Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: YL2G/OITHB3kIQPLBZDDZ+CmbmLXvxk4ImOFboq35G0=
Subject key identifier: 76:96:AA:2D:AD:53:59:0D:BB:33:F6:FB:0D:E0:5D:A0:82:7D:63:1C
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01A125796A4E3E32B0F23ED9C3B476DCF452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 11:01:16 +0000
Manifest this update: Sat 10 Oct 2026 11:01:16 +0000
Manifest next update: Sun 11 Oct 2026 11:01:16 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: U/X6qW7DNOJaZMG8gGBjYrd78TJXPxXCbD/Te+a3QO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:6a:4e:3e:32:b0:f2:3e:d9:c3:b4:76:dc:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 10 11:01:16 2026 GMT
Not After : Oct 11 11:01:16 2026 GMT
Subject: CN=7696aa2dad53590dbb33f6fb0de05da0827d631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:64:8d:99:7c:69:2f:62:af:ee:0a:ee:be:
8b:a4:1b:c5:83:75:d7:8f:88:ef:8e:86:93:d1:66:
50:da:0f:fb:a8:81:0a:8e:cb:56:4a:49:32:8a:8d:
91:e2:41:e3:31:71:06:5b:a8:ff:b1:12:d5:70:af:
18:bf:5f:a7:ee:4c:a8:67:84:eb:10:87:f9:fc:c4:
d5:0e:92:f6:c2:2c:af:f6:43:ea:a5:ac:3b:7f:13:
ff:f1:c3:d2:7f:c1:69:26:f3:28:f7:74:c6:bb:e0:
d1:64:5b:18:c4:c3:5d:18:d4:f7:a9:4c:c6:11:4b:
24:e7:7f:23:8d:a1:48:28:50:fa:02:82:35:4a:73:
f7:9b:f6:ed:16:b0:2e:32:7d:51:2a:bb:af:4f:72:
57:76:a3:27:cd:df:92:93:ba:c8:9f:a5:c3:9c:a6:
76:2a:4d:b1:98:7a:5b:9d:a6:b0:6e:e9:43:dc:f5:
3f:f0:03:90:aa:5b:b1:89:4a:ba:98:89:5f:00:f1:
22:b1:8c:48:e6:c7:78:20:5a:db:cf:c9:61:8c:7e:
dd:f5:64:e0:d1:c0:d8:5e:39:d1:30:67:6f:fa:e2:
f0:37:8e:ac:be:72:f3:a8:f1:86:20:28:c0:2e:9e:
1c:5b:5f:24:3b:87:84:68:b7:71:63:99:1e:38:c4:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:AA:2D:AD:53:59:0D:BB:33:F6:FB:0D:E0:5D:A0:82:7D:63:1C
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bf:ef:ad:66:dc:26:49:f1:29:43:32:6b:ea:3e:a4:5e:51:
62:00:dd:87:be:94:6d:71:cf:f1:17:43:18:2e:e5:09:1c:d1:
a0:6e:db:ed:9d:fb:bb:36:c2:af:1b:50:68:2d:1d:f4:9f:dc:
1e:e2:e1:da:6b:ed:51:f4:a4:74:3f:54:94:92:28:73:e0:af:
1b:b4:41:bc:d8:d7:50:27:34:44:df:61:ae:ac:b9:5d:07:72:
17:34:95:7b:20:ec:91:91:86:53:70:9e:51:5b:4a:54:c5:6e:
bb:88:0a:7d:0b:1f:85:40:9b:80:c6:39:37:6f:ed:2c:12:9a:
76:33:71:0d:1e:05:f5:f2:cc:6a:1d:7f:34:ad:e2:53:b0:e3:
53:b7:83:fe:59:02:eb:8d:92:27:8b:26:c0:6b:9e:d8:9b:7e:
06:1f:af:70:73:b4:f1:8b:84:1e:17:dc:7d:89:7d:22:69:c5:
e6:59:1b:7f:47:88:6d:8d:c3:f5:7e:e4:cf:c3:0e:79:e7:69:
42:d2:9a:11:7a:9f:0a:fa:ca:bc:17:54:b8:2d:33:c9:73:ac:
69:a0:f5:33:75:e6:d1:91:82:1c:1d:88:d7:a7:0f:e1:a5:56:
67:83:c4:a4:89:a4:fd:5c:49:38:64:8d:46:72:72:ce:b2:10:
3a:16:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:25:23 2026 by rpki-client