Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: Drv4W5L6JbIdSwpr922RgExexW7oXL4QBIhsSsZsvTE=
Subject key identifier: 31:C5:B1:2C:09:17:D5:85:5B:8B:E3:0A:BD:CE:49:E1:2B:3D:14:EA
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019FFC1213F220D0C05ECC70C617D2684161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 17:01:10 +0000
Manifest this update: Thu 13 Aug 2026 17:01:10 +0000
Manifest next update: Fri 14 Aug 2026 17:01:10 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: QO692+cWBhMmqSDG8MRAD3EkpbbFe6Yu3NQVaCDhJks=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:12:13:f2:20:d0:c0:5e:cc:70:c6:17:d2:68:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Aug 13 17:01:10 2026 GMT
Not After : Aug 14 17:01:10 2026 GMT
Subject: CN=31c5b12c0917d5855b8be30abdce49e12b3d14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:de:9a:e2:0f:2c:82:56:c6:a5:a2:58:c2:
78:18:1b:5c:41:a4:ac:6d:73:76:0d:f7:55:45:f8:
0c:b9:0c:13:43:ab:fc:fb:86:e8:ea:33:91:40:40:
04:04:b4:e1:a7:ab:e4:28:9f:25:2f:26:9b:6a:de:
e9:dd:7d:25:62:93:f1:1e:1a:0d:3e:e7:81:65:48:
90:d3:7d:11:ac:af:ba:6d:9e:26:17:05:84:7b:f1:
d3:ca:b6:26:6e:0c:7d:e3:38:be:97:92:c0:6d:87:
a7:58:18:48:1d:d8:da:3b:5e:72:31:11:9a:11:c6:
3f:54:9f:47:61:72:91:1a:84:25:bd:d0:fa:48:aa:
dd:bc:80:e7:e7:4b:e1:ec:b5:30:9c:74:73:1b:f8:
2e:f9:05:1b:f2:78:f4:2f:e6:82:bd:00:0a:3d:38:
d5:65:ff:f9:7d:19:bf:77:f7:66:b1:1d:b4:dc:40:
72:06:2e:aa:27:b1:70:83:15:d0:e5:5d:23:ac:c1:
1a:23:26:dd:39:c4:56:ea:9a:cb:9b:12:b7:81:d1:
11:91:a0:b8:c7:64:df:ce:16:09:d6:f8:37:68:0a:
1e:ab:78:2c:45:a4:6a:d2:48:7a:07:fc:3d:4c:92:
66:d3:88:99:ff:fd:93:24:81:be:22:f0:07:cf:17:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:B1:2C:09:17:D5:85:5B:8B:E3:0A:BD:CE:49:E1:2B:3D:14:EA
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:4d:f6:ac:26:5a:2e:ad:a7:3b:e0:5f:d6:4a:e3:4a:a8:
ee:75:62:c2:3f:59:17:2c:67:ae:84:f8:f6:86:95:df:c1:f0:
99:f0:04:af:4a:d3:d7:d9:99:3d:bd:d8:cf:c3:04:0b:3b:2b:
67:4d:83:50:d0:a3:d3:38:cf:ed:d3:3d:47:24:c0:cb:bb:56:
4f:28:aa:5b:15:ba:da:14:dc:08:2e:36:3e:8f:3c:37:11:4c:
7a:d3:9f:65:97:20:0f:7b:63:8e:7e:e3:3f:09:60:67:b8:47:
24:3e:a5:d6:ac:4e:6a:73:56:02:41:56:82:7a:52:3e:c9:0e:
f0:d5:d1:e7:f5:c7:0f:21:e7:f8:e8:20:f1:18:4d:fb:57:09:
fe:f4:d6:e3:84:29:8e:ac:96:41:fd:c0:19:51:e7:d7:de:7d:
d9:07:3d:8b:42:9d:64:a3:60:86:68:3a:09:e1:06:10:e4:2c:
9b:30:ac:33:c2:a8:4b:07:8e:99:69:96:fe:54:01:5b:bb:7c:
ba:ca:fa:a6:1f:33:15:c0:a8:48:e3:22:82:34:e0:ef:99:89:
2f:d5:31:96:3a:d4:3b:4c:a6:01:17:21:c1:29:dc:da:e4:b9:
01:02:f7:80:b4:a2:7c:7d:f4:20:16:21:5a:69:a6:39:e1:ef:
24:93:59:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/8EhPyINDAXsxwxhfSaEFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3
NzNmYWUwHhcNMjYwODEzMTcwMTEwWhcNMjYwODE0MTcwMTEwWjAzMTEwLwYDVQQD
EygzMWM1YjEyYzA5MTdkNTg1NWI4YmUzMGFiZGNlNDllMTJiM2QxNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vLemuIPLIJWxqWiWMJ4GBtcQaSs
bXN2DfdVRfgMuQwTQ6v8+4bo6jORQEAEBLThp6vkKJ8lLyabat7p3X0lYpPxHhoN
PueBZUiQ030RrK+6bZ4mFwWEe/HTyrYmbgx94zi+l5LAbYenWBhIHdjaO15yMRGa
EcY/VJ9HYXKRGoQlvdD6SKrdvIDn50vh7LUwnHRzG/gu+QUb8nj0L+aCvQAKPTjV
Zf/5fRm/d/dmsR203EByBi6qJ7FwgxXQ5V0jrMEaIybdOcRW6prLmxK3gdERkaC4
x2TfzhYJ1vg3aAoeq3gsRaRq0kh6B/w9TJJm04iZ//2TJIG+IvAHzxf0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHFsSwJF9WFW4vjCr3OSeErPRTqMB8GA1UdIwQY
MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt
NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh
LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyxN9qwm
Wi6tpzvgX9ZK40qo7nViwj9ZFyxnroT49oaV38HwmfAEr0rT19mZPb3Yz8MECzsr
Z02DUNCj0zjP7dM9RyTAy7tWTyiqWxW62hTcCC42Po88NxFMetOfZZcgD3tjjn7j
PwlgZ7hHJD6l1qxOanNWAkFWgnpSPskO8NXR5/XHDyHn+Ogg8RhN+1cJ/vTW44Qp
jqyWQf3AGVHn19592Qc9i0KdZKNghmg6CeEGEOQsmzCsM8KoSweOmWmW/lQBW7t8
usr6ph8zFcCoSOMigjTg75mJL9UxljrUO0ymARchwSnc2uS5AQL3gLSifH30IBYh
WmmmOeHvJJNZPA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 19:57:13 2026 by rpki-client