Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: yYUg4iGAJ9UfBznhDoUcyWUjvBcTjq0wR101DLOLOWE=
Subject key identifier: BB:15:27:F7:BD:A8:44:A6:39:27:8F:C8:97:C1:21:25:5E:67:8E:4C
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019F860D5CAF5141A1D3D6C0631E12073CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 0132
Signing time: Tue 21 Jul 2026 19:00:50 +0000
Manifest this update: Tue 21 Jul 2026 19:00:50 +0000
Manifest next update: Wed 22 Jul 2026 19:00:50 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: 96XLmzk5I1jvQ0v1I8ITjTizRvUEAhfQOrHdRSLUxmg=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:5c:af:51:41:a1:d3:d6:c0:63:1e:12:07:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Jul 21 19:00:50 2026 GMT
Not After : Jul 22 19:00:50 2026 GMT
Subject: CN=bb1527f7bda844a639278fc897c121255e678e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:40:2d:8f:d9:97:1f:f8:bb:4a:81:6e:be:
28:1c:27:6d:b8:39:d8:8a:9d:19:57:da:6b:0c:b9:
cb:91:c6:ee:c0:51:39:ae:69:cb:96:3b:13:a1:08:
9a:df:29:64:79:7b:c0:02:81:12:c3:10:fd:76:7a:
ca:cf:5a:a1:6a:9f:ab:75:cf:d2:6f:8e:ac:21:a2:
e5:03:66:92:55:3e:ac:2b:4d:94:df:1d:0e:55:1b:
3f:06:ba:9c:ce:ec:1e:ad:60:73:0c:d9:74:6f:f5:
92:4d:f4:e6:46:9c:c0:af:63:16:50:36:df:f7:8b:
0c:cf:63:ff:32:f2:ad:89:5b:16:21:ed:0c:0a:de:
f5:2b:12:39:d5:fd:94:ea:d6:b3:48:b6:91:0f:8d:
c3:6e:25:3f:d8:9b:68:d3:4c:10:1b:67:68:5f:cd:
11:4f:d0:4b:91:f2:16:ed:74:66:40:19:c5:03:51:
cb:78:fa:7d:4b:17:ab:75:53:46:87:1c:ab:31:5b:
30:c2:08:86:16:fb:b2:43:8b:f7:81:6d:8a:a1:d7:
1b:85:0f:d7:06:13:a6:d3:cc:1a:88:40:33:a2:81:
90:fb:75:15:fd:71:fa:1e:f9:ca:a4:69:65:a9:13:
80:3d:d2:ca:af:8d:96:c3:8a:75:c6:f2:5f:a3:a8:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:27:F7:BD:A8:44:A6:39:27:8F:C8:97:C1:21:25:5E:67:8E:4C
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:a5:80:c9:f4:45:4a:b5:f2:dd:b7:ca:ab:91:90:31:54:
ad:70:c0:17:de:40:72:9e:55:49:dc:d3:d1:9c:9b:ce:92:2b:
d1:90:a3:de:ea:56:77:de:26:72:9b:e2:f6:a7:ac:95:a7:ae:
b5:07:58:e6:c9:61:62:01:83:0e:af:4b:19:1d:5a:22:58:6d:
54:d4:03:d8:23:6a:4c:49:2c:aa:a9:ac:30:16:eb:1f:e7:f8:
b7:25:e0:36:1f:a0:3f:42:ef:8d:8a:6d:99:18:31:14:c2:ec:
8c:93:21:3a:18:dd:53:4b:75:b8:78:84:f9:c8:a1:6e:05:d8:
84:7f:3b:20:de:32:2e:50:2d:15:2c:b8:dc:6d:d7:1f:64:d1:
5b:e6:5d:d7:48:55:d6:90:94:33:fb:6e:92:22:c6:1c:98:fa:
df:42:ba:7d:e4:8a:97:7b:29:f6:6d:67:92:22:e0:16:3e:e7:
e9:89:c1:d6:3f:b1:21:73:25:48:79:ae:dd:91:fd:4e:94:6c:
12:eb:25:45:d3:d6:9e:c5:8f:9e:c9:3e:9e:cc:ae:5f:30:8b:
51:bc:dd:08:9f:43:50:2b:d3:0c:18:d8:0a:21:6f:9c:4d:42:
7a:68:19:a3:0e:5c:c2:d3:35:b1:24:f9:70:45:67:37:53:49:
8a:23:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:00:22 2026 by rpki-client