzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4A0VeyG
PFC/QT5Kht95zWjetToWaKk3wPRToprmf7wLGyuh4bEpBD7xbJOC1O4ALc/5meLb
/+AZ795M4MVMbRMlVYWQp8Cu9vU6iqgbC7yW8hzfkp/iR5v9tkGHpt8ErHwYQegA
xYWMy7el5G/SxQAEG+K7SainyTi9h3IBxPqOiImlqq9vxHBWi3xg74m0GPhqL7NV
wv3rRZWPaYWd/eOpDomviX/7c31C4zeST0L697Bbua35fukGePaNXq94b8cn7jc7
1B7VXEBsPPywi4ZaN7MQ2aJShDYMiraTu4uMrZ8UuwzXKsQIfcsU5UApMroGL9a0
E8Mm7LXXLHn+XA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:41 2026 by rpki-client