
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: rLwcFH0xKAZqNWS6rsXeH7fwHnS1liP6k9HtdiTxfIQ=
Subject key identifier: CF:BD:7F:7A:C3:FA:F3:28:F4:27:CA:EB:92:A3:EB:22:7A:0C:B4:27
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019EC336F807E04E69C4E43BA8CB1D9FA9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 23:00:19 +0000
Manifest this update: Sat 13 Jun 2026 23:00:19 +0000
Manifest next update: Sun 14 Jun 2026 23:00:19 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: iNIkwrfJyzpf1KSVYEeTuLruyFih4RuLoMrR/VdW9VY=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:f8:07:e0:4e:69:c4:e4:3b:a8:cb:1d:9f:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jun 13 23:00:19 2026 GMT
Not After : Jun 14 23:00:19 2026 GMT
Subject: CN=cfbd7f7ac3faf328f427caeb92a3eb227a0cb427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:77:e6:a3:22:79:c8:53:ba:28:52:26:44:
3b:f3:8d:d8:ff:44:c1:d1:87:76:86:c5:a1:32:12:
2c:34:84:82:ec:c4:33:67:9b:04:fb:5d:0e:6b:91:
fd:7c:b2:86:25:22:5e:75:cc:68:25:43:ce:26:d7:
0b:1f:94:fd:28:b3:3b:bf:50:3a:5b:5e:59:39:5a:
9a:3c:d3:a5:30:ab:f7:69:ea:a4:c7:06:4e:ea:82:
3e:35:50:b5:ac:9a:5d:f9:18:06:7c:df:e4:12:ac:
ef:0e:8d:18:54:47:20:e0:9c:08:d3:0c:86:bb:65:
93:5c:e7:3c:35:51:b4:8b:47:f2:78:cc:16:31:40:
86:db:e2:a1:5a:51:ad:cc:ad:58:84:b9:1b:a7:11:
2f:96:2c:fc:f9:e5:1c:d7:f2:a2:8f:f9:2b:fe:11:
dc:ff:41:34:5f:85:8d:01:7a:2e:38:7d:d7:0f:12:
ff:be:66:68:1f:92:88:9e:ff:30:11:cb:b6:d3:04:
10:8c:39:d4:7f:b0:3c:0d:c0:7f:a2:e2:5a:ae:14:
0c:47:2d:7a:4c:2c:1c:21:63:b3:a9:ea:65:8b:13:
05:c7:72:5c:49:d3:de:3b:db:16:1a:b1:10:11:43:
29:0f:4e:54:ba:3f:37:98:c5:02:31:12:87:4a:58:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:7F:7A:C3:FA:F3:28:F4:27:CA:EB:92:A3:EB:22:7A:0C:B4:27
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:1b:0b:7c:90:38:f5:e9:d9:66:2b:6a:ba:98:e1:c5:c2:f0:
8a:9a:b0:28:ac:5d:a5:3e:98:15:b3:8b:b0:05:52:d2:d0:02:
fe:7a:da:80:fe:9d:f2:2d:0c:56:8c:23:9c:af:29:8c:d7:6a:
5c:6d:29:ca:46:e8:13:98:1b:ef:87:13:f6:f1:12:62:05:f9:
17:16:03:32:40:d0:ac:fc:50:fc:f0:16:72:17:e5:77:6c:5c:
93:c2:8a:24:25:77:fe:54:26:75:0a:dd:8c:e5:28:85:84:95:
10:af:cd:92:c6:4d:4f:b7:da:48:b3:25:58:b7:45:7b:a6:bd:
76:ba:54:f1:6c:51:56:bb:dc:0a:21:aa:0b:39:2d:fd:84:70:
58:e0:5f:73:7d:d5:20:8c:22:7a:06:e2:1d:17:62:9a:74:ad:
1f:d2:84:10:e0:b0:e5:ef:84:f3:53:85:13:5a:ee:9a:51:a1:
e1:2b:2b:fd:f6:3b:d9:be:56:ff:9d:b4:78:23:a1:a9:80:f8:
2b:ac:6d:77:e8:2e:aa:bc:e9:58:20:80:84:b4:5a:7a:29:69:
bf:a4:7b:20:42:5d:96:fe:0a:a5:97:56:f5:f4:b0:85:e5:51:
c7:e2:bf:e6:7f:22:c1:df:64:3a:bb:5c:20:47:9a:d8:a7:a9:
88:94:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:49 2026 by rpki-client