Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: Cbfe5XG0a5xJ6mfiiENQ09+pMLH7EXa+4eF4C7lJUYY=
Subject key identifier: 74:A2:2A:1D:83:B0:1F:EF:D3:90:21:E6:93:58:B1:0E:22:D9:D2:38
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 019FA89A2A4AF6FFE538055E12F213D40D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0D00
Signing time: Tue 28 Jul 2026 12:01:43 +0000
Manifest this update: Tue 28 Jul 2026 12:01:43 +0000
Manifest next update: Wed 29 Jul 2026 12:01:43 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: kcWxJdmm0o9zvUWMgwEuZGIfRWBkCGvxyEjdQi74z/s=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:2a:4a:f6:ff:e5:38:05:5e:12:f2:13:d4:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jul 28 12:01:43 2026 GMT
Not After : Jul 29 12:01:43 2026 GMT
Subject: CN=74a22a1d83b01fefd39021e69358b10e22d9d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:6e:81:a8:9f:36:6b:f7:80:f3:db:3f:be:
85:74:8f:ca:39:e7:7a:a0:a9:5b:cb:79:ee:ed:27:
2f:85:2c:ce:d9:5d:61:a1:47:aa:8f:77:9f:17:ba:
e4:6a:a2:cb:fb:dc:a0:94:ee:90:ef:e1:99:13:7d:
75:a7:46:99:44:ec:c9:4e:00:86:1d:c8:1a:37:57:
b2:7d:6e:8b:46:3a:da:d8:08:74:42:06:19:85:ba:
8b:98:92:00:b7:21:80:3c:ee:d2:fe:a1:86:6b:5b:
22:10:54:c9:3b:f3:fa:87:a4:d4:66:09:03:03:19:
f8:e5:2f:eb:a8:60:00:e0:26:1a:a9:05:3b:a7:af:
75:34:93:36:d3:da:89:e6:66:68:d9:c6:2c:f0:1e:
2b:4d:b5:c3:92:38:90:8d:98:2f:ed:6a:78:fa:0f:
dc:b7:d3:d1:91:25:20:cc:42:03:ed:e7:a7:7e:56:
3a:fa:df:ee:6f:63:83:19:5e:63:cc:ec:14:a9:f4:
c1:a2:de:00:c8:c8:7d:58:3f:71:ca:5a:a3:dd:87:
37:17:bc:24:00:78:0a:04:70:bc:b8:a4:17:04:74:
e7:0d:eb:b6:88:3e:08:54:05:51:ad:ca:97:71:9e:
26:cf:bb:92:14:74:d4:d9:e0:74:2e:8d:db:fb:12:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:2A:1D:83:B0:1F:EF:D3:90:21:E6:93:58:B1:0E:22:D9:D2:38
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:9e:a5:de:81:16:69:7a:ab:01:c8:62:94:b8:b7:5a:ef:
f3:43:4b:6e:19:ce:2f:2a:35:f6:fc:da:89:74:e9:83:4d:46:
aa:27:21:2e:8a:af:85:63:3b:34:0a:5e:47:f3:67:18:fd:01:
13:6c:56:67:c3:55:19:49:8f:4a:9c:8e:76:94:fb:e3:93:ef:
12:a5:26:ca:ba:a4:bb:bb:db:6f:8e:64:e2:a1:6b:4d:d1:ee:
bf:2a:23:fc:08:4e:2b:a0:b0:96:10:b6:08:89:04:92:d4:05:
5b:2d:7c:47:e0:5a:e2:b8:70:55:28:63:f6:42:bd:b0:e3:f5:
22:bb:2c:16:ce:a8:0b:0c:51:e5:b5:b6:a7:30:37:55:fd:c4:
8c:cd:f7:91:33:cd:f0:6f:a1:a1:df:3c:41:1b:a1:dd:8e:35:
31:c5:0b:da:16:41:eb:c7:93:f9:70:f2:ca:7c:2a:84:00:b2:
fc:72:23:6e:d7:b6:79:0b:14:2a:c8:f7:14:38:20:f0:0e:7d:
4c:24:44:51:04:6b:9f:66:fe:07:39:78:d1:3f:3d:1d:85:c1:
46:41:da:4b:dc:dc:6b:c6:2b:84:a5:65:c3:01:c8:10:93:41:
2c:d9:fc:bd:d9:39:db:d2:ac:e1:0f:cb:1f:02:c6:e7:6d:64:
38:9a:e6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omipK9v/lOAVeEvIT1A0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzAyMDJjMzEyZGQyYzdhNmZmYzMxN2FhODZlNGUyMDY5
MjQ5YTYwHhcNMjYwNzI4MTIwMTQzWhcNMjYwNzI5MTIwMTQzWjAzMTEwLwYDVQQD
Eyg3NGEyMmExZDgzYjAxZmVmZDM5MDIxZTY5MzU4YjEwZTIyZDlkMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriRugaifNmv3gPPbP76FdI/KOed6
oKlby3nu7ScvhSzO2V1hoUeqj3efF7rkaqLL+9yglO6Q7+GZE311p0aZROzJTgCG
HcgaN1eyfW6LRjra2Ah0QgYZhbqLmJIAtyGAPO7S/qGGa1siEFTJO/P6h6TUZgkD
Axn45S/rqGAA4CYaqQU7p691NJM209qJ5mZo2cYs8B4rTbXDkjiQjZgv7Wp4+g/c
t9PRkSUgzEID7eenflY6+t/ub2ODGV5jzOwUqfTBot4AyMh9WD9xylqj3Yc3F7wk
AHgKBHC8uKQXBHTnDeu2iD4IVAVRrcqXcZ4mz7uSFHTU2eB0Lo3b+xKulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSiKh2DsB/v05Ah5pNYsQ4i2dI4MB8GA1UdIwQY
MBaAFApwICwxLdLHpv/DF6qG5OIGkkmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMt
NjhjODQ5Mjc3ZDczLzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMtNjhjODQ5Mjc3ZDcz
LzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaGepd6B
Fml6qwHIYpS4t1rv80NLbhnOLyo19vzaiXTpg01GqichLoqvhWM7NApeR/NnGP0B
E2xWZ8NVGUmPSpyOdpT745PvEqUmyrqku7vbb45k4qFrTdHuvyoj/AhOK6CwlhC2
CIkEktQFWy18R+Ba4rhwVShj9kK9sOP1IrssFs6oCwxR5bW2pzA3Vf3EjM33kTPN
8G+hod88QRuh3Y41McUL2hZB68eT+XDyynwqhACy/HIjbte2eQsUKsj3FDgg8A59
TCREUQRrn2b+Bzl40T89HYXBRkHaS9zca8YrhKVlwwHIEJNBLNn8vdk529Ks4Q/L
HwLG521kOJrmjg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:13 2026 by rpki-client