Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: vi+0a0vGyslYFigJWa2r6i6QYbEA65byzqomHIYUQik=
Subject key identifier: C7:76:E6:C9:29:5D:7C:C6:3B:2C:29:E4:7E:D6:F0:ED:D0:90:D9:3A
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019FA2291D9823036109B9C76DDC7651E95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 06:00:31 +0000
Manifest this update: Mon 27 Jul 2026 06:00:31 +0000
Manifest next update: Tue 28 Jul 2026 06:00:31 +0000
Files and hashes: 1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: ZQAFuliTFrAdVbA1hkZE5qhldDasa3xXWX3WIQ7pW7A=)
3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1d:98:23:03:61:09:b9:c7:6d:dc:76:51:e9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jul 27 06:00:31 2026 GMT
Not After : Jul 28 06:00:31 2026 GMT
Subject: CN=c776e6c9295d7cc63b2c29e47ed6f0edd090d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:f4:87:d4:17:1b:d4:5d:c3:8f:3a:bf:a5:
3d:77:ce:22:f1:51:56:c4:54:33:0b:f4:be:7c:d8:
b0:dc:dc:5b:e6:10:64:10:8b:ee:e1:0d:48:cf:f0:
80:95:94:97:d9:69:ff:73:5a:be:07:61:f4:db:f0:
26:e2:5c:d3:59:5b:55:8a:e4:82:2a:5d:38:bb:57:
83:50:2a:ae:0c:24:63:e1:51:45:4a:af:7a:c6:1f:
bc:52:44:87:e5:6a:58:73:3a:0f:07:db:3e:ed:3b:
7b:dd:4b:86:46:75:ff:81:33:20:4a:2c:1c:8a:3d:
63:c9:74:4c:6c:c7:1f:42:8e:f3:61:37:d8:81:1a:
68:18:d1:25:ba:66:50:01:c2:7b:12:50:aa:d7:4d:
9d:68:f3:ba:98:52:92:f1:88:d9:0f:4a:d2:9b:03:
b9:27:be:21:31:fa:ec:fb:60:84:c7:de:40:d5:11:
71:d7:c3:25:a1:43:f1:4d:31:bd:49:28:6b:86:2b:
2c:bf:ec:c2:dd:83:8a:ec:e0:5b:75:cf:e3:b6:f9:
94:16:0a:b3:7d:c1:a6:ae:2b:a1:86:39:ad:f8:eb:
34:39:e6:25:5b:fb:ec:8b:d6:3d:d7:4e:b3:48:78:
dc:d9:d5:c6:6f:8e:87:d6:4e:33:fc:fe:4e:06:63:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:E6:C9:29:5D:7C:C6:3B:2C:29:E4:7E:D6:F0:ED:D0:90:D9:3A
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5e:85:17:d1:4f:7c:14:49:d0:8e:d5:8b:5b:df:2c:a2:cf:
a5:17:4e:85:f2:e2:6d:68:c6:ff:6f:17:5c:fa:ae:4a:59:ae:
f3:57:d9:b1:09:91:c7:01:10:4a:c5:af:a8:c9:90:02:36:8c:
54:c0:61:10:23:6b:6f:b2:bc:9f:e7:32:e4:51:9f:17:eb:29:
ec:a4:7e:ee:ee:7a:8e:a0:fc:6e:48:f2:94:a3:96:2b:ea:b2:
2b:41:65:f2:92:40:ab:7f:ea:29:40:38:4c:ee:87:48:01:64:
7f:21:ee:73:01:3a:c0:c1:74:ab:33:f3:3e:e1:0a:96:16:28:
a7:76:62:1b:49:a5:e4:8a:22:7b:43:37:f8:c2:cc:f4:07:cd:
d4:a8:d0:77:18:c5:43:43:8f:c6:27:8b:de:44:54:7f:78:3a:
25:f1:66:3c:bd:bd:25:46:4c:34:b4:4a:07:e3:bd:5b:4e:92:
eb:0f:24:97:ab:59:11:36:5f:f3:dd:66:33:d1:69:17:48:26:
92:0f:c3:62:bd:66:a0:d9:81:e9:c8:5b:39:7b:d3:67:dc:92:
bf:7e:e7:95:bb:04:bc:1a:0e:85:38:7e:57:1e:f9:65:a7:4b:
36:9c:5c:28:c8:37:b2:89:5d:2a:da:3a:13:00:0d:bf:2a:39:
d7:16:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:23 2026 by rpki-client