Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: +nbQ8yb/hoLLQ+f97w52rnHRZMuf4nwhJvBGYLNXEhY=
Subject key identifier: 91:02:7D:B2:66:F9:0C:AB:B2:9D:E2:E0:2E:B1:5F:6F:4B:9B:4D:EE
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019F183072C38F7EEF19BDDC02038F02A7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 11:00:55 +0000
Manifest this update: Tue 30 Jun 2026 11:00:55 +0000
Manifest next update: Wed 01 Jul 2026 11:00:55 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: iYY1q+ybq5qNnBDJxhdEDYsOaztMLxbw4NCmfyA28WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:72:c3:8f:7e:ef:19:bd:dc:02:03:8f:02:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Jun 30 11:00:55 2026 GMT
Not After : Jul 1 11:00:55 2026 GMT
Subject: CN=91027db266f90cabb29de2e02eb15f6f4b9b4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:15:7e:7f:05:13:2c:7b:b1:89:df:46:8d:
b3:ac:bb:01:db:53:c1:1c:bc:90:0e:75:64:f4:90:
32:23:40:b7:f3:9c:87:a6:bc:0e:a5:dd:87:7e:89:
e9:44:20:31:85:8f:43:f6:db:88:6d:fe:42:d0:ab:
7d:0a:10:f7:be:d4:96:91:12:5c:95:1a:7c:53:3a:
47:42:fd:cc:a6:f8:8b:a5:b9:44:57:ac:af:79:f5:
94:2a:33:84:36:87:43:e9:e9:4a:be:5d:f0:b6:3d:
8d:c6:09:2c:47:00:a1:9a:98:fe:07:8d:3e:4d:d9:
e1:cb:2e:a8:49:7b:95:09:ec:0e:32:f8:f6:ee:93:
75:ae:9b:16:d3:d4:dc:7c:5c:9a:67:78:e5:dd:2e:
be:c0:a2:29:b7:bb:9c:cf:91:dd:f5:a7:6d:08:6d:
4f:81:51:c5:c2:e8:35:2a:a1:85:65:7a:1d:23:bb:
a0:c8:62:ce:bd:a5:d1:70:86:39:0f:e5:4d:8c:c5:
64:e2:a5:ff:ac:09:cf:10:67:df:64:c6:da:af:b3:
74:7d:65:c4:b8:c2:91:ec:c6:dd:96:7a:95:11:9e:
3b:ac:e8:7c:81:7c:bf:68:62:8e:90:bb:dd:96:ac:
f7:a7:55:b6:b8:c5:05:bb:97:77:d6:df:1c:24:bc:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:7D:B2:66:F9:0C:AB:B2:9D:E2:E0:2E:B1:5F:6F:4B:9B:4D:EE
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:eb:e7:f3:b5:e5:0a:cf:ea:d2:3c:d0:b0:a7:6c:c2:45:
b2:69:f8:cd:e9:9a:ae:09:95:26:d7:ee:c0:88:45:fc:29:48:
25:21:f8:a4:7f:c5:3e:eb:f2:d0:63:1f:0d:4e:85:53:d1:9f:
0f:39:74:35:b7:98:18:bc:ec:74:25:6f:f5:95:b4:38:62:aa:
82:58:12:ee:0f:d2:ac:7a:d7:6d:68:54:46:c3:bd:c6:3f:26:
d8:3a:19:39:2c:a7:a1:41:50:a3:f6:f4:7c:4d:e4:75:42:5d:
af:e3:46:7b:4e:73:8c:16:5e:82:e9:63:71:c7:38:ad:10:a5:
6f:d7:f5:52:7d:7a:aa:67:34:60:4e:3f:d7:0b:8c:08:2e:58:
c4:41:04:e3:25:b0:ec:d2:0b:52:b3:68:1f:83:90:6a:ec:49:
12:4d:17:ab:0c:fe:6b:71:7d:5e:e0:37:cb:b1:89:e5:1d:1d:
ab:88:cb:35:ee:c6:d7:62:7a:5f:c9:e1:7f:c7:d9:70:12:a6:
1a:16:3f:1a:81:67:96:da:a1:1f:88:94:ac:9a:64:97:79:0d:
74:18:d3:c3:b7:d1:cf:df:70:6f:0b:1d:fc:48:3c:b8:76:7d:
3a:e2:21:be:f9:1f:32:08:74:7d:16:f3:df:e7:2a:a1:ef:5b:
a4:ef:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:12 2026 by rpki-client