Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: A5J5noApjl/HlcQPuCwcG1dwyXhwT3DOjfHOzgH8U1g=
Subject key identifier: CC:1F:A1:54:33:DA:7A:27:B0:2D:9D:A3:50:3E:D8:88:44:C8:D7:F6
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 019F9F28521441CDAE48E37AAE47E9A1D8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 09BE
Signing time: Sun 26 Jul 2026 16:00:47 +0000
Manifest this update: Sun 26 Jul 2026 16:00:47 +0000
Manifest next update: Mon 27 Jul 2026 16:00:47 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: cnZd07+O1a0y8wElVYocq1QYb2aMLpzr43uiEBCkqsE=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:52:14:41:cd:ae:48:e3:7a:ae:47:e9:a1:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Jul 26 16:00:47 2026 GMT
Not After : Jul 27 16:00:47 2026 GMT
Subject: CN=cc1fa15433da7a27b02d9da3503ed88844c8d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:07:cf:f7:cf:b6:98:aa:14:15:ab:17:a8:
9a:40:9d:d9:a0:5e:53:3f:85:dd:cb:04:51:fe:3b:
1a:be:38:11:af:79:cb:98:c3:68:33:a5:c6:60:a7:
c6:73:6a:85:a0:8b:1b:2e:4f:80:e2:c2:3d:8f:68:
b5:dd:1c:2b:86:6f:0b:0f:cc:35:5f:48:69:69:fb:
af:2f:72:fc:5d:3b:9a:b6:be:10:72:54:e6:0e:92:
14:ca:59:e8:4e:8f:08:ae:bd:3b:77:53:86:1a:82:
34:a8:8d:74:e4:f2:72:e2:d1:c3:0e:ff:3d:c7:05:
f7:3f:c6:6c:ee:71:c8:b8:8d:54:ac:86:12:15:50:
d7:90:e2:82:02:1f:d5:cb:2e:01:c3:90:1f:6d:6d:
e9:eb:8f:e3:4b:77:9d:d1:3d:46:4c:0e:3e:4f:9a:
a0:61:13:1d:c9:ca:fc:58:76:42:54:09:99:58:d0:
49:05:5f:54:f6:55:56:4b:54:9d:70:50:4d:be:c3:
64:24:d9:3f:8b:fb:5c:08:e6:62:40:7b:99:0c:f1:
3f:93:7d:d7:6d:ad:ea:da:29:a9:a9:52:26:55:78:
85:6d:86:5b:b5:ac:3f:c3:58:61:68:a8:07:c5:c7:
6f:90:e5:2b:d1:49:cc:65:86:30:7a:13:df:05:36:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:A1:54:33:DA:7A:27:B0:2D:9D:A3:50:3E:D8:88:44:C8:D7:F6
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:22:b1:e7:1e:f3:5c:e7:ad:94:e2:24:35:15:98:bf:37:c4:
5f:d3:04:7d:3a:ff:1f:92:69:b3:97:03:bf:88:68:ea:09:5f:
09:15:c4:5b:4b:d4:1c:7d:c8:05:03:fc:6e:32:7c:3b:a5:50:
e6:0e:3c:d1:3c:2a:ec:6a:ab:20:e5:97:b1:c9:ce:c8:2f:04:
0b:a1:1f:7f:f0:69:05:11:90:37:14:8c:fa:60:a0:90:51:9e:
2e:3b:f3:b8:4f:d0:c5:df:80:7b:52:6c:b9:bd:f5:ec:71:9a:
44:fd:ad:5f:04:f2:a7:ab:0a:fe:f6:49:e8:9b:32:33:b3:a1:
25:23:fc:ff:1b:6f:10:83:dc:4b:0c:12:f7:4f:ed:07:49:1b:
53:3f:81:7a:33:8d:df:65:92:18:d4:e9:4e:27:7d:07:d5:3d:
85:c8:e9:34:77:7c:a9:44:55:77:26:c3:72:8f:2f:ae:a4:47:
06:b4:6c:97:79:4e:71:bc:78:aa:de:a1:6b:39:1d:f2:46:2b:
a2:f9:9f:5e:e2:5b:f3:bd:54:ef:16:b2:6f:6b:a1:10:2d:5b:
20:94:50:d6:dc:90:56:af:76:50:9b:a2:3a:89:aa:ba:f7:e8:
72:51:05:f9:12:47:21:2f:ca:0c:33:86:30:b6:7a:9d:5b:32:
c7:53:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:23 2026 by rpki-client