Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: NNc5cIScMuxwwxkbVk9dbRl5dZ7r8xtCnHWKLFSRYXg=
Subject key identifier: 00:AA:52:1C:44:79:F5:B3:E1:13:6A:A9:D6:11:08:7E:29:29:C3:E3
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 01A001DD0F556D80CC7C70319AD43BA45DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 20:00:59 +0000
Manifest this update: Fri 14 Aug 2026 20:00:59 +0000
Manifest next update: Sat 15 Aug 2026 20:00:59 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: LjcGzhHXGd5OkWKjWjmw+K3KUx9oNQpBP+fgyZhby/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0f:55:6d:80:cc:7c:70:31:9a:d4:3b:a4:5d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Aug 14 20:00:59 2026 GMT
Not After : Aug 15 20:00:59 2026 GMT
Subject: CN=00aa521c4479f5b3e1136aa9d611087e2929c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:b5:75:92:82:af:2d:a5:44:f1:d1:ea:d3:
a6:53:e5:a9:79:3a:ff:15:51:05:8a:0f:f2:8d:40:
8d:25:98:b6:75:dc:3a:da:6b:e2:89:e8:b5:65:f2:
26:7f:f9:fd:3e:97:40:e8:d8:cb:e9:48:cb:5c:5b:
ce:19:75:fa:b8:ed:a6:b8:28:6c:1d:7e:53:d1:31:
2b:8d:16:b2:48:4a:3a:f6:f1:59:98:07:42:17:cf:
f8:a7:f2:80:a1:80:01:77:ec:ba:5b:f3:50:0c:b2:
7b:fa:44:8e:5b:5e:06:ae:3b:65:cc:b7:93:1d:50:
93:64:18:ed:7e:c4:17:77:b3:50:79:16:06:82:5c:
ec:9a:72:cc:9a:c7:1f:76:a5:17:89:9a:d9:f5:78:
c0:bc:6e:d0:9c:ce:3a:76:60:7d:25:8e:c8:f0:0a:
fa:1b:28:75:92:d0:e5:c8:b7:21:0f:b4:c4:57:92:
12:5c:15:24:97:3f:e4:0a:cd:c4:fd:bb:90:2f:0e:
7c:c8:21:81:18:fa:8c:a7:01:b1:f2:28:50:44:04:
06:0a:fe:56:68:68:4a:fd:a5:b5:e7:cb:37:e0:c5:
46:31:9c:2b:25:3a:49:9f:b7:a4:98:45:82:39:7a:
9d:56:10:02:12:2d:23:54:3b:97:8a:10:bf:47:0c:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:52:1C:44:79:F5:B3:E1:13:6A:A9:D6:11:08:7E:29:29:C3:E3
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:83:05:c3:a7:ad:42:74:cb:ce:29:cb:41:1c:0d:cf:c5:00:
f6:42:3d:73:7c:66:4a:0a:fd:9c:d3:17:27:98:be:af:a3:6d:
63:e0:fe:1c:27:cf:62:75:11:9f:67:d0:cd:16:83:b0:9c:b3:
dd:02:05:f1:fa:dc:b7:15:f9:4d:17:13:48:c4:d0:e6:db:f5:
47:bd:57:4c:bd:2d:2a:fc:31:f0:02:5f:eb:e0:2c:2e:49:29:
20:33:c1:55:e0:ca:f8:e0:97:68:18:e5:df:23:f5:51:c4:e2:
c6:7d:6a:fb:dc:10:53:fb:52:77:fe:89:3d:0d:53:26:c9:66:
dc:9c:67:02:fa:08:f1:e3:c0:05:af:8a:cc:d7:b0:81:a5:71:
cb:85:7d:d2:2c:27:9e:25:2e:d3:02:1b:74:56:96:d0:0c:74:
1b:b2:4c:b8:39:67:93:56:07:41:23:bb:a1:7b:99:f7:de:5e:
be:61:27:b7:b7:00:4f:b2:ce:91:0c:80:e1:0c:2f:22:57:10:
86:2a:be:22:4a:96:7c:6f:4f:e9:da:1a:bb:cd:39:70:07:af:
86:a4:61:1a:6f:cc:0f:3c:80:4d:28:bd:0a:a7:18:3f:f3:57:
19:9b:96:ff:c7:ce:4b:4a:0a:e1:3b:60:38:d2:07:f3:4b:e6:
c2:e2:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client