Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: OMSDJkZgkAC+tGI7lrv/RGQ6VhWXvW+G3fob/6Rvuig=
Subject key identifier: CB:6B:AE:0E:A0:12:59:BB:14:D8:78:7E:DF:47:DA:B3:E2:3E:F0:8E
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019FF7FED9D70983BDF32A4DDF954AAC830E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 19FD
Signing time: Wed 12 Aug 2026 22:01:41 +0000
Manifest this update: Wed 12 Aug 2026 22:01:41 +0000
Manifest next update: Thu 13 Aug 2026 22:01:41 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: DEMMmy1G8U1kWdpNr7Vz+h0NKa7Oq+OZ3zz4RWAo2QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:d9:d7:09:83:bd:f3:2a:4d:df:95:4a:ac:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Aug 12 22:01:41 2026 GMT
Not After : Aug 13 22:01:41 2026 GMT
Subject: CN=cb6bae0ea01259bb14d8787edf47dab3e23ef08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:21:bc:48:4d:b3:51:9a:0e:0a:35:2f:b7:
cf:7c:9a:7c:57:6c:16:e8:52:9b:41:a0:04:82:dd:
0e:08:e6:72:9a:a2:a7:10:a2:02:56:d4:24:0d:fd:
33:75:6f:b2:dc:a7:51:b1:93:30:b8:9d:9f:e7:73:
70:f9:cd:0e:34:9e:b9:5c:34:1c:dd:7b:6c:42:68:
60:35:d2:58:c8:77:e8:c1:c8:61:ad:4b:4f:d7:6f:
a6:9b:1f:60:89:77:95:14:fa:fc:86:cf:67:07:30:
89:f0:b7:08:90:25:39:7f:8d:57:48:33:65:20:09:
de:60:0e:69:93:5c:5d:9d:64:14:1d:13:77:6c:65:
2f:e4:b6:d5:cb:ab:48:af:7d:dc:87:74:60:1b:1c:
d9:42:6d:3d:ba:2b:89:8a:d5:90:d3:89:e1:44:d7:
2d:e0:b0:d7:aa:ab:6b:be:4d:7d:3a:a5:86:2a:cd:
36:fa:46:50:31:c1:38:05:28:ab:4a:43:da:f6:02:
45:a3:99:fe:44:4d:81:56:27:7b:2e:d6:b0:cb:af:
e3:04:71:3b:db:de:b3:72:0e:c0:17:dd:a8:c9:ad:
6c:b5:1d:ed:05:3c:40:3e:05:4c:55:7e:1d:70:d2:
6d:17:32:13:f9:56:23:02:36:72:fe:46:f9:84:49:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:AE:0E:A0:12:59:BB:14:D8:78:7E:DF:47:DA:B3:E2:3E:F0:8E
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:c6:ed:00:3e:c8:57:08:6b:a3:49:93:7f:61:39:a9:09:
c6:40:b0:e6:bd:0d:6b:ca:64:0c:91:44:f3:61:41:ca:e5:22:
7e:cb:8e:b8:0d:56:21:74:34:d4:ef:3e:0b:8f:a0:aa:aa:b3:
11:45:c4:c7:6b:c7:39:e9:15:15:25:bc:9b:3b:67:d3:74:a1:
4a:df:d4:3e:01:58:2d:b6:4d:58:ab:be:5e:26:8f:d5:d6:2f:
60:1c:b2:c8:8e:b9:64:a8:c7:9a:32:92:f1:2a:66:75:bd:7d:
5f:18:ba:68:0e:fb:97:7f:d2:8d:da:fc:f8:9c:48:aa:5a:8e:
4a:15:22:54:15:6d:c3:75:79:b5:58:e2:0d:8b:bd:b5:2f:de:
e2:f4:2a:cc:31:91:65:49:f5:4d:94:a4:ca:c4:e7:fe:7c:25:
27:a2:61:0e:8c:60:46:ae:2d:24:98:0a:d2:d1:2d:d8:c4:c9:
d6:31:a3:b5:0d:9d:89:8a:44:33:df:0f:3c:3b:dd:c5:c3:66:
ce:e6:df:bf:e3:1f:8f:ad:02:b0:85:4e:57:c5:4c:85:3b:76:
1c:f2:ee:64:53:5e:6e:5a:88:86:e3:53:58:2b:a3:8e:bf:63:
52:72:7f:18:e5:75:15:46:7d:b9:77:09:a5:b8:01:9b:6d:90:
2e:1b:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:30:47 2026 by rpki-client