Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 8nsMDV9hYvsbvtcSiPIKHC2Q0qrDJvj1MNPoEK5AKLY=
Subject key identifier: 58:C5:48:79:D8:53:0E:5B:2F:63:7C:10:2F:7F:E5:3B:E0:92:6E:EA
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01A119E29BB46D3B2AC43DEB2487A16C244C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 05:00:43 +0000
Manifest this update: Thu 08 Oct 2026 05:00:43 +0000
Manifest next update: Fri 09 Oct 2026 05:00:43 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: ahyAUQTqBIzUVjbiRH8wdr6uEB1eAY/Z7HakUyjYyXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:9b:b4:6d:3b:2a:c4:3d:eb:24:87:a1:6c:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 8 05:00:43 2026 GMT
Not After : Oct 9 05:00:43 2026 GMT
Subject: CN=58c54879d8530e5b2f637c102f7fe53be0926eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:97:95:09:22:14:34:49:c6:12:95:43:87:
66:7f:e7:6e:22:49:2d:ce:e5:1c:66:3f:8f:6c:4c:
1f:92:5e:9e:34:66:75:0e:4f:94:6d:e1:c8:b5:ae:
d1:47:b3:0c:6f:37:db:31:2d:9f:28:20:60:ca:a5:
80:2d:ff:c1:26:37:bf:b8:be:d6:97:7d:06:f9:4e:
9d:62:e5:6c:44:d4:19:1a:87:42:c0:9d:f3:4b:2f:
51:92:b4:a6:72:cd:2a:bd:c7:48:4f:40:8b:7f:15:
aa:3b:b7:a4:8f:31:d1:08:95:58:7a:f6:ee:72:09:
01:20:1a:0d:31:65:cc:76:77:1f:e2:0c:96:72:0f:
cb:97:20:60:0e:8f:a7:f2:dc:b3:2e:38:bb:47:7a:
da:d9:be:11:26:5e:26:8b:82:da:bb:21:23:f8:1c:
ee:f1:6b:a5:0a:c6:c5:f6:c8:4d:06:8f:fe:0d:b3:
d3:44:7c:d4:9e:5d:c9:f0:ba:f3:0b:d9:c7:30:92:
1e:1c:29:76:52:b9:8b:68:dd:73:4f:ad:c3:8f:d2:
09:26:85:fb:f4:7e:96:a8:51:db:d4:58:3e:69:56:
68:ac:f4:5e:85:ae:8b:0a:f3:d9:44:8d:a2:cd:45:
bf:08:d7:4e:b5:30:91:25:18:e5:14:1d:24:81:76:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:48:79:D8:53:0E:5B:2F:63:7C:10:2F:7F:E5:3B:E0:92:6E:EA
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:a7:a8:06:31:9d:d5:21:1e:6c:df:8c:29:10:b8:75:50:
9e:9a:40:bb:11:57:a7:db:7d:a2:16:1c:1a:76:8d:3c:70:de:
d6:1e:6a:f4:b4:65:fa:56:64:8a:a8:8c:31:e4:7c:95:68:23:
65:3a:bb:f6:19:be:98:47:6a:58:28:0e:46:67:bc:73:5b:c8:
37:d4:02:72:ac:bc:15:cc:25:c0:bd:29:23:8e:f0:c2:f2:fa:
c2:fb:73:d6:95:d0:36:cc:38:7b:28:4c:ba:32:1c:b0:a8:87:
1e:62:76:cf:ef:4a:0c:ad:c1:0e:94:af:14:4a:2f:71:35:66:
21:9c:ab:f2:e8:ef:cb:11:f6:a7:7b:99:79:2e:9c:c9:ec:79:
8b:02:f5:b3:f0:ea:9d:6a:42:56:38:6a:bc:f0:5e:40:f8:21:
b6:1b:29:b1:f6:28:7b:20:f8:fb:ef:96:f3:9b:77:61:e0:4a:
9b:f4:8e:81:37:51:92:08:19:8f:3b:5c:64:09:60:17:78:22:
66:fe:56:33:ae:5c:66:ff:d3:78:8f:dc:e0:83:05:91:31:bf:
3c:9e:21:29:cc:b4:5c:cd:63:30:3c:44:2b:82:7b:3c:f0:cb:
81:87:fe:3b:d7:24:ce:90:35:28:a6:dc:13:71:b4:6b:c8:7d:
be:a1:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:55:50 2026 by rpki-client