Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: 0wMcnPqJES3g7V5mCwMLlAudDp2tRy5a0pfbeg/3eKk=
Subject key identifier: 92:02:E3:0A:27:72:61:E9:E2:BF:5F:5B:9C:45:4D:CD:8D:2C:6F:80
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 019FAA1A2EBC3EA3184F9FA62BD5636E6E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0A4A
Signing time: Tue 28 Jul 2026 19:01:10 +0000
Manifest this update: Tue 28 Jul 2026 19:01:10 +0000
Manifest next update: Wed 29 Jul 2026 19:01:10 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: EX4m7fd7i1W3+t/CeBOdhuM6ozRj2tt5qM121yB1+mk=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2e:bc:3e:a3:18:4f:9f:a6:2b:d5:63:6e:6e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Jul 28 19:01:10 2026 GMT
Not After : Jul 29 19:01:10 2026 GMT
Subject: CN=9202e30a277261e9e2bf5f5b9c454dcd8d2c6f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:94:58:a5:8a:8c:cd:42:38:cc:95:72:03:
1a:ef:4f:ae:c0:60:7e:dc:ce:14:16:fa:60:d8:2a:
fd:ba:02:e6:30:ea:36:28:41:0f:1b:d4:6e:a2:aa:
8f:d4:d6:07:cc:77:2d:36:1e:d4:7a:54:d3:15:8d:
70:e1:2b:5e:75:96:7f:1c:db:f9:91:fe:03:4d:d3:
69:1f:69:63:2d:f1:71:df:6b:fa:84:6f:92:8c:16:
2b:ea:2a:35:a2:b8:28:9f:70:2b:db:23:ac:98:56:
01:45:3e:71:45:88:98:d6:a0:bf:d3:5e:4b:75:93:
6e:65:47:34:22:6e:b1:ff:f7:42:4a:f5:a1:b1:28:
ce:a1:b5:3b:83:2e:66:aa:64:5c:40:43:5e:56:06:
27:55:3a:91:04:5b:14:39:75:7c:40:72:8f:cf:d0:
f3:30:ec:01:64:ee:cf:8f:11:d1:40:34:4e:ca:c8:
a8:63:55:cf:19:d5:b8:fb:13:72:f2:d6:13:7f:d0:
84:c5:c2:cb:52:dd:f2:31:14:0e:54:2f:e4:92:a5:
28:94:51:98:98:71:6d:f0:a3:5f:f6:c5:61:3f:84:
1a:7e:8d:84:70:94:9b:3b:4b:b7:f9:23:5d:ea:6f:
59:32:26:93:08:67:9e:35:b7:a2:26:c4:84:5b:25:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:E3:0A:27:72:61:E9:E2:BF:5F:5B:9C:45:4D:CD:8D:2C:6F:80
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:50:c1:64:e4:7d:23:3c:54:55:50:44:29:94:77:3e:18:12:
9a:ce:22:8e:1b:ca:66:ec:fa:bf:a1:30:fe:db:ad:fa:26:94:
d1:e6:ab:d6:4e:6e:6a:96:8b:c0:4b:41:90:3d:1f:3c:8b:93:
ac:c4:23:a4:f5:d5:29:49:cb:bd:e0:8f:15:49:6b:05:dc:5b:
de:1f:70:9c:77:7f:a6:c1:48:ff:88:b8:d4:fa:e2:ea:58:04:
99:8a:f2:68:1f:ed:38:0a:6d:24:2e:98:f5:5a:b5:e6:89:47:
8d:ff:fb:a0:94:50:30:89:b5:f6:6f:60:a5:de:c8:c8:ad:1a:
fa:87:da:a0:f7:e2:ae:db:56:ac:a3:5f:3b:4e:c5:06:7c:74:
af:a7:39:3f:2d:86:37:18:4d:85:0b:a6:f8:04:fb:75:a7:e4:
9f:fe:2c:55:4c:3a:db:3a:fd:ea:6b:34:83:7c:bf:f5:8c:be:
a4:9a:01:68:f6:b1:c1:27:b9:28:60:45:d2:82:92:bd:b8:2a:
d3:8e:51:1c:e5:31:28:43:61:6d:f0:a8:25:e6:fa:71:39:84:
c9:71:55:4d:d5:08:8c:35:29:1f:bf:02:fc:ed:d0:b9:9e:56:
ee:71:0d:c8:48:1a:cb:91:c3:1b:b4:ce:c8:76:af:f9:fc:c0:
3e:5b:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:49 2026 by rpki-client