Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: zJa8LkKjQccyDb4A2BYS2QTxGvbZnlIJ7FthnopVpZM=
Subject key identifier: 73:30:AC:A2:52:EB:49:1F:CD:41:9E:C8:4B:BF:08:78:96:C4:A6:35
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019FAA50E82839B882986CAD6C9E3EDF9F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 20:00:56 +0000
Manifest this update: Tue 28 Jul 2026 20:00:56 +0000
Manifest next update: Wed 29 Jul 2026 20:00:56 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: EIXiwHUNz7bbI0HVYoQUxKWVNYqls8lFqVAAsckink4=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:e8:28:39:b8:82:98:6c:ad:6c:9e:3e:df:9f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jul 28 20:00:56 2026 GMT
Not After : Jul 29 20:00:56 2026 GMT
Subject: CN=7330aca252eb491fcd419ec84bbf087896c4a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:9a:27:ea:85:26:09:22:92:9e:80:1b:3e:
b0:1e:63:c7:f0:15:8c:ba:0c:b5:d9:19:24:ba:e6:
4e:66:c3:97:b2:8c:d5:d6:5a:e7:a3:e8:eb:79:28:
b2:3d:d0:1b:8f:6a:87:85:d6:18:ba:27:22:9c:cc:
50:43:0b:1a:ab:81:03:33:78:02:88:8d:40:9a:3f:
be:52:10:e3:19:be:0c:c3:44:34:ce:29:38:35:d4:
fe:a9:03:d2:70:8b:75:ac:b7:ff:68:ea:a9:21:18:
cc:61:8c:68:d9:68:2e:b5:fb:19:a4:41:0b:6a:3a:
13:1d:43:02:c1:8a:5c:0f:55:5c:e3:da:83:f3:a5:
03:d8:89:c8:5b:21:62:a9:94:45:2e:16:5e:69:d8:
89:7f:67:88:f9:af:e8:ec:eb:a2:64:98:28:73:3c:
81:04:b3:44:5d:84:e0:f2:eb:32:0c:f4:ed:96:e8:
07:10:ee:52:5a:99:53:5b:6e:21:df:c1:d9:f7:fb:
26:b9:4b:16:25:72:1f:9b:0d:f9:44:77:27:79:6d:
f7:aa:4f:60:83:63:d1:08:e6:08:3e:f0:63:4c:1f:
a8:63:45:c2:19:df:d6:41:df:65:11:05:d0:c9:97:
c1:d3:37:a2:55:f1:3b:8f:99:2f:23:ff:c4:a4:ac:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:AC:A2:52:EB:49:1F:CD:41:9E:C8:4B:BF:08:78:96:C4:A6:35
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ca:9b:54:74:fd:13:ba:5a:2a:27:73:de:84:27:94:29:95:
10:a4:10:0e:0e:f7:2a:9a:0c:29:27:e5:fd:72:d5:19:b5:41:
70:17:0d:af:b3:f9:58:5f:a5:b5:1a:52:7d:ba:3b:9d:96:7c:
c9:9d:71:e0:d2:80:e4:41:87:a2:31:c6:b5:bc:71:5f:4e:ae:
98:85:e3:cd:4e:5b:f5:e2:f0:04:da:26:eb:e6:d3:67:c9:af:
33:b4:c7:fd:2a:ea:73:1f:83:cf:8c:93:60:58:4b:fb:92:1e:
41:7d:e4:db:5f:88:a8:52:db:77:b5:c3:14:f6:b8:c9:93:aa:
a3:07:39:7f:97:44:e8:b7:5b:b0:da:77:39:82:c5:e5:e0:37:
f8:89:35:af:84:1a:4b:6c:7e:e1:7c:92:70:f2:52:e9:60:b4:
7c:14:9f:07:dd:95:49:7a:88:e8:34:27:5e:e2:7c:9c:82:8c:
75:04:ce:a4:2f:db:a4:36:63:39:17:74:94:1e:e3:90:7b:0b:
e8:a7:87:ad:02:2b:92:7f:6e:50:39:f6:4c:0e:cf:a9:cb:35:
1a:d4:c0:a1:d8:f4:89:b8:2d:e8:7e:be:0a:14:ea:79:82:d6:
ed:7f:48:fa:67:4b:ae:9c:45:df:53:40:26:97:1f:2d:c3:be:
4b:6e:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:04:17 2026 by rpki-client