Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: ctDhePA8ekm94mzjp/Z24d1cCoKxrR77Cw3FQ3mvl94=
Subject key identifier: 75:5A:06:88:04:AE:86:E1:7C:4A:42:7D:93:4F:43:A9:FF:C6:76:7C
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019F860D55C3D0219AE2BDD88C5D91A2FD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 16C9
Signing time: Tue 21 Jul 2026 19:00:48 +0000
Manifest this update: Tue 21 Jul 2026 19:00:48 +0000
Manifest next update: Wed 22 Jul 2026 19:00:48 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: QL5J+Cv8qtSLGwz7dQiwpvGXQVtkECRW1ZQ5o8W+PQ0=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:55:c3:d0:21:9a:e2:bd:d8:8c:5d:91:a2:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jul 21 19:00:48 2026 GMT
Not After : Jul 22 19:00:48 2026 GMT
Subject: CN=755a068804ae86e17c4a427d934f43a9ffc6767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:c9:11:70:03:89:4d:81:b6:c0:ee:a1:e3:
eb:24:9c:dd:6f:b3:c4:2f:07:2e:63:35:cd:88:0e:
d2:eb:b3:08:fc:80:ef:b8:19:56:13:a9:bd:42:0e:
50:92:a1:75:1d:b6:31:92:fa:4c:b0:95:ef:a6:4c:
9b:1e:61:32:44:28:b2:4f:66:25:57:97:45:d2:27:
b3:04:48:d4:d7:5b:39:34:48:f0:0a:0a:9f:52:b8:
da:dd:09:2c:ea:2c:c6:0a:76:72:f6:56:46:19:32:
71:a4:72:76:c4:3e:3f:60:5c:a4:00:15:45:5a:99:
79:5b:eb:7e:70:c0:ca:ef:70:43:13:91:ac:0a:86:
1d:24:95:dc:de:df:c9:54:f4:83:1f:51:99:dc:2e:
54:86:d0:b3:68:3a:dd:a4:2a:d9:c1:6e:10:08:90:
aa:2c:f3:78:d4:cc:9a:85:e9:c4:06:f0:14:2e:35:
c9:cf:5b:20:05:71:4d:e8:8b:ff:5e:06:c5:e8:d3:
c0:f5:54:7c:ba:22:50:8a:1f:3a:84:54:5a:44:c6:
ac:44:ed:79:98:aa:fc:36:d5:56:d5:66:5f:d5:38:
9e:d0:51:82:7b:4e:83:1e:9f:bf:15:70:75:54:bf:
d0:be:44:b3:0b:c0:54:7b:13:d9:9e:40:f3:47:b5:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:06:88:04:AE:86:E1:7C:4A:42:7D:93:4F:43:A9:FF:C6:76:7C
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:45:69:3a:c1:df:73:5d:48:0b:15:25:f5:f3:fb:4b:18:98:
30:83:60:f1:76:d2:4b:22:41:12:b6:04:86:01:bd:9c:ee:e5:
94:76:9d:75:73:89:a4:42:90:74:7f:97:6f:2e:1d:ea:57:44:
ff:45:d9:21:bf:7d:24:64:72:c8:fc:b0:c8:6c:87:7f:63:ac:
47:3e:d2:dc:dc:3c:aa:da:6b:1a:c2:bf:ec:ce:54:e1:05:0a:
64:2c:c7:49:ea:9a:7e:e2:db:f6:44:09:f1:90:0f:ea:d3:cf:
19:d1:cf:25:5e:e8:d0:b5:89:d9:e1:59:8c:17:fa:84:4d:e3:
76:89:7f:c1:24:d9:fd:45:4b:32:71:c7:67:00:68:8d:8e:3a:
46:e7:80:c4:9d:d5:6d:9f:d8:6f:49:eb:8e:42:25:34:d5:2a:
dd:02:a0:81:e2:a8:56:0f:a7:d2:15:ee:ef:bb:c2:b4:42:08:
ed:fd:52:44:e9:dc:77:91:7c:37:b6:d7:85:46:a7:20:8f:f9:
89:96:51:97:0a:ff:dc:cf:4e:bc:c3:c1:63:13:b8:e7:55:be:
7e:d4:6e:af:eb:3d:30:ea:79:0c:fb:e0:28:51:f1:01:e5:7a:
ec:3c:de:8d:30:3b:c1:f1:8b:c3:f5:d8:34:e6:66:08:15:72:
68:e2:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:47:25 2026 by rpki-client