Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: aQJECJ35t2lAcxMHn9qn/aotab9UQ7bMUrhuc+kHQX8=
Subject key identifier: 30:B3:85:43:78:40:2C:F2:45:40:00:A5:81:FE:A6:08:0D:13:81:71
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019FA7BD3CBECB4D75EEB2A7C75ACA022733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 08:00:24 +0000
Manifest this update: Tue 28 Jul 2026 08:00:24 +0000
Manifest next update: Wed 29 Jul 2026 08:00:24 +0000
Files and hashes: 1: 1X2sgvq2OfT6Jdo40rIKwx5gDV4.asa (hash: VL+5JuAwjiAZeewO3OjhChR2ymlOyYa+cwBCn8pjvhQ=)
2: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
3: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
4: Bk2PVhSldiADwMhbVtnkp9pryqY.asa (hash: hx24E0I0fhbwVZplZBmeDNsFPlc70EP9j2DAqKTvSZA=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: SPc2XQ5A5yAUDVSCSNKYcM+XgHL/Wa0Fps3MYPkYGyw=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3c:be:cb:4d:75:ee:b2:a7:c7:5a:ca:02:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jul 28 08:00:24 2026 GMT
Not After : Jul 29 08:00:24 2026 GMT
Subject: CN=30b3854378402cf2454000a581fea6080d138171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:f2:37:df:61:a9:6e:91:9f:64:8d:2b:9b:
14:55:e8:ac:52:8a:41:7f:b7:6f:f1:2a:dd:50:18:
6f:6e:9e:6f:14:b4:07:2a:fc:77:d7:a3:7c:71:1b:
d2:84:0e:ef:bb:70:3b:9d:82:a3:b2:e6:ca:a1:96:
37:80:f8:85:db:df:02:09:e0:5e:96:85:97:0e:a2:
f4:d6:a7:8b:d2:12:81:5f:6b:fb:3c:39:e8:52:90:
42:3f:c6:df:4f:3b:b6:54:54:1a:e2:a4:53:bd:ee:
fc:ab:c5:9d:30:5c:c3:5d:d2:dc:47:dc:53:4a:aa:
3d:3e:f4:8f:63:aa:2c:40:50:b4:b3:d9:a6:74:2a:
6f:c4:2f:a2:8b:43:7f:29:a4:15:6f:48:16:b1:fe:
65:73:03:87:7b:fc:fa:23:e3:b3:94:7e:7f:da:a0:
9a:84:bf:4c:2f:74:3f:fa:83:5e:25:e2:04:07:11:
ea:df:80:d9:b3:a0:c7:83:90:87:f7:0e:0f:af:23:
9d:e0:6f:d7:50:de:0c:73:e0:5a:3a:c3:74:3d:5f:
e7:22:e9:2f:f8:cf:9d:b4:33:8e:27:f7:8f:a6:66:
98:ee:5e:92:09:1d:d8:66:d3:e3:06:b7:3b:e4:00:
ac:92:d9:0e:d6:f0:1f:0c:b1:c9:38:10:31:99:f2:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:85:43:78:40:2C:F2:45:40:00:A5:81:FE:A6:08:0D:13:81:71
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:07:22:72:fc:9c:4b:9d:4e:29:ef:37:d9:12:ad:9d:01:
16:72:2d:b4:62:5d:ac:f1:0e:4c:17:4f:87:d6:60:55:ba:30:
ee:a8:f2:db:5e:5f:52:c8:14:83:70:4d:de:9b:43:8a:b6:96:
7e:30:0f:63:60:80:19:22:17:f4:c0:ae:61:65:99:67:60:af:
26:fc:8a:1c:26:c8:d7:50:c9:ed:c2:d2:60:fb:0e:87:9d:99:
b0:f6:da:98:a0:ac:9f:af:49:e6:ed:e1:c7:14:13:c0:2e:57:
fa:0f:ec:33:64:35:e8:66:09:c2:97:6e:e0:dc:95:14:c7:9a:
38:c9:b8:65:08:f0:b2:71:d3:cf:5c:5b:aa:f7:e1:77:3d:b3:
88:e9:9a:19:15:c9:73:54:47:62:4c:1f:29:bc:be:da:5b:e9:
8a:91:97:5b:60:40:1b:91:35:39:ef:92:51:57:d5:b3:f6:09:
9e:8b:85:a5:71:35:79:98:32:c4:6d:7a:69:dc:60:80:2d:1a:
4c:fd:fa:83:db:13:b1:da:58:07:ed:25:68:5d:0a:6f:0d:75:
75:1d:1c:72:c5:e7:27:f0:19:93:dd:b9:3e:18:ce:8c:a8:4b:
f9:7d:f4:59:99:73:cb:18:f8:4f:84:08:2e:1b:e3:9d:32:b5:
b1:4c:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:16 2026 by rpki-client