Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: 8cd/3y5xAUlg9NlQLhznPZIXHnoUk4hPWv6ur/5F1lE=
Subject key identifier: 97:BE:82:64:4C:32:F6:C3:19:88:0B:47:CA:AA:45:9F:15:BE:34:6F
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019FA0E0CCE111E5DB116C0C4381A08DAA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 00:01:54 +0000
Manifest this update: Mon 27 Jul 2026 00:01:54 +0000
Manifest next update: Tue 28 Jul 2026 00:01:54 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: Wz4uHSQV6XikrA7hlqTKnwmYR9cVcoLmZWdSzT2XMi0=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:cc:e1:11:e5:db:11:6c:0c:43:81:a0:8d:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jul 27 00:01:54 2026 GMT
Not After : Jul 28 00:01:54 2026 GMT
Subject: CN=97be82644c32f6c319880b47caaa459f15be346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:24:7d:4d:14:de:de:22:80:a2:17:8d:70:
dc:3d:5d:3b:1f:59:63:a1:74:9a:e6:26:07:e6:1e:
52:fb:5c:7c:55:d3:8a:56:4d:a6:e1:1c:9d:26:71:
f0:c5:43:9b:e6:2c:c1:5f:99:f3:7f:77:33:7b:4e:
20:c7:c1:4f:f9:1c:1c:93:02:af:fe:eb:33:52:1e:
2f:1b:9e:56:71:d7:93:b6:9e:28:8b:7f:8c:9a:c3:
e3:bd:65:be:0e:7b:38:05:35:d2:48:00:c8:68:f4:
30:08:04:1b:ea:1f:0b:8e:17:81:8b:59:6a:41:ff:
23:27:89:12:cb:54:a9:07:c7:29:28:53:40:e1:43:
7c:25:ca:1b:3b:55:68:49:d3:24:5a:a5:8d:ed:fa:
b5:0a:5f:98:a5:a7:83:28:d5:8e:6c:68:a7:fe:1b:
48:c3:7e:93:d3:d0:26:86:32:e6:5d:c0:a6:9e:6a:
f2:d5:59:bb:66:18:ca:a8:ed:af:10:77:17:0c:07:
23:93:3d:bd:93:bb:2f:7b:46:82:65:51:05:d3:b0:
6e:4f:1f:76:e5:ed:1f:16:5a:d1:9e:6e:32:7c:08:
ef:2a:7d:4d:63:64:24:d6:f6:bb:e9:0e:ae:b8:61:
5b:ac:ac:00:ad:04:e7:26:6f:88:b1:ae:b6:bc:e2:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:82:64:4C:32:F6:C3:19:88:0B:47:CA:AA:45:9F:15:BE:34:6F
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:c8:95:d2:da:f5:35:94:2c:1f:1a:70:ed:f9:56:d0:a4:
54:da:96:4d:ff:a7:14:d9:70:b3:62:e6:6a:7f:2a:2d:6f:76:
26:b0:f6:69:49:0d:41:b2:d7:66:8f:87:a0:99:35:33:8a:f4:
4a:26:ab:dc:e5:b2:45:b8:8e:e2:17:c7:0e:42:d9:c6:99:ac:
c1:69:55:05:3c:ed:40:23:1c:a3:a7:8f:56:14:26:3a:7e:cd:
a3:89:bd:06:bb:6d:4b:60:86:6f:1b:0a:eb:2c:4b:41:83:f0:
7d:4e:0e:02:b5:34:bd:26:d3:0b:01:8a:04:b3:a5:6f:e8:06:
5d:1a:f7:1b:62:29:c0:94:42:1c:2b:64:8e:20:8c:d1:70:9e:
05:60:00:ce:d3:dd:24:b7:bb:cf:88:aa:4d:38:1a:71:4f:40:
dc:da:a4:d5:c0:24:04:fc:d8:25:c0:d5:9f:3c:93:50:d6:65:
60:af:6e:68:15:98:b3:49:d7:69:19:5b:28:bf:f6:14:db:4e:
a9:f8:bb:6f:f9:35:40:b9:29:ff:d4:6b:98:89:55:6a:14:bd:
09:c9:6b:2c:65:e2:dc:6d:1c:2d:1a:8f:13:10:63:3e:b2:79:
e5:fa:d8:1d:12:ff:dc:b7:f9:7d:58:d8:52:da:fb:07:a2:b6:
f8:5d:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:24 2026 by rpki-client