Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: UMzFuqhUnP16O+kDjGXsFnkgjJ1CZPsS8I9yU/4Vq5I=
Subject key identifier: 7E:1A:04:91:F4:7E:EC:4E:EC:10:37:A7:7B:06:16:FC:49:54:C4:B4
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019F419A43C663FE57F2EBF26415CCA7BED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 12B2
Signing time: Wed 08 Jul 2026 12:00:56 +0000
Manifest this update: Wed 08 Jul 2026 12:00:56 +0000
Manifest next update: Thu 09 Jul 2026 12:00:56 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: wkxNSSzt8kWAzUp2XkMAW4oFHT80bhLhUA/XHFjwgac=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9a:43:c6:63:fe:57:f2:eb:f2:64:15:cc:a7:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jul 8 12:00:56 2026 GMT
Not After : Jul 9 12:00:56 2026 GMT
Subject: CN=7e1a0491f47eec4eec1037a77b0616fc4954c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:1a:51:b7:0c:a9:be:b9:35:7b:b4:60:ba:
e7:26:d1:ee:51:97:a6:e3:6f:30:f6:f1:c7:98:46:
d5:79:f2:07:f9:64:db:1c:8f:38:fd:e1:78:31:b6:
a7:ec:64:35:c3:9c:ae:11:95:2e:d8:71:0c:92:0f:
85:5e:93:0b:ce:58:16:7b:e9:a0:e8:c7:6e:1e:e6:
ae:13:91:c3:a4:a6:4a:61:e8:de:f2:e6:c5:5f:62:
ba:f7:d1:2a:38:74:5d:5f:c0:e5:06:c0:18:4e:b4:
56:c8:23:61:3c:78:33:05:c6:ea:28:53:66:f4:db:
22:84:a2:9e:a3:22:01:86:e1:53:c4:64:55:e4:24:
16:70:0f:93:5d:11:cf:93:72:15:3d:9b:04:69:35:
0d:cb:d7:47:35:17:39:89:df:24:bf:2f:89:5c:65:
2b:36:e0:ea:fd:20:9a:a2:b7:58:68:a6:69:7d:da:
99:9c:01:b8:a1:6d:f8:48:8f:d9:76:5f:e2:8c:ef:
1f:e2:f6:0a:7b:01:78:e3:4d:c4:3d:3c:a6:96:8d:
5c:7e:0d:09:9b:bb:00:ba:f6:be:f5:b4:b4:d3:5e:
51:64:be:6d:d3:71:d0:f8:ba:7a:f4:9a:0a:3c:09:
82:be:36:6d:5a:3e:61:b5:f5:26:14:8d:3b:c3:ac:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:04:91:F4:7E:EC:4E:EC:10:37:A7:7B:06:16:FC:49:54:C4:B4
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:67:bd:09:ac:75:27:e6:09:6c:10:b5:67:02:39:9e:0a:
dd:1f:18:7f:6c:e3:58:e3:05:c6:75:87:25:61:58:62:ce:32:
b1:22:2e:d6:84:b2:6a:13:75:32:e4:57:c1:1e:e6:9f:5d:3c:
39:e3:52:24:d2:1b:5a:44:dc:e4:b7:d4:26:1a:34:58:9b:21:
c4:1f:88:f1:5e:80:ce:c0:77:22:58:c2:bd:c2:03:c0:6d:6c:
3c:3e:c8:e9:97:a4:f8:fe:b4:ea:3b:6d:a4:bd:03:82:13:90:
9a:7f:25:46:80:59:e7:1d:57:5f:f2:13:5d:b9:13:8e:e2:90:
95:91:cf:ec:5b:44:be:b3:db:19:6c:ce:f3:45:01:6e:e8:e8:
84:81:fa:99:6e:01:0a:7f:66:fb:6a:71:d9:e2:5f:33:2f:2b:
91:82:c1:45:47:88:65:8e:70:18:6a:c0:a0:85:36:0e:0d:c0:
6d:3c:bd:07:60:4e:32:15:6a:a7:85:24:ac:5f:11:c0:a2:5d:
e0:69:61:99:37:18:32:f3:c5:6e:b9:bf:13:9f:5a:c9:1d:65:
a4:f2:9c:5d:2a:9b:5a:8a:78:1b:65:0b:e3:6b:16:07:27:91:
9c:db:c6:b0:fd:b7:15:58:98:04:dc:b2:cc:bb:83:3f:27:cb:
95:d0:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:38:13 2026 by rpki-client