Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: iPCG4roMfqkgLkjbgJr8E+znzACMDPWvbVRV+jUnfCE=
Subject key identifier: AD:78:B9:42:AF:46:39:1A:BE:62:C4:7A:5A:6E:E2:CE:DB:9D:4F:86
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019F19B10E02E1DE020C26F6D5EA52BEF568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0EEC
Signing time: Tue 30 Jun 2026 18:01:01 +0000
Manifest this update: Tue 30 Jun 2026 18:01:01 +0000
Manifest next update: Wed 01 Jul 2026 18:01:01 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: FStGlKDVxIhoimKbjuWJWSWUv7Ldahz1MekVI9oqajU=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:0e:02:e1:de:02:0c:26:f6:d5:ea:52:be:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jun 30 18:01:01 2026 GMT
Not After : Jul 1 18:01:01 2026 GMT
Subject: CN=ad78b942af46391abe62c47a5a6ee2cedb9d4f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:3c:39:04:5c:b3:72:06:27:65:f4:51:3b:
ae:72:6b:1c:3a:68:5e:3a:cf:3d:93:28:8f:f0:f6:
77:42:90:b0:93:e1:e8:73:15:4d:bc:f3:15:f1:47:
42:e6:ba:2c:b0:dc:38:1c:09:da:ca:34:22:53:e9:
d5:11:ad:2a:7e:3a:b3:2a:32:10:d0:2b:18:bc:cb:
96:6e:7f:0d:ab:72:61:51:ff:fc:06:d9:9b:72:c4:
31:44:32:0b:94:de:59:58:62:e3:ce:57:37:53:81:
57:58:58:19:ec:ba:8d:94:8e:10:14:9a:39:84:e6:
91:3e:15:7b:c6:28:13:17:de:63:75:3a:84:6d:a2:
b6:dc:36:2b:24:bd:40:66:d1:9f:62:76:ae:0c:70:
e2:c5:28:3a:2f:c9:2b:19:90:e1:17:66:b7:30:9b:
db:24:6b:dc:1d:77:28:65:05:3f:9a:39:b4:53:e5:
79:d5:f1:b3:11:ae:d3:38:c4:93:b2:14:37:d4:aa:
11:da:31:27:e4:6c:42:4b:5b:ab:2a:55:86:56:08:
00:b6:cf:b4:41:3f:f7:cf:9c:5d:5b:bf:cb:85:7d:
36:3e:b9:81:04:73:7d:bb:f2:74:6b:e6:0b:3a:c5:
88:39:73:ce:3b:29:51:f1:fd:f4:a4:91:06:e2:c5:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:B9:42:AF:46:39:1A:BE:62:C4:7A:5A:6E:E2:CE:DB:9D:4F:86
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:e8:d9:43:29:76:c1:bd:06:05:3c:97:e6:81:b9:3a:df:
0f:13:cd:86:63:90:51:f6:8d:61:b1:5e:2a:b5:77:13:96:79:
98:9d:9c:9e:90:1e:5e:37:95:be:1b:82:62:82:0a:28:9d:d5:
8c:26:18:94:02:6f:ca:45:91:c7:e5:23:62:0b:aa:0b:ee:73:
7b:e4:9c:b5:d4:15:6b:c9:3d:84:f3:40:f3:46:f3:29:ea:61:
ed:07:98:97:14:31:99:8b:65:68:4e:02:33:f0:fc:cd:e5:06:
b5:b2:b3:19:c2:12:91:98:1c:f0:f0:63:ff:5b:f0:07:f2:bb:
15:0a:b8:2b:31:66:c0:cf:cf:c4:85:78:a8:71:8b:51:a4:56:
7f:c2:70:8f:73:dd:db:62:84:1e:4c:c0:5b:70:d8:20:b0:0b:
61:42:47:b5:c7:66:55:86:d5:93:34:08:1c:5d:ef:4c:e9:fe:
5c:ae:47:33:d7:23:37:35:86:cc:89:f7:57:c2:8c:83:15:97:
09:3a:b3:85:b4:00:06:ee:bd:d5:19:59:4a:70:19:e6:51:67:
08:69:b5:ec:6a:b6:f6:76:c9:e8:7d:f3:59:c8:10:ea:15:38:
3e:7c:e5:97:6b:54:d3:2e:c5:15:78:9c:9e:99:c5:cf:10:ed:
5b:3f:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:58 2026 by rpki-client