Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: uNjL25FFlLZbwFzRqonlcJXBUm8p7O62Z9u4CCjaxo0=
Subject key identifier: 67:12:8B:F8:3F:86:FB:13:1D:FC:31:BC:CB:BD:C0:43:25:43:74:6E
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019FA1BB63543F5935C0E66DC65C894B4B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1180
Signing time: Mon 27 Jul 2026 04:00:40 +0000
Manifest this update: Mon 27 Jul 2026 04:00:40 +0000
Manifest next update: Tue 28 Jul 2026 04:00:40 +0000
Files and hashes: 1: AjUhsGuF-Rlqr4VuaKjj_0Jn664.roa (hash: A/JS6N3T/7G+G4DTcUxEhefEWdvX48KBcDaWEdhM93M=)
2: CS5mzjQX2oFjYs8-jDE6t4gGWuw.roa (hash: Rd8Fr6qb+aZJUXDP42r4D9kDK4QBHT0oGrJ2gIOAlbE=)
3: GvyV0rvQYw9gBEUFhbaOO4Vkw2U.roa (hash: gpJEOx8pXqUeYDGJC/C4d9B5+I62KI1zol2bxiKmA9w=)
4: U3uskgBenRf6gNmvfw00tQrNEBw.roa (hash: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=)
5: UXNF5kVaOq-W-e9EdVk2K4QWKD0.roa (hash: M2GGr29hNVwpGL58D6ogKvCYQWNsSUAPYCU+j7Wh2lM=)
6: brQPI8cM-IUcd97SDhSzte3lIHM.roa (hash: n4WStjSdd1x22o5z5p5whSjxW5y7c2aqO1/Z35OBXH4=)
7: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: TokmZw4DdBkOj2PL2MbQPqh6W9Oog8hMzpQoEApPoEU=)
8: gknM0VHXQ3mogQHBPRSu7xoEJHY.roa (hash: JIrP6/pzO0ffljPwBBEio4saGYwu+69HEZpQt7jZOkU=)
9: rmOk9DtZ3P5jXCuwLsnwIl-OXgI.roa (hash: OB9iHm9g4IT8ZLUGt1Ok064fZz8prLyBuLDLYqYKejk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:63:54:3f:59:35:c0:e6:6d:c6:5c:89:4b:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 27 04:00:40 2026 GMT
Not After : Jul 28 04:00:40 2026 GMT
Subject: CN=67128bf83f86fb131dfc31bccbbdc0432543746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:e8:61:05:f4:1e:ad:ab:b7:c2:2f:7e:c5:
d2:4c:2c:03:99:a9:5e:94:a4:83:fd:0a:02:51:0a:
28:c2:8e:35:f8:9f:5e:25:f8:d0:45:fa:f7:2b:3a:
ee:2e:3b:59:51:fa:29:77:ad:ba:8a:8d:67:67:8e:
ed:4f:a5:c6:15:37:5a:3e:42:dd:e4:e0:69:bc:4e:
9b:c3:c5:b0:9a:4f:76:a3:a5:05:f6:41:77:f4:04:
c5:e1:aa:3f:33:dd:fb:37:7e:78:68:e7:10:82:96:
df:0d:88:c5:01:c4:44:5b:08:8c:fa:b4:2e:f0:b8:
51:01:ce:1a:ce:cb:5d:75:d9:e3:aa:e4:81:27:40:
cb:52:5f:e9:f9:d2:da:34:1b:27:dc:4a:42:05:6e:
c2:5a:47:a9:8e:ca:c1:df:e6:3a:08:6d:b5:57:f2:
21:85:3a:51:8f:4a:47:bb:2e:d9:cb:e9:2b:7f:1a:
3b:c5:55:1f:87:8d:3b:63:25:92:78:88:b6:40:f1:
ac:e3:3e:e7:af:71:7c:3b:c4:21:51:0b:e8:1e:2f:
48:a8:50:69:de:68:55:92:5a:c9:6a:11:8a:1f:15:
03:9c:55:90:bd:3d:47:4f:ab:35:50:a8:5e:a2:e7:
de:53:e7:4b:23:83:4b:51:94:5b:12:4f:ce:94:4a:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:8B:F8:3F:86:FB:13:1D:FC:31:BC:CB:BD:C0:43:25:43:74:6E
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b4:78:8f:c3:af:f6:d4:99:65:82:e0:0b:fb:91:f9:86:05:
81:7e:fe:f2:d2:c5:88:d6:1d:b5:42:1f:24:0c:e3:05:c2:ec:
bc:41:7b:28:92:57:13:31:d2:48:be:7f:fc:b0:04:8c:03:1f:
0e:15:fd:4b:d1:e4:60:93:1d:8f:9b:1e:4d:e4:7b:db:6e:a9:
4d:bb:2c:ca:9f:d9:c4:25:f7:16:81:f1:b0:d4:a2:57:e5:bf:
f0:de:bb:ad:e1:62:99:a9:ff:95:d1:b2:35:f3:7f:a6:e8:bc:
85:71:d6:4c:f5:2d:c8:a0:c9:53:4d:f4:6c:ac:fa:51:a3:17:
5c:ad:07:f0:36:c8:f1:d5:82:91:57:6b:36:4e:1f:1d:92:11:
1c:4d:c0:0e:22:ea:c7:fb:10:d5:d3:02:d7:89:02:1a:40:db:
6e:ae:28:5e:03:67:aa:6b:99:5d:8a:64:89:3b:00:75:8b:28:
f0:16:10:1e:81:f1:d2:ea:a9:f2:5d:4f:0d:52:44:51:4f:c8:
4a:51:7f:01:34:36:24:3a:97:b6:1b:65:21:c5:a7:71:88:3e:
ee:f7:04:81:b4:0d:a4:f7:b0:d6:c5:c1:e2:a2:cf:5b:b2:92:
82:5f:eb:07:2d:3d:30:b7:b7:c4:a3:06:18:f5:00:ca:a8:b2:
cd:46:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:07:37 2026 by rpki-client