Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: BZ8mdkqS/iTEUg2jLjMUL4H70W8g+Y3qX8c02K9AlvM=
Subject key identifier: 01:A4:87:AC:3D:9A:66:15:1D:FD:2F:90:88:E1:E6:21:AB:67:2C:A6
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 019FA33BB5333705756F5C20FCD439879EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0E13
Signing time: Mon 27 Jul 2026 11:00:26 +0000
Manifest this update: Mon 27 Jul 2026 11:00:26 +0000
Manifest next update: Tue 28 Jul 2026 11:00:26 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: +YaoOCZZCc9g829JS3nGgP31g4GFQ2F4bN4jFlGe464=)
2: xyOkTXVPZjz9JAhos1QM2vsm3W4.roa (hash: QXjoMKDwi6j1vpZqYsBGzsQGgoo9dIBXi5WlfEHsxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:b5:33:37:05:75:6f:5c:20:fc:d4:39:87:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Jul 27 11:00:26 2026 GMT
Not After : Jul 28 11:00:26 2026 GMT
Subject: CN=01a487ac3d9a66151dfd2f9088e1e621ab672ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:58:29:79:2c:5a:b4:1f:db:9d:7e:44:e6:
b7:01:99:0b:65:47:89:83:58:f7:fd:30:6e:c6:30:
13:5d:88:db:e5:07:55:77:90:13:93:94:74:3b:7d:
35:fd:f1:29:7c:7f:b5:ed:e0:ea:af:24:b1:1e:12:
97:d6:49:9e:c6:98:25:85:c0:58:ec:6a:c2:a4:9b:
b0:6e:98:ab:09:60:64:7a:21:6e:9e:89:3e:59:1c:
86:eb:e6:9f:e0:a2:74:f9:8f:79:3f:ad:34:e6:6b:
b7:d9:38:f6:43:70:3a:2b:79:78:46:60:91:4b:43:
29:1f:34:27:a8:ea:17:e9:da:e3:1a:ac:d8:1c:dd:
96:f3:e0:37:84:b2:5b:eb:e0:a4:eb:8a:6a:4e:bb:
a9:91:e2:9f:53:9f:92:c4:a9:d9:df:b6:d6:79:19:
99:98:9b:e7:db:4f:e3:6f:43:89:80:05:4b:19:a4:
f3:98:7d:04:ec:ba:7f:be:49:45:ba:7f:8a:83:0e:
46:48:40:29:f7:a9:ab:ec:f6:2f:85:db:b9:1c:74:
7b:e4:54:68:2c:7e:2a:2a:2c:1a:82:f5:29:51:2e:
22:8e:bc:da:e3:84:1d:e3:46:4d:71:de:de:a2:6e:
40:f3:3e:ea:eb:fd:73:6f:69:e7:a4:59:34:3e:84:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A4:87:AC:3D:9A:66:15:1D:FD:2F:90:88:E1:E6:21:AB:67:2C:A6
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7a:eb:34:f0:3a:26:24:d6:7a:19:a8:64:65:e5:06:d5:91:
8e:fa:fc:df:0f:e7:bc:96:c6:5b:73:22:87:1b:d6:bc:49:95:
ee:1b:fa:7c:0b:94:d9:d2:68:10:48:7d:24:49:96:f9:9f:d1:
0b:f8:f2:29:0a:b1:8c:b9:da:c0:71:71:e6:23:4b:fa:33:1f:
57:09:30:af:f2:59:e2:dd:be:78:9c:a0:91:db:47:55:31:eb:
a1:75:27:0a:54:1e:2d:59:e6:ba:a6:5e:db:db:ec:a4:51:ff:
e8:6b:04:13:a5:70:10:63:08:40:f2:cb:da:da:ef:f0:9a:63:
6d:c5:3a:58:9d:71:b9:29:d8:22:70:10:85:0f:87:55:6e:58:
32:c0:d7:f8:0b:14:87:ee:08:aa:f2:f5:ab:b9:67:23:87:d9:
a0:12:2e:b1:46:a3:53:24:8c:27:c0:9e:38:62:14:ff:0c:bf:
4f:d2:84:b2:f2:73:d5:42:93:0b:75:58:bf:e6:33:8f:79:cc:
6f:5b:49:c2:78:2f:77:52:55:dc:8e:11:e9:ff:11:c8:ac:85:
ea:0d:07:4c:cf:6d:8d:31:f0:c4:ea:92:1e:8f:ce:fa:ea:81:
03:c9:96:98:4e:dc:19:73:63:7e:00:8a:a9:c7:7a:7e:c6:36:
e6:61:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:07 2026 by rpki-client