Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: pV21RHCnG4/Cr/RKm4CHALIvb7xlYXJ5vLpComwzRVM=
Subject key identifier: 56:85:D0:34:88:2A:1D:1D:F9:28:64:49:93:C7:1C:4E:53:E5:3A:30
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 019FA0DFCE4D74A22A8D5496226884FA0A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 00:00:49 +0000
Manifest this update: Mon 27 Jul 2026 00:00:49 +0000
Manifest next update: Tue 28 Jul 2026 00:00:49 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: FdQj/8KbLUBxR50h54oHPdo4wBN/pFxe2BGvDPYCHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ce:4d:74:a2:2a:8d:54:96:22:68:84:fa:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Jul 27 00:00:49 2026 GMT
Not After : Jul 28 00:00:49 2026 GMT
Subject: CN=5685d034882a1d1df928644993c71c4e53e53a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:a4:99:6c:1f:02:fe:76:a2:21:2d:4a:a7:
c0:a8:31:65:da:c3:dd:75:b1:58:e3:6f:10:9a:67:
dd:18:35:5c:8d:d2:a8:ee:b3:d8:d3:18:4f:cb:c5:
e2:ac:d1:80:2b:6b:20:d2:8f:84:6d:ca:ae:68:a3:
a2:06:48:17:31:40:33:be:55:d4:aa:6f:cc:3b:d1:
69:6d:36:53:97:7b:15:82:a7:db:d1:25:bb:1f:92:
c2:58:06:7e:fc:25:75:74:df:8e:54:22:bf:d6:ee:
f5:46:a7:33:2e:8f:5b:9e:87:59:5a:e1:64:ad:87:
2f:40:07:5a:38:c4:c1:6f:2c:ef:c8:88:40:55:83:
ce:86:48:91:77:8b:7c:d5:0c:a0:f4:4b:59:ef:d0:
95:79:89:62:86:be:16:02:83:0f:4d:ea:cd:05:43:
a0:94:d3:bd:ac:f5:ff:a2:a6:3d:13:59:1e:4d:4c:
07:a6:a5:ba:03:28:4b:5a:50:c4:f9:bf:91:ed:25:
86:cd:a9:3f:af:84:2c:2e:ba:0c:00:07:37:8a:a9:
cf:2f:97:24:ef:cb:d4:c2:07:40:56:af:41:69:60:
78:34:3a:b8:75:21:4d:8c:13:73:83:77:01:ad:6b:
d6:5c:e6:ac:72:a6:55:51:4e:01:a3:d4:7a:22:c8:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:D0:34:88:2A:1D:1D:F9:28:64:49:93:C7:1C:4E:53:E5:3A:30
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:10:37:58:a8:29:40:db:79:a4:ec:f4:85:ce:d0:58:84:
51:7f:88:31:79:5f:18:e1:ec:7a:a6:74:c0:9c:29:e1:d1:7e:
31:dd:9d:00:69:d7:24:c6:ea:f8:d3:bc:6e:f0:c8:e9:c8:af:
86:0f:95:75:3d:06:72:c4:69:ad:67:06:30:0b:45:68:5c:97:
62:d2:88:a6:0c:71:24:3b:59:4d:1b:d7:bf:12:81:26:66:a7:
97:65:3c:38:97:ce:0b:6b:80:01:2b:b5:4d:55:12:b6:4a:d6:
6e:f2:c4:a2:7e:a9:b7:63:7e:d6:c1:b3:21:58:2b:8e:8d:1c:
e8:cc:54:ef:ce:f3:7c:31:ee:87:06:55:b8:34:07:f9:34:13:
2b:20:40:57:7f:9d:29:e2:e3:45:1d:d2:a9:e8:01:e2:5d:6c:
c8:0d:ed:df:1d:61:23:d7:68:05:5d:b3:fd:c7:8a:3b:aa:6d:
ff:15:1a:5a:b0:e5:40:d6:3f:8d:3a:63:75:08:8d:25:e8:ba:
c5:63:2b:7a:52:ed:b1:d3:fe:01:ec:49:f4:47:ee:ca:f1:68:
78:c9:b0:41:9e:b8:6d:55:0b:86:49:b0:f6:4f:d6:2a:bf:d6:
70:6c:8c:36:91:61:04:97:d8:72:38:bf:18:63:e2:8c:aa:e7:
7b:e8:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:02 2026 by rpki-client