Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: 8MZnnyRUrFSaHCudgqdieRtNcQJv+vwGluJr2pP4SpQ=
Subject key identifier: 6B:52:1C:B9:5A:4D:3D:74:51:5B:CB:DD:14:35:B2:81:AF:8C:92:E7
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019FA93E5E89C493ABAF9DEE1CACC7B71CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 15:01:04 +0000
Manifest this update: Tue 28 Jul 2026 15:01:04 +0000
Manifest next update: Wed 29 Jul 2026 15:01:04 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: kJtslm2mkx2EvL+mnGYDLg+tsmEwIb43U31U4mpABSI=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:5e:89:c4:93:ab:af:9d:ee:1c:ac:c7:b7:1c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jul 28 15:01:04 2026 GMT
Not After : Jul 29 15:01:04 2026 GMT
Subject: CN=6b521cb95a4d3d74515bcbdd1435b281af8c92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:17:c4:4a:ab:b3:da:a4:0b:89:a0:26:ea:
2b:a9:dc:aa:7b:a2:a3:a5:ed:50:99:31:8b:b7:b8:
c4:1f:c8:da:8d:64:76:63:a6:4f:f7:5f:74:0b:03:
8c:59:25:04:01:a4:d1:75:09:48:4f:b0:68:f8:ca:
4b:dc:6f:cd:5b:c4:72:95:7c:3e:90:ed:3b:27:73:
df:dd:69:a8:c6:d6:2a:a9:e8:92:19:70:75:ea:87:
d0:7a:0f:e7:7f:9c:ee:b2:61:cc:b7:30:cf:22:a3:
e5:fd:08:07:9a:f1:6a:18:8e:15:ef:71:07:73:b0:
e9:9b:64:6f:d7:df:83:1d:83:58:5b:d8:16:95:16:
aa:54:21:4f:6c:d0:bb:9a:22:3b:dc:7b:0c:87:fe:
40:ed:46:19:2e:c6:0f:5c:ad:f8:1d:f5:b1:02:8c:
ea:8b:60:7d:51:ae:85:ce:34:1a:f9:a7:78:67:9d:
ba:c8:71:c4:ad:90:74:b0:80:4e:02:5a:c5:ac:9c:
a0:db:22:b7:4e:cd:ee:e3:56:a7:4d:0e:1c:3a:84:
70:fe:b5:8c:44:0c:49:32:a1:31:8a:cb:9a:07:ec:
2f:1c:39:0d:a2:7c:a5:63:01:e6:f9:cc:9f:33:fd:
11:e2:20:ab:df:ba:6e:a3:26:dd:65:e1:f8:6f:3f:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:1C:B9:5A:4D:3D:74:51:5B:CB:DD:14:35:B2:81:AF:8C:92:E7
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4d:56:d3:93:09:7f:69:d2:46:cf:cb:56:76:00:5f:a0:49:
1c:40:1c:7d:8e:f2:04:59:a2:6d:f7:eb:37:e6:c2:a8:c5:df:
e4:07:7e:6c:e5:6d:c3:e7:ac:3a:80:5f:50:ba:5e:77:6a:5b:
20:c9:cc:c4:05:e4:17:b6:39:fc:e4:0b:a9:34:9f:6b:8e:af:
db:36:01:dd:fd:41:1d:5f:97:fc:16:3c:00:12:62:84:42:fe:
f1:64:8f:f7:a2:18:1c:52:de:a1:76:e4:00:5c:74:ed:46:bc:
90:46:f0:10:95:8b:a5:e3:68:dc:59:d9:a1:e3:b0:8a:04:f2:
bd:f0:fd:ea:bd:a3:b1:69:e9:b2:27:82:22:aa:23:c6:a0:9e:
f4:0a:5f:75:e1:5a:3e:50:df:a2:a6:98:88:f1:e0:20:19:96:
33:4f:86:2b:53:f6:3e:15:0a:5b:07:d0:05:6c:00:9f:99:0e:
bd:85:95:3a:82:c6:ba:97:80:e2:88:f8:03:99:c5:1a:59:56:
ae:13:57:b1:d9:1f:c6:70:6b:16:8a:5b:8e:ee:8a:ae:f3:ad:
fa:35:d6:f2:c1:a2:17:3c:54:44:12:51:76:e3:a9:82:06:1e:
f5:59:81:2a:0b:17:33:2a:d5:cb:d4:c1:fd:1e:54:96:e0:b6:
76:94:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:52 2026 by rpki-client