Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: qK5h2DOvjyQEn8AbmtANOsRebPz5qzXGHEGuYXKoIxw=
Subject key identifier: 94:08:2C:2B:4B:40:E6:80:54:FE:29:B3:FA:62:2E:B0:FF:13:70:96
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019FA975AB7B719338A858B997CB29DD864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:01:28 +0000
Manifest this update: Tue 28 Jul 2026 16:01:28 +0000
Manifest next update: Wed 29 Jul 2026 16:01:28 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: XlZozVa7U7H4AFIawQMGiAt53L0FpBfKYV531nRgaGQ=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:ab:7b:71:93:38:a8:58:b9:97:cb:29:dd:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Jul 28 16:01:28 2026 GMT
Not After : Jul 29 16:01:28 2026 GMT
Subject: CN=94082c2b4b40e68054fe29b3fa622eb0ff137096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:c4:cd:df:75:ef:97:51:91:d2:bc:f4:81:
67:73:e2:7c:fa:f5:e9:26:bc:fb:3f:08:eb:a6:36:
cc:2b:97:5c:e8:ff:ec:50:0b:03:c1:2e:9b:ff:38:
78:05:77:c7:1f:44:94:2b:f6:d5:b2:e6:5e:1a:08:
0b:47:d0:75:3c:b4:43:f7:80:38:1c:b9:a2:56:55:
d1:9a:f5:3e:4a:96:cf:33:6b:ca:fa:59:de:da:9a:
3b:bc:a3:81:f6:78:2b:20:19:b3:53:97:28:54:20:
34:91:00:f0:80:15:0d:18:b0:da:b4:d3:71:d2:d6:
87:29:cb:af:7b:a9:69:a0:6b:53:c4:39:92:00:12:
13:4f:93:c2:b8:80:94:b7:89:49:17:d7:11:87:c5:
63:46:f8:8d:35:a8:3f:82:8c:16:fd:df:4a:75:28:
f7:9d:cd:2d:e0:7e:72:45:16:e6:37:a0:38:c4:24:
dc:0e:5a:04:22:d0:9f:a4:b5:40:6f:1a:35:55:b0:
c8:ff:0a:65:a9:00:db:18:7e:c0:03:a8:bd:70:db:
29:8f:c2:bf:4a:38:96:04:8b:5e:43:72:de:14:c3:
77:52:5d:22:b5:fb:80:80:1e:2d:9e:1a:27:9a:e1:
9c:d3:a2:8c:ca:4d:17:55:52:77:a1:fa:d8:1e:db:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:2C:2B:4B:40:E6:80:54:FE:29:B3:FA:62:2E:B0:FF:13:70:96
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9c:e1:68:7a:d2:2e:9b:53:0c:ff:d4:5c:35:90:ed:32:68:
cc:19:4f:b3:51:1d:ff:18:ce:af:33:bc:af:fd:06:88:3d:53:
f2:fb:9b:56:75:77:64:22:c4:8f:e0:09:67:1f:14:59:d4:8f:
f8:5e:9e:fa:da:36:d5:f0:9b:6e:89:77:59:16:3d:8d:10:64:
bf:fe:da:9c:ca:7b:7e:75:da:2f:97:26:b8:dd:99:bc:bd:b5:
c0:b7:93:fe:05:a2:77:f4:75:3f:22:12:7d:12:14:fd:63:81:
bf:38:13:e6:37:b2:52:c1:2f:8f:8d:e0:0c:9f:af:39:73:53:
e8:54:a2:84:60:0e:2f:ac:48:e4:c3:99:f4:50:0c:5f:4a:dd:
f9:78:34:6d:48:6a:f4:a4:3e:59:5b:7f:09:7d:c7:b0:63:ac:
ea:f6:9e:4a:90:b3:8a:47:13:35:b3:85:f5:8a:a1:c0:41:7d:
51:63:3e:f3:3c:f8:8b:7d:1d:90:83:9b:7d:b9:cf:5d:f6:81:
6a:c9:21:65:18:ee:30:23:29:ec:32:34:3d:e8:9f:bd:4c:4f:
72:e7:bd:dd:98:cf:5f:28:e3:48:47:f7:7f:5a:50:c7:c3:49:
73:97:3e:2f:73:38:63:a5:90:21:b2:7d:08:b9:1e:cf:2e:9b:
75:dd:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:01 2026 by rpki-client