Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: yTqmEV+aNPxZDXcH+k5HeEks96dUF3MnxGx5GsOj/G4=
Subject key identifier: 7B:3E:32:F4:A5:A9:81:F7:BF:C6:E2:B8:32:CB:54:E2:9D:79:5D:E4
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 01A16EA4CD6200E2EB7770F183C349F0F3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0C31
Signing time: Sat 24 Oct 2026 16:00:56 +0000
Manifest this update: Sat 24 Oct 2026 16:00:56 +0000
Manifest next update: Sun 25 Oct 2026 16:00:56 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: 7UAAd5piKU95xLCcMLsaC22cCgdD1VepHC6mBlaOx9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:cd:62:00:e2:eb:77:70:f1:83:c3:49:f0:f3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Oct 24 16:00:56 2026 GMT
Not After : Oct 25 16:00:56 2026 GMT
Subject: CN=7b3e32f4a5a981f7bfc6e2b832cb54e29d795de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:57:00:0b:46:11:05:9e:95:53:ab:bd:0c:
f3:08:9c:d5:48:ae:7a:b4:d8:b5:f1:3a:b8:fa:f4:
ab:85:62:69:d7:f5:bf:b2:09:25:7c:a5:fd:3c:85:
11:ac:c9:3a:e0:17:8f:91:95:f6:8b:70:11:b4:22:
e8:f8:0a:28:81:25:e7:6f:fa:ee:3e:aa:05:99:e5:
e2:e4:e3:2f:17:32:98:e6:68:c8:ef:8c:64:bd:ab:
44:1e:f2:dd:14:29:d7:46:fa:ab:24:b2:37:3d:b6:
08:dd:c8:19:32:0f:96:f4:f5:b2:f7:04:0b:6d:81:
67:2f:82:c1:9d:26:56:aa:aa:e6:26:82:14:0a:3e:
b7:6f:de:7a:7c:88:cb:35:a2:d0:b6:e0:75:65:b9:
8a:3a:5f:ae:5a:10:75:b9:88:3f:67:47:f2:81:a9:
0b:79:08:97:e0:bf:92:d2:4d:f7:48:12:10:96:3a:
c6:bc:41:87:89:13:9b:fe:81:71:e1:6b:2b:85:54:
bf:9c:ff:56:2f:ca:ab:b6:e2:4a:36:03:fb:fd:13:
16:af:7f:21:64:3b:ef:12:c6:f9:e5:43:93:72:ab:
0b:9a:92:2c:74:5f:a9:64:40:80:cd:70:83:9c:14:
d9:b3:74:27:05:58:9c:7c:f1:2e:32:f7:94:94:46:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:32:F4:A5:A9:81:F7:BF:C6:E2:B8:32:CB:54:E2:9D:79:5D:E4
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2f:bc:3d:d5:96:37:98:64:c3:da:79:b6:36:49:87:89:92:
83:3c:5f:26:65:a2:eb:c1:7d:46:bc:41:7f:bb:82:34:3e:a0:
81:72:36:5a:56:ca:6d:59:19:b6:bf:0a:00:5f:13:10:02:17:
0b:32:c7:fc:33:c7:65:5b:80:ea:02:15:fb:0e:9d:d1:ad:98:
63:17:f3:f3:55:bd:a6:1c:45:9a:f7:37:c2:ab:bc:ca:7d:3c:
c8:c3:72:0e:79:73:76:f2:02:1f:30:55:26:41:a4:80:e6:72:
09:8b:c5:f0:c2:20:e9:51:d7:18:73:9b:22:b7:be:4f:57:3a:
f6:9c:0b:d0:ba:d8:36:76:b9:e2:29:a1:00:1f:bf:67:17:27:
d7:57:02:fe:03:b2:77:ee:f4:4b:8a:c1:0e:4f:07:20:66:96:
b7:b1:96:35:3e:8b:9b:4b:d5:58:4e:70:17:cc:06:bf:8c:2c:
9c:8d:e0:43:8a:c6:5c:9e:b5:fb:0f:d3:84:7e:a4:bf:42:3c:
57:7d:a8:7b:b7:65:05:5f:3e:30:79:f3:29:ad:bc:96:12:e5:
9f:03:b4:61:ee:71:06:9f:14:57:e8:79:8f:45:e4:5f:2d:db:
14:b9:06:1b:9b:95:e9:b5:63:8f:ba:4b:74:d2:a2:ea:18:60:
76:0c:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:40:30 2026 by rpki-client