Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: FcbycptjRwEglrrPGqDGkGawAluE2td2WP4hUKmsfkA=
Subject key identifier: 1E:E6:75:D2:9C:7B:2C:8C:CD:4D:39:5B:C8:58:43:9C:01:FF:E7:AE
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019F83438497EE9CF1468F379C114FA0BFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 14A4
Signing time: Tue 21 Jul 2026 06:01:07 +0000
Manifest this update: Tue 21 Jul 2026 06:01:07 +0000
Manifest next update: Wed 22 Jul 2026 06:01:07 +0000
Files and hashes: 1: 9-3_QvwXtOHHG58UKiynTLu14jQ.roa (hash: ySs8H3K/teKJ9R4r0VNoDDtNDBiXRJngnMoTb8cTLeo=)
2: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: cPwMWivEsBz4CZT1PvZHZUChNbavPD28X8LlIBfZXgk=)
3: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
4: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
5: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:84:97:ee:9c:f1:46:8f:37:9c:11:4f:a0:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jul 21 06:01:07 2026 GMT
Not After : Jul 22 06:01:07 2026 GMT
Subject: CN=1ee675d29c7b2c8ccd4d395bc858439c01ffe7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:1f:c9:75:ab:bf:1f:49:0e:d7:50:cf:43:
23:be:6c:ba:15:a9:29:e6:47:f3:a9:dd:49:40:d9:
b0:e8:f9:9a:21:24:3c:79:44:03:a9:9f:a1:7b:2d:
19:9f:d5:87:e2:f1:5f:47:15:f1:29:fe:04:62:44:
ef:10:8d:37:46:39:d7:8a:8a:43:d8:ad:0f:e8:41:
5c:41:b7:7d:92:2a:af:b3:4c:26:b4:9c:b7:b3:5b:
fc:7a:d9:ff:86:54:85:42:85:8d:c0:b0:7f:48:55:
dc:e2:21:dc:36:77:71:f4:a4:30:47:35:b7:aa:07:
78:a6:34:89:67:54:24:dc:b7:45:61:a6:5e:ad:23:
64:5e:5c:da:6a:b3:9a:e4:14:05:41:45:fa:fa:4a:
d8:5c:ac:30:80:f9:87:af:d1:94:20:77:e0:22:97:
92:9d:67:0b:6d:bc:fb:e2:0f:70:a6:7f:93:ef:69:
d7:9d:82:36:ca:3d:5f:45:56:61:14:c4:68:7e:38:
90:2d:64:72:2f:c5:d7:db:a3:36:08:c0:87:23:e7:
86:b7:b9:b4:c0:5d:3d:e0:ac:a2:08:cc:01:61:bf:
d1:7b:2d:03:f1:fc:07:71:e9:45:a6:c8:58:46:6f:
6c:35:b4:51:37:03:4d:12:83:64:32:74:14:79:bb:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:75:D2:9C:7B:2C:8C:CD:4D:39:5B:C8:58:43:9C:01:FF:E7:AE
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c0:bb:92:45:25:8d:63:d8:ef:ce:1b:06:1e:6e:d5:34:c3:
8d:b5:8f:88:fc:6a:ad:68:89:7e:c0:8a:13:a6:15:c2:1b:21:
2f:4f:af:af:75:cc:3d:ef:0b:53:8b:23:28:ae:aa:25:4c:59:
dc:ae:25:8b:b3:a5:1c:85:07:55:2c:90:67:70:89:27:0e:44:
94:7c:0b:77:a7:aa:a2:68:83:9e:1e:cd:4f:95:24:c4:4c:68:
c7:c2:9d:e4:8d:7c:ac:00:3e:09:56:c6:85:6c:28:77:93:1a:
59:cd:a4:6a:c8:93:fe:24:3b:4a:ba:3f:27:a8:4d:eb:d1:50:
87:02:f3:0f:20:da:c2:91:a2:d9:28:22:2b:05:53:17:e4:0c:
c1:cb:85:c6:4f:4e:2a:f0:60:fc:ca:84:55:e1:78:58:75:3c:
7a:ce:f4:3a:3e:eb:75:9a:ee:37:cd:01:62:fc:42:1c:01:94:
be:34:54:21:a1:34:ee:12:95:63:b0:e1:8d:c2:78:0a:af:00:
c2:ad:ca:82:2c:89:e3:46:56:f2:07:1e:ba:e4:f3:72:07:4e:
84:18:1f:40:25:6b:57:e0:ef:ad:9e:95:05:80:0b:67:08:99:
30:c3:48:52:79:17:96:57:45:8f:10:90:1f:2c:1c:e3:35:61:
0d:d4:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:28 2026 by rpki-client