Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: pamyqDftr0Um7E0lVzArEUk4kOwMpcXcmugqIjj6NYw=
Subject key identifier: 55:B8:2D:E0:DD:44:86:05:93:E8:B5:DF:82:6D:D4:7E:AD:EF:D2:93
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 019FA071D9D8868D4193B76734DC4441F617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 12FF
Signing time: Sun 26 Jul 2026 22:00:43 +0000
Manifest this update: Sun 26 Jul 2026 22:00:43 +0000
Manifest next update: Mon 27 Jul 2026 22:00:43 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: hTQRlEWKvF3cWUffcg/1vLnXqRWAEekG4iD6yTFoiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:d9:d8:86:8d:41:93:b7:67:34:dc:44:41:f6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Jul 26 22:00:43 2026 GMT
Not After : Jul 27 22:00:43 2026 GMT
Subject: CN=55b82de0dd44860593e8b5df826dd47eadefd293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:f3:b8:62:50:47:c9:63:a0:7c:69:81:6f:
27:17:80:d9:c3:06:76:9e:9b:74:3a:e4:3f:81:9c:
6b:7f:e1:bb:cf:91:aa:a3:39:fd:97:b3:b5:c3:7e:
b1:1f:bd:35:82:91:f5:b2:91:c9:69:a8:dd:e3:ce:
45:30:bd:6b:28:72:67:28:6e:56:3c:49:be:b5:47:
1c:74:6f:58:9f:a6:5d:07:34:20:04:f8:51:4f:e9:
12:6c:5e:22:9d:32:99:ff:b2:95:da:67:73:06:67:
1b:be:3e:f1:f5:23:63:a8:2f:81:69:09:80:12:72:
60:4a:ba:dd:fd:e9:36:50:0a:0d:24:62:15:68:1c:
b5:42:30:69:77:4c:d2:d3:aa:5e:b5:23:32:fa:1c:
9f:35:ac:c1:f0:32:3d:49:70:de:2a:a5:d6:b2:6a:
6e:b2:5f:a8:30:0d:e0:01:ac:0f:65:bc:c6:a2:63:
df:99:9e:37:62:79:93:d5:18:64:65:2e:45:e9:a0:
ce:04:b1:b8:ee:25:b7:fc:c6:2d:18:94:4e:76:7e:
19:83:75:f5:d7:0d:68:2e:d7:d2:8d:c2:8a:69:e5:
f9:e4:27:7e:b6:bc:ba:56:30:cd:2e:68:96:df:8a:
4a:0b:8f:05:1d:8b:72:ac:fc:4a:0d:51:ce:21:39:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:2D:E0:DD:44:86:05:93:E8:B5:DF:82:6D:D4:7E:AD:EF:D2:93
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:29:78:ba:a8:99:67:aa:7c:2c:3f:3c:88:42:1f:28:a2:
ec:59:1d:a5:d8:cf:29:78:35:41:b5:21:95:3d:2e:7d:f6:62:
ae:71:a4:98:38:6d:20:8a:99:0b:9d:7f:e8:00:5d:c2:d0:b7:
58:7e:ed:41:8b:98:22:0e:d3:42:4d:4b:56:bd:d3:90:c3:39:
ff:e8:c7:2c:70:ab:e9:ec:0b:64:75:f1:34:e9:64:c3:19:0e:
40:c8:14:9a:52:00:f5:74:54:67:be:33:1c:1a:32:03:93:00:
e3:fa:8c:e8:3f:81:44:50:1c:b3:14:60:1a:58:66:1f:aa:50:
c3:da:b0:5c:48:3b:c5:82:a7:c1:e5:d8:13:d1:ad:a7:4f:ee:
b0:e7:ba:a2:62:6b:e5:16:19:f3:7f:88:24:20:c1:83:e1:2b:
21:d7:62:a9:1e:59:d2:39:26:ab:f5:74:e6:39:11:0a:24:21:
00:bf:14:99:89:7c:97:30:db:c9:62:6e:2d:d3:72:26:d2:a5:
f1:0d:bb:a0:5b:ce:97:7b:97:3c:08:cd:8a:d2:a5:a9:5f:86:
3e:6a:48:4a:52:f5:24:11:f7:dd:da:92:62:37:06:c4:33:12:
3a:d4:d7:fb:fa:c9:5a:64:f3:af:32:0a:d5:87:4f:65:11:67:
05:01:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:27:20 2026 by rpki-client