Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: p654gHGjc9+0lPycRGtahboGca64sz97iB+BLWzv6M0=
Subject key identifier: D8:C6:06:8A:7A:86:AE:9C:15:0E:80:5A:EE:FF:5D:A7:ED:9B:FD:7E
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019FAA1A7A78FC72B379DB74CB59FA675A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 19:01:29 +0000
Manifest this update: Tue 28 Jul 2026 19:01:29 +0000
Manifest next update: Wed 29 Jul 2026 19:01:29 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: D16AcYheKByYxKpYXcEy04lKNeseDRGlbSg1Wl5qZMA=)
2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7a:78:fc:72:b3:79:db:74:cb:59:fa:67:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Jul 28 19:01:29 2026 GMT
Not After : Jul 29 19:01:29 2026 GMT
Subject: CN=d8c6068a7a86ae9c150e805aeeff5da7ed9bfd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:c2:70:86:71:9c:2a:28:a1:23:1d:cf:c0:
41:59:91:c4:3b:ba:26:43:90:f7:8b:93:3a:b1:b2:
c5:16:a4:93:7d:4c:38:34:7b:50:67:e2:83:0c:46:
3a:93:b5:46:5b:af:09:86:63:c5:2c:3a:dc:c9:b1:
75:28:11:02:b6:a0:fa:13:c1:4a:fc:2b:91:02:43:
7d:90:10:26:89:9e:19:a1:98:dc:ba:82:46:91:f3:
89:f1:ad:d9:fa:54:19:6f:02:0c:f0:7b:b9:f0:6f:
58:ee:ae:bd:9c:62:60:e6:cc:55:9c:a8:3a:1a:d1:
20:85:3a:2d:88:a6:ef:8d:d6:77:d1:23:f1:60:f3:
39:cb:b6:aa:61:61:b3:88:6f:ea:70:ae:99:31:49:
ff:e1:78:36:79:4c:39:44:c7:31:06:1a:27:5a:89:
b2:4f:4a:d4:c9:d6:4e:c7:e8:9f:df:6b:81:6e:ca:
71:ae:8c:bb:7f:d7:bd:01:61:fa:35:15:96:49:f8:
eb:0b:2b:a3:8c:87:f0:c1:ee:19:fa:8a:bc:66:ad:
f8:7b:f0:22:7b:6a:d9:35:49:05:d4:ea:a7:f9:c1:
2c:3d:ee:f8:df:2c:2c:4b:20:ed:e8:16:fb:52:b8:
17:19:86:c2:c7:1a:bc:4f:9e:6f:49:b9:72:a7:bd:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:06:8A:7A:86:AE:9C:15:0E:80:5A:EE:FF:5D:A7:ED:9B:FD:7E
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ca:8e:5a:5e:58:ea:f6:f1:2c:c2:05:b5:48:94:ed:89:1c:
31:69:49:7a:3e:c9:9d:5e:68:6f:df:a3:84:6e:c2:01:ff:08:
ac:11:4b:9c:24:34:c4:78:69:4c:5a:8b:7b:05:a4:18:3c:65:
49:40:c5:eb:ce:6c:f4:c4:b4:fc:b5:86:8a:e2:70:1b:dc:7b:
e1:76:f7:64:7f:74:a3:2a:c2:9e:17:84:b0:c9:c6:19:b5:c0:
d4:3a:5c:9c:ac:b7:42:c0:84:41:98:d2:1d:d2:38:88:51:66:
5b:5e:d4:e5:df:97:9d:24:b9:fb:ad:ca:96:d4:04:14:fd:72:
c0:ec:e2:93:59:90:64:31:0e:6f:14:1b:27:8b:55:b7:46:5c:
f9:44:6b:69:a2:74:96:19:eb:bb:6b:78:80:87:b5:5d:62:e6:
5b:3f:0a:e9:a2:dc:25:9e:bd:b6:46:7d:9a:e0:f6:36:7b:da:
a6:61:a7:63:3d:4f:32:39:ce:d8:00:92:ec:d0:96:db:58:ac:
67:76:36:2d:7a:9c:58:21:de:b1:9d:67:51:6c:19:b0:49:9a:
95:0e:dc:c1:44:e8:d6:ac:9b:dd:91:b5:33:17:19:43:00:cb:
cc:ff:79:5f:aa:12:79:9b:ca:d6:87:02:75:e3:64:a3:9e:e4:
36:96:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:13 2026 by rpki-client