Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: xLin0UCo9Lpnso3lhZNq2uMTDPMWWZcmkTmAAN/Apnw=
Subject key identifier: 4C:EF:47:92:9C:46:17:DC:0E:89:B4:27:D5:2A:91:4C:D0:BC:B0:E1
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 01A08D1F4AB7D3E68CD0D4770D498E693E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0D81
Signing time: Thu 10 Sep 2026 21:00:32 +0000
Manifest this update: Thu 10 Sep 2026 21:00:32 +0000
Manifest next update: Fri 11 Sep 2026 21:00:32 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: 8NjbEs/t4nSW37w4UTN4Q4qtuoiTn1Ikoc90u9qoL8o=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:4a:b7:d3:e6:8c:d0:d4:77:0d:49:8e:69:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Sep 10 21:00:32 2026 GMT
Not After : Sep 11 21:00:32 2026 GMT
Subject: CN=4cef47929c4617dc0e89b427d52a914cd0bcb0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:19:f5:6c:c9:97:50:8b:fd:e6:f3:ea:d0:
7e:fc:f5:e0:54:ad:5d:99:7e:c1:ad:45:ac:2f:8c:
15:95:6f:ec:e2:fd:a7:de:af:fa:9f:2e:ee:58:1a:
49:00:de:96:55:b2:49:52:10:c7:3f:ff:dd:ba:c2:
d6:05:03:d0:38:4c:57:b1:40:f3:92:d3:9f:dd:b5:
e2:48:49:44:a7:04:75:ec:73:de:34:c5:4c:f6:3d:
a3:9a:fd:12:8e:8a:28:58:a3:0e:9d:0d:c2:bd:c0:
4c:6a:f7:53:07:20:ae:d1:9a:53:7e:f7:d5:96:81:
82:1e:35:d0:f4:89:1f:6f:4a:37:f6:97:c0:b5:f0:
f6:8d:7b:04:35:1e:58:8a:7f:8e:9d:59:34:88:e2:
ca:9f:9d:6e:98:0f:26:fd:29:a0:46:3d:51:6d:b9:
68:bf:01:5a:1f:27:83:bd:0c:96:ca:ac:bb:6a:0a:
8d:e2:89:73:2a:cf:75:10:67:67:c8:bf:d4:7f:7e:
06:51:02:e8:74:39:1d:17:75:98:05:f4:d6:65:b8:
88:4d:91:cc:73:d3:b8:20:7b:cc:ec:fc:a4:cd:c2:
aa:21:79:a5:84:41:e3:11:2d:f0:d2:de:2c:75:e9:
5b:01:e2:17:2c:ce:01:60:79:2d:ab:27:bb:6e:dd:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:47:92:9C:46:17:DC:0E:89:B4:27:D5:2A:91:4C:D0:BC:B0:E1
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:fd:7c:5b:9c:c0:81:31:9a:8c:9f:ff:bd:8f:3f:40:63:
b8:4c:cd:5b:f6:1f:18:0f:66:70:f6:b8:15:70:c5:db:76:fb:
d4:97:96:01:00:1b:4f:a0:c4:18:4c:4d:7f:5b:40:fe:08:71:
aa:0c:35:ce:d5:44:aa:21:9b:f2:3e:e6:a6:e0:17:07:8f:b3:
6e:b6:67:b4:7f:6c:cc:07:6c:ab:da:ed:ea:a9:5f:ab:52:17:
f1:76:ae:1e:bc:f3:08:c9:c4:fc:7f:f6:fb:89:e8:8f:e6:90:
2d:68:bd:d4:1b:69:a5:28:05:fe:14:a5:15:51:66:af:f7:c5:
3a:07:5a:50:c4:f2:04:8d:30:e5:e5:65:91:35:56:f2:eb:4d:
cf:7f:cd:aa:29:a6:0a:ec:81:8e:8c:17:49:27:2b:30:fa:58:
c2:91:30:ed:ca:0d:e9:6a:b8:3c:90:71:b6:f8:a8:85:6a:17:
30:06:dd:4b:2a:64:46:15:55:b0:1a:ec:5c:7a:93:da:55:de:
00:30:51:d7:5f:d9:8f:3a:55:51:31:2e:43:c7:0a:db:82:c7:
fb:81:84:70:98:11:ca:ee:5b:24:09:98:d0:a3:18:2d:8a:ca:
f7:cc:63:1f:e6:d3:c2:ee:0b:d1:8a:f1:37:30:5f:9f:85:cc:
d4:f5:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:02:31 2026 by rpki-client