Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: D1TIevArSWcNQjUe5fbChxKh113uqUXnFiGNGAP9LcU=
Subject key identifier: 52:06:1E:1A:00:F3:B1:41:92:26:A0:20:92:F1:85:D8:A5:43:BB:8E
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 019FA14DBE1B852E94B21ECE3F7E16A38004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 09D5
Signing time: Mon 27 Jul 2026 02:00:54 +0000
Manifest this update: Mon 27 Jul 2026 02:00:54 +0000
Manifest next update: Tue 28 Jul 2026 02:00:54 +0000
Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: lUo/mNgYWDpgh3bAPmuQnIaJteA69cXbHd/4d8zZpVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:be:1b:85:2e:94:b2:1e:ce:3f:7e:16:a3:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Jul 27 02:00:54 2026 GMT
Not After : Jul 28 02:00:54 2026 GMT
Subject: CN=52061e1a00f3b1419226a02092f185d8a543bb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:b0:fc:75:c4:39:b6:7d:6c:0f:e7:5c:7f:
81:3e:6a:e4:27:51:20:b7:1d:07:28:cf:15:ef:2c:
b7:09:85:b0:42:37:80:96:56:d2:f3:7e:82:00:28:
24:bf:c8:f9:98:df:3b:c7:fb:b4:be:c9:3e:84:24:
1e:41:83:2a:c8:e4:8f:a1:19:54:b7:93:be:17:39:
e3:af:d7:c1:57:f6:83:64:76:7e:4a:a1:48:eb:a5:
2a:9b:b7:70:74:ba:ce:d2:73:5d:d2:87:07:d0:51:
37:1b:fc:4f:a7:67:72:8e:9e:12:09:fe:07:ab:68:
d6:11:8d:75:a8:15:1d:a9:b3:4f:c2:49:e7:6c:e8:
34:0b:74:6f:e2:49:98:56:29:1f:63:36:d9:04:56:
6c:2b:09:e4:38:b3:37:bd:59:53:00:ba:a3:fc:d3:
e7:44:91:e4:c2:8f:cb:24:ef:7b:4e:18:51:50:73:
a7:77:9b:36:97:95:ea:bc:52:32:ba:6d:78:ba:6b:
db:ed:96:15:c9:e6:70:63:d2:41:ee:35:fc:23:99:
37:06:a2:c1:ac:23:76:24:85:b8:89:d6:f8:6a:59:
d0:f3:f5:bb:a4:b7:02:6c:54:53:09:97:8f:63:a5:
78:57:bf:ff:48:96:fd:91:34:6d:19:13:43:00:fa:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:1E:1A:00:F3:B1:41:92:26:A0:20:92:F1:85:D8:A5:43:BB:8E
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f2:4b:19:82:52:b1:54:ca:1b:f1:d9:a3:b8:59:8e:b6:53:
43:58:54:72:52:2c:5a:31:2b:42:35:1c:f6:f6:3b:e0:4e:72:
48:97:23:d0:d3:8e:12:b6:0f:bf:e0:13:c0:e3:7b:ef:66:0d:
dd:70:4f:d7:fd:50:d4:aa:bb:e2:10:92:42:da:ad:3b:56:c9:
6e:7c:81:45:97:e9:e7:cc:ac:c7:43:b0:76:81:e6:fa:a1:23:
59:3e:b8:27:21:0e:2e:d4:a9:5f:9a:78:67:cb:82:a8:1e:89:
aa:cb:f2:0f:3f:e5:b2:73:a6:89:52:5a:df:a9:7e:0b:de:c4:
3d:65:d7:7f:88:c9:53:bb:30:40:f1:e5:d9:52:fd:9e:30:ba:
56:67:f9:c1:8b:84:79:c9:85:05:41:81:87:db:11:6d:6d:b9:
32:11:9b:02:db:2f:89:b7:ee:cd:9a:ee:68:45:cb:c6:b6:c3:
f0:c3:54:be:d9:87:3d:d0:53:d5:38:54:c1:92:7e:9f:b7:ad:
0f:47:94:66:ef:8c:aa:0b:b6:1b:83:18:de:89:e3:1b:94:8e:
94:d7:c6:e6:77:4a:f5:d7:bb:47:63:17:2e:9a:4b:61:9b:3f:
7f:4f:c5:76:b0:5f:53:7c:f9:e7:13:c4:19:19:e2:27:2c:78:
64:41:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:26 2026 by rpki-client