Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: vD2wyY0AldBa+HCuJOdoGT4uyjYBMxNBzuxjI/4PFUc=
Subject key identifier: 8C:48:4F:D0:33:4F:7F:22:FF:E6:FF:64:5D:AE:30:68:D3:BC:B5:DC
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019EFA5F86D9AFBDE19B901E1F657AF2168A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1978
Signing time: Wed 24 Jun 2026 16:03:44 +0000
Manifest this update: Wed 24 Jun 2026 16:03:44 +0000
Manifest next update: Thu 25 Jun 2026 16:03:44 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: /gzQ+m2spz+cgF7pI1bZnFwPoDtQaH9lvzP3i+++MME=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:5f:86:d9:af:bd:e1:9b:90:1e:1f:65:7a:f2:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jun 24 16:03:44 2026 GMT
Not After : Jun 25 16:03:44 2026 GMT
Subject: CN=8c484fd0334f7f22ffe6ff645dae3068d3bcb5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:ac:2b:e6:0f:ec:e9:90:79:69:d4:df:20:
8b:da:24:21:80:34:0c:f4:f6:b8:f4:a1:6d:6e:ed:
96:f5:42:cf:a5:53:a3:dd:a4:10:bd:6c:a1:12:29:
e8:ca:eb:fb:f5:0b:b3:0d:a8:7b:b3:a1:91:9b:10:
b7:f7:d5:71:22:42:a7:d6:0b:93:94:60:33:be:20:
61:0a:02:3e:db:b9:bf:55:29:c0:15:4f:7f:17:86:
9f:2b:7c:94:79:fb:81:45:7d:f2:e8:95:65:38:5d:
fd:ee:c0:20:b5:e8:12:9b:0f:e9:3d:c4:00:73:21:
c0:27:b1:fb:ee:15:dd:8e:8a:09:5f:f9:bc:14:1b:
57:28:f4:69:ec:4a:1f:c8:33:e5:99:8e:10:6d:7f:
dc:3c:bc:39:5b:83:92:45:db:db:7e:02:00:57:ce:
e8:09:43:ce:b1:14:f8:af:b2:ea:c9:de:5b:df:1e:
bd:cb:78:91:bc:24:d9:bc:c7:22:9b:93:ff:d7:69:
06:0e:2c:08:6f:87:72:11:73:16:25:86:58:58:33:
ae:02:c5:93:8b:c9:ef:4d:ac:f7:a8:46:69:60:ea:
65:dd:b9:bd:9f:42:ef:18:62:2f:97:94:dc:94:58:
50:03:74:40:ec:39:36:f3:b6:db:f4:28:5b:35:1e:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:4F:D0:33:4F:7F:22:FF:E6:FF:64:5D:AE:30:68:D3:BC:B5:DC
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:d5:48:ce:99:6a:9e:37:7c:da:4b:2f:df:04:b0:c7:be:
49:b7:b8:7a:07:33:2c:7e:e0:f0:49:44:4a:e8:01:7c:08:89:
77:f7:a4:0a:ad:93:f8:59:ef:34:69:9e:0c:a4:6f:c6:ea:67:
55:98:8e:79:25:f9:b9:a1:9f:5f:63:d4:d9:bc:eb:b1:74:b9:
82:aa:1a:1c:f4:59:65:b8:25:1a:c6:6b:1d:1a:14:54:4a:a1:
15:70:bc:21:ce:cf:56:87:22:f4:e0:ed:24:2b:81:35:d3:90:
4a:1b:56:08:96:b2:6d:2e:23:4d:d2:76:ab:18:9a:01:40:d0:
ea:e8:ec:8b:6d:ad:ee:8a:3d:92:b8:fd:4c:ae:f5:8b:6e:15:
8f:3a:38:18:78:29:ee:a5:b6:7d:0e:01:32:86:53:04:b9:ea:
69:4d:4d:79:51:7e:a5:59:83:d9:87:a8:45:f7:74:63:42:9a:
d9:b0:99:9d:db:62:c0:4a:12:0e:df:9f:1e:59:37:bb:5d:e5:
fc:ae:5e:ed:be:dd:e0:ac:ca:c3:ce:e5:00:53:f2:3f:49:f7:
40:16:fd:2a:cb:6d:0a:aa:50:1a:ec:16:3c:c0:9b:c4:50:6e:
5a:31:69:d3:ca:5e:83:a9:fd:2d:21:1e:84:2c:26:40:9a:6f:
da:43:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 01:25:53 2026 by rpki-client