Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: QulzfjDaYYP7vjl83ol9g6b3ySE067SeRYcRneH80v0=
Subject key identifier: CD:50:B0:04:16:C7:EE:72:FF:C1:80:65:B0:3A:0F:4F:E4:1F:14:B1
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019F8643C8518D4A88C6703CD35DEE90E103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0D04
Signing time: Tue 21 Jul 2026 20:00:16 +0000
Manifest this update: Tue 21 Jul 2026 20:00:16 +0000
Manifest next update: Wed 22 Jul 2026 20:00:16 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: P+d45mb+E02of7r8KQa9sGZmqa2cnmEtxyVy5HJNFFI=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:c8:51:8d:4a:88:c6:70:3c:d3:5d:ee:90:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jul 21 20:00:16 2026 GMT
Not After : Jul 22 20:00:16 2026 GMT
Subject: CN=cd50b00416c7ee72ffc18065b03a0f4fe41f14b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:a8:d6:22:43:d2:83:67:8e:5e:0a:c4:05:
15:d0:83:34:ca:db:3a:4b:51:7d:cf:08:7a:84:e0:
5b:d2:f4:c8:5c:8c:d4:d4:7b:bb:75:a5:5b:0d:8b:
ef:4b:ea:ac:59:a5:3b:24:fa:00:57:1d:cb:22:32:
86:77:34:30:86:52:db:e9:23:ed:89:5d:fc:58:4a:
e7:31:74:fa:3a:f1:6d:82:f8:3e:d2:5e:a3:86:fa:
28:17:8d:98:d5:3e:be:46:73:89:99:86:88:b1:2c:
91:5b:ef:d7:c8:d9:fa:3d:d1:e7:98:dd:fe:90:ed:
ba:74:50:88:0d:2d:19:9d:72:b8:81:26:ec:77:fc:
20:3f:35:2e:9f:7a:f2:f6:b3:f7:eb:12:cc:be:f5:
f3:f8:23:cf:7d:f8:e9:86:07:2a:ca:a0:d2:49:70:
e0:45:87:56:fe:17:57:0a:7b:8e:5b:04:70:8d:fe:
16:21:1a:1c:d3:64:34:ba:dd:67:eb:95:4f:ee:12:
f5:1e:0d:37:f9:7f:ef:76:f6:e1:a1:77:01:dc:1f:
a1:b8:a6:13:9d:d0:b8:a5:14:18:c4:5f:06:60:79:
5e:d2:6b:6b:9b:2d:a5:e7:a9:2f:33:b3:f5:8f:a0:
6c:b4:81:8b:ce:b7:d2:94:6a:8a:1a:41:04:c6:fd:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:B0:04:16:C7:EE:72:FF:C1:80:65:B0:3A:0F:4F:E4:1F:14:B1
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:f0:2d:3c:cb:8b:ae:c6:b2:0c:7a:6c:e0:d7:3a:54:4f:
d6:c3:c4:d4:e2:37:f5:bf:ee:05:6c:ad:6c:49:8f:13:05:61:
2f:ef:df:cc:77:f6:52:2f:a1:ef:a0:d9:24:4f:bb:f8:9a:b2:
3c:d2:bf:e1:d7:e3:c3:bf:d2:4d:87:af:f4:1f:59:f8:8b:c5:
6c:32:f3:25:ac:69:76:0e:ce:bc:56:29:a0:49:97:cb:51:55:
34:9f:c9:da:88:d7:af:1f:00:bd:85:b3:06:c6:c4:03:9d:2c:
85:7c:c0:b0:78:35:f1:dd:62:cb:36:cb:1d:23:a5:f3:e3:01:
67:b3:4f:22:00:86:86:f0:59:7c:5c:95:88:bc:bc:a7:4d:cf:
dc:e4:70:65:19:af:67:17:ff:f5:f3:2d:39:7e:15:e3:06:34:
04:d8:86:0a:73:62:14:5d:a9:25:ff:5d:88:8b:25:d0:b2:88:
8f:06:e5:eb:d5:4b:49:8a:3b:9d:45:c2:20:3b:c8:06:b3:96:
b7:9d:d4:62:81:b2:b4:c1:ba:15:5d:b3:02:78:24:66:74:49:
95:7e:1a:63:75:c6:7b:e5:06:97:79:c0:99:08:cb:31:3b:41:
e8:42:d2:da:dd:6a:05:0f:5b:d4:ce:b7:2b:93:85:3e:6f:14:
d7:9a:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:43 2026 by rpki-client