Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: gKEe82Vl0pB5RCxj2nMtK3N+u5VcNcwig2F5dWqjkcU=
Subject key identifier: AC:9F:0B:00:67:02:0F:CD:C1:BA:8D:44:E1:78:73:6B:A5:32:8E:AD
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019FA4BCDC9C29FA7358CB4A17AEB362C247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 09C5
Signing time: Mon 27 Jul 2026 18:01:08 +0000
Manifest this update: Mon 27 Jul 2026 18:01:08 +0000
Manifest next update: Tue 28 Jul 2026 18:01:08 +0000
Files and hashes: 1: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (hash: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs=)
2: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
3: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: qIi7iWB8RXjZRVw9tajSBybi1wGNoANbG/T0FGEyoJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:dc:9c:29:fa:73:58:cb:4a:17:ae:b3:62:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jul 27 18:01:08 2026 GMT
Not After : Jul 28 18:01:08 2026 GMT
Subject: CN=ac9f0b0067020fcdc1ba8d44e178736ba5328ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:c0:f6:4a:fa:a9:3c:7f:cf:85:00:75:6d:
1c:81:42:97:2c:71:fe:d6:d8:6b:10:18:86:82:f8:
1c:4c:6f:32:7b:36:fc:e4:86:33:65:ca:9d:fe:e8:
8e:68:85:27:30:6e:d3:c6:55:b2:f0:8f:e0:e4:fd:
04:ab:57:83:ab:0e:75:3d:5b:97:5e:47:dc:16:9c:
4d:6e:9d:93:57:f7:a7:6f:1e:9c:13:15:65:33:6c:
fb:66:86:70:fd:77:e0:97:34:fa:37:37:71:60:71:
40:81:67:c0:5d:04:71:3b:ef:94:2e:64:4b:a0:18:
75:d2:5f:2e:1d:dc:e7:35:c0:7a:b8:2c:f4:ff:48:
9e:f7:c2:53:6a:70:50:7a:f5:99:e0:2d:51:e1:b5:
3e:03:08:f3:cf:5a:bc:36:99:7a:86:b1:10:67:34:
38:54:3f:33:cc:37:7a:45:89:da:79:10:82:35:97:
e1:35:8a:9e:6b:e5:b2:97:ef:ee:6b:a0:3c:6a:77:
3e:d4:67:b3:6b:1b:39:c7:93:56:86:2e:78:c0:08:
42:e8:88:4d:4a:4b:bb:aa:c6:8c:cd:8b:fa:00:e9:
c4:d8:2f:62:83:cb:90:bf:89:b6:75:11:78:81:a3:
8e:a1:f0:46:7d:00:32:cc:5e:a7:a6:5f:ea:1f:33:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:0B:00:67:02:0F:CD:C1:BA:8D:44:E1:78:73:6B:A5:32:8E:AD
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9d:c0:f6:68:4c:66:06:45:b1:1d:2e:f0:db:7c:b5:45:f2:
5f:0e:9a:76:a2:7c:bb:73:ce:57:83:82:b2:64:03:2f:a5:49:
80:d7:ff:d6:2d:09:8e:2a:1a:7b:fd:f0:8c:10:19:6d:e8:f4:
a4:3d:eb:d1:63:05:48:b1:da:41:70:fb:08:b3:cb:30:a7:80:
04:45:97:4f:79:33:67:90:fd:46:76:e6:8a:d3:72:96:26:69:
59:a9:3b:b1:38:0d:68:a2:9c:83:8b:53:a3:eb:0e:f6:53:93:
93:2f:59:b6:62:55:50:aa:61:62:85:82:ef:f0:52:d9:9c:c3:
b7:d5:fa:74:0f:e0:90:65:cc:ab:6d:1b:16:66:78:71:dc:61:
53:c8:31:19:c0:a4:f1:da:13:20:85:27:2e:a4:dd:f6:e2:4f:
05:1a:bb:2e:21:10:68:d8:d7:3b:41:eb:c7:f0:fc:a2:8e:33:
0a:52:15:1b:37:76:87:6e:37:2b:90:2f:14:f4:35:9c:ae:e8:
49:9a:9e:c7:f7:c9:cb:b8:ad:1f:76:6e:11:52:6a:e3:49:3b:
4b:c6:7d:cb:85:5b:80:7c:0a:af:d3:b8:7a:e1:b7:48:d4:eb:
9f:01:30:91:bd:12:9f:72:7b:7f:59:dd:30:66:b6:98:8e:d4:
80:27:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:42:32 2026 by rpki-client