Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: Fise76s/No/Y1cKi/3PcWDiuWEpbjnKSP6uD+77rch0=
Subject key identifier: 17:A3:0D:5F:73:44:E8:FF:6D:92:3F:B9:45:3C:D5:91:AE:0E:98:BE
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019FF948E01489B10FE279871A81D6A531EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 19FC
Signing time: Thu 13 Aug 2026 04:02:10 +0000
Manifest this update: Thu 13 Aug 2026 04:02:10 +0000
Manifest next update: Fri 14 Aug 2026 04:02:10 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: gJ8h9yGC0xIkgwvyBQxhhBkMHzgsQiy/CXSCi30GEf0=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:e0:14:89:b1:0f:e2:79:87:1a:81:d6:a5:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Aug 13 04:02:10 2026 GMT
Not After : Aug 14 04:02:10 2026 GMT
Subject: CN=17a30d5f7344e8ff6d923fb9453cd591ae0e98be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:b7:dd:83:53:88:d3:cc:f6:2d:27:2e:2d:
75:6b:d1:4c:9b:7b:87:4b:9e:c4:7f:36:65:bb:82:
1b:f9:1d:8c:5f:31:ca:69:55:bd:41:c9:e9:09:03:
2d:76:ad:83:1f:4a:b3:0a:89:04:4a:28:e5:be:61:
13:1e:6d:15:8a:df:43:66:8b:ea:53:04:d0:fc:dc:
50:30:9f:28:9c:3b:00:c9:5f:6f:c0:51:06:c6:c6:
2a:ca:b3:89:6d:68:49:f2:16:00:bd:f1:72:ff:a6:
65:8e:6c:d7:af:c9:25:7c:3c:40:39:49:0b:0f:4d:
e9:8e:14:2d:9d:e6:54:b1:8f:48:78:6f:17:1d:ed:
c4:f0:32:ae:fa:57:84:a4:bc:39:c0:17:8a:9c:5e:
88:ba:27:79:69:0f:c9:09:06:0d:de:4a:5b:f3:ee:
12:bc:69:af:62:da:b3:ae:e7:6c:dd:65:73:90:71:
0f:f8:02:ce:a7:1f:12:2d:a4:7c:79:bb:1b:40:07:
f2:b1:80:c7:12:fc:02:a5:17:7b:82:e5:b2:b3:ea:
8b:56:82:c3:5a:ca:76:e4:7b:38:4c:c5:42:8a:15:
eb:5a:0c:1e:75:c8:a3:64:1e:68:5b:a6:23:75:ef:
e2:4c:d0:a1:21:61:96:bb:3b:c3:1a:a0:eb:e8:03:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:0D:5F:73:44:E8:FF:6D:92:3F:B9:45:3C:D5:91:AE:0E:98:BE
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:03:96:11:9c:4f:c0:8e:52:66:38:5a:0e:9c:0a:00:25:
17:88:20:03:e5:56:58:7f:bb:e6:0e:c8:24:24:e9:bc:02:94:
0f:5f:60:18:00:16:bd:7f:44:be:e3:ef:61:c1:d6:8a:f2:55:
7c:16:65:34:b9:c8:3b:c2:be:df:a0:25:0b:b0:be:6e:8a:20:
50:1a:24:b3:7b:2e:71:e1:e4:5b:66:6f:b2:60:77:a4:69:95:
92:57:74:ab:a6:ad:57:8b:20:fe:9b:db:12:5f:a8:b2:70:9e:
80:bd:df:3f:d6:b7:28:53:65:f7:33:cd:ab:72:d1:17:e9:9d:
1c:24:79:ae:67:f9:ae:81:ec:de:ae:da:1d:c0:cb:e0:b0:f2:
6d:17:5c:68:73:32:ae:ac:00:69:36:eb:96:6f:07:3f:f2:81:
6b:5c:64:d5:f8:ea:dc:ff:09:6c:cb:2b:92:2a:49:2c:8b:1d:
1f:ac:ef:79:b2:c0:32:27:eb:7f:3f:31:23:0c:de:a2:9f:c5:
b0:6b:10:6a:5c:1f:20:69:84:1c:ce:d3:0d:cd:0f:6f:4d:04:
be:bc:64:95:46:ba:6a:99:25:7a:46:18:cb:93:06:bc:1a:ae:
a7:e7:9e:b6:d9:cb:64:68:b0:82:50:4d:3d:94:7c:79:57:f6:
02:50:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:10 2026 by rpki-client