Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: CQme6SXkw14wPxFdbTz5kIE2pu5d878FnjQwiI/IvNo=
Subject key identifier: C5:18:7C:CE:A7:89:CE:CA:B8:1D:27:9E:66:8B:28:4F:2F:AA:B7:4A
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019FA0038B01B21539B3ECEA98A638AD9B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 20:00:14 +0000
Manifest this update: Sun 26 Jul 2026 20:00:14 +0000
Manifest next update: Mon 27 Jul 2026 20:00:14 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: aDnQLdFPBmQXHY/k9HJ/cEzthNSKfRja0xE+AwcQTOc=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:8b:01:b2:15:39:b3:ec:ea:98:a6:38:ad:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jul 26 20:00:14 2026 GMT
Not After : Jul 27 20:00:14 2026 GMT
Subject: CN=c5187ccea789cecab81d279e668b284f2faab74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:95:b5:a0:e9:5d:c9:e0:6b:41:22:66:22:
4c:50:1f:60:45:ee:cd:7b:aa:2c:7c:c3:2c:d8:6f:
96:32:2e:d0:e4:c7:31:42:5c:72:21:36:4c:2a:6c:
6d:ae:45:8e:18:53:fa:56:5d:85:c0:61:78:ac:d9:
3d:4e:38:50:f0:e8:36:f8:08:b6:15:e0:cd:c1:d3:
87:e6:2c:43:ec:87:d7:17:e4:4d:50:a0:10:d8:c9:
9b:a5:4a:38:be:33:c4:de:d2:d9:24:fb:49:5d:bc:
f9:90:11:d0:16:96:fa:37:90:c2:06:4a:f2:17:5d:
0c:94:63:52:c4:f9:dc:34:27:03:9a:da:e2:fa:3a:
bc:fe:d6:85:76:15:73:ac:44:8d:8f:bb:78:7e:4a:
c5:a9:bf:48:06:27:26:50:cc:59:34:dc:6d:79:05:
e6:c9:04:af:e2:c0:bd:24:c2:00:4e:6c:87:ea:68:
89:7e:22:e5:a6:d9:24:db:4c:a5:07:8d:a6:59:d2:
30:ae:60:97:81:7b:85:1c:09:8d:20:de:de:9e:46:
ad:38:7c:ce:ca:1c:d7:1f:7e:b9:2a:95:07:df:dc:
1b:9e:6f:cb:a6:fe:e8:64:d4:e0:59:9a:ca:91:0d:
44:59:64:b1:c8:d8:73:ee:14:37:bc:b9:0d:9f:f5:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:7C:CE:A7:89:CE:CA:B8:1D:27:9E:66:8B:28:4F:2F:AA:B7:4A
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:f2:97:fa:9c:de:9e:4c:92:69:d0:96:da:8a:ca:a4:ab:
73:02:7b:91:b4:70:13:45:fa:fd:ca:a1:a2:1b:c3:3f:55:73:
50:a2:99:29:9c:8f:38:39:79:b8:4d:3f:dc:4a:82:d3:75:6a:
1d:0d:e9:59:af:36:6a:cd:ec:d1:7b:6a:1d:ed:ac:24:ee:c8:
67:6a:0f:14:0a:78:8a:2e:1a:ff:f1:e6:3a:a5:7d:2f:0e:66:
81:df:c4:ac:5f:ec:44:3d:f0:34:c0:d7:e0:42:01:46:f1:60:
f2:ae:d1:b6:ff:58:49:2c:a0:54:51:d2:da:cd:8b:b4:90:3c:
08:ad:60:da:35:06:ae:1a:df:9d:c8:85:c5:75:21:c7:74:77:
56:b2:bd:d8:c4:2f:30:56:ae:be:af:7e:c5:97:9f:8e:a0:29:
99:a4:63:96:d3:61:68:d5:68:28:fe:8e:a3:d3:ba:5a:10:90:
a0:7b:bc:15:da:f1:8b:19:b8:f2:1e:12:29:04:10:da:28:fc:
1a:e6:c9:4a:82:ed:f3:ed:9b:36:b2:a7:8f:d8:cd:02:d3:8d:
89:96:d6:c6:63:3a:bc:b0:bf:31:5f:dd:04:1a:05:b6:38:18:
b7:8b:db:1e:f9:7a:c6:3f:e1:6a:fd:94:79:d0:cd:bd:39:17:
f3:7b:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:10:21 2026 by rpki-client