Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: Mt31b5mldRDOKSNfMotjEvaD2sSKxj7L83J8t+r1IPA=
Subject key identifier: F2:8D:5B:F7:86:60:E7:06:C4:89:74:DA:13:1C:6A:75:88:64:10:C5
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019F10E554BF1E9E487F8D70772C03D628D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 130F
Signing time: Mon 29 Jun 2026 01:01:32 +0000
Manifest this update: Mon 29 Jun 2026 01:01:32 +0000
Manifest next update: Tue 30 Jun 2026 01:01:32 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: Yhh+KAF8q9XIdTZL3f4WiWSSB0yZIchmkFjazNQXxo8=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:54:bf:1e:9e:48:7f:8d:70:77:2c:03:d6:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jun 29 01:01:32 2026 GMT
Not After : Jun 30 01:01:32 2026 GMT
Subject: CN=f28d5bf78660e706c48974da131c6a75886410c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:82:e4:67:1a:33:b2:58:a5:8b:8e:9b:b9:
58:63:5b:18:37:e3:93:d4:bf:e2:c6:81:a1:a2:7c:
35:82:f8:38:a0:dc:03:81:1a:ed:ad:bf:48:95:b8:
47:19:32:a8:6f:9e:a6:5e:02:c6:14:df:37:dc:ee:
89:83:06:7a:49:21:5f:ed:25:99:f5:8b:0f:02:c2:
49:70:5d:32:e2:4a:c2:8e:75:93:87:eb:b8:4a:13:
a8:cb:e3:6f:87:6c:4c:b8:97:46:19:90:47:d6:4a:
5f:bb:28:4f:0d:4c:b5:b8:2a:d4:6f:fb:8a:fb:1a:
2f:dc:32:dc:ae:d4:4c:06:4c:e8:4b:21:92:5e:45:
4f:7c:17:60:a6:d3:cd:8d:82:ee:92:97:31:7b:a2:
2f:38:a8:6e:d0:8c:74:e2:ca:f0:cb:10:f8:52:4e:
43:7a:53:f3:d9:5d:35:81:b8:f6:d1:f3:f8:c9:76:
35:37:43:7d:d9:a1:72:d1:b6:8e:6f:75:77:dc:9b:
a8:ce:e3:4f:59:f9:e0:0a:e8:82:9d:8a:de:37:e0:
0d:9c:7b:d8:3e:56:18:86:e8:cb:c0:59:b3:09:0f:
30:77:08:a1:7f:86:1c:0e:7b:b7:77:09:15:dc:d0:
53:2b:54:20:e2:b6:20:b5:81:bd:66:d8:e1:4d:d4:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:5B:F7:86:60:E7:06:C4:89:74:DA:13:1C:6A:75:88:64:10:C5
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:45:1e:b2:fb:f2:f0:40:e9:c4:71:c3:a1:49:8e:ea:0b:
44:e4:eb:a2:61:4f:7c:40:6d:a6:8d:f8:fc:c8:f3:ed:6d:7d:
5d:64:14:91:9f:8e:6b:1c:3a:b5:b2:b4:19:3c:39:ab:ce:70:
28:d5:7e:f1:e2:7e:a5:2a:bb:07:1c:e8:23:68:59:ac:27:93:
2d:6e:7d:35:1c:d8:f7:95:85:4e:e4:21:65:a8:33:30:f8:18:
2e:c2:f1:1b:8b:e3:86:69:7d:75:33:9b:f5:8b:f0:22:99:12:
f4:88:27:1a:04:ad:61:eb:0f:08:cf:78:4b:99:2e:d8:a0:d1:
9c:1f:82:3e:b4:34:29:56:51:70:dc:e2:a3:a6:8a:a1:9d:09:
3a:a8:99:51:ef:75:eb:7f:79:60:f6:68:b3:8f:f7:7b:dc:f6:
fc:45:14:2d:92:8e:6a:41:49:0b:a6:5a:5d:c1:4b:d1:93:e0:
05:cf:60:71:89:f6:0a:36:d3:0d:f2:d1:e4:dc:f1:be:cb:52:
9f:8c:ed:a2:d2:36:59:59:06:a6:2c:ae:e5:20:4c:56:ce:4d:
67:d4:83:fe:bc:f5:8c:e9:b5:61:cb:c5:ba:8f:95:89:4f:5a:
9c:84:d3:79:04:75:1d:af:3f:21:5b:db:dd:46:7e:f8:17:70:
fd:3c:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:10 2026 by rpki-client