Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: I5dqKqzMo5gEhhraoyJPlHUkFBJXLEaqV43X1H48x+g=
Subject key identifier: 19:D6:51:E8:0C:DC:59:C4:D0:C3:A3:F2:02:DC:5C:44:68:B3:06:5F
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 01A1618DC68793A9E6808E60E72340B90CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 17A6
Signing time: Thu 22 Oct 2026 03:00:43 +0000
Manifest this update: Thu 22 Oct 2026 03:00:43 +0000
Manifest next update: Fri 23 Oct 2026 03:00:43 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: ldg+4r+NoXolXfVHxfWzeWYNQsN71/OfpN2YOHdY2H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:8d:c6:87:93:a9:e6:80:8e:60:e7:23:40:b9:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Oct 22 03:00:43 2026 GMT
Not After : Oct 23 03:00:43 2026 GMT
Subject: CN=19d651e80cdc59c4d0c3a3f202dc5c4468b3065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:9b:20:49:ad:91:d1:49:98:e3:0d:e4:c2:
dd:74:03:78:ea:1b:99:5e:7e:e2:d1:d6:94:9c:fc:
e4:3c:ed:8d:ad:21:04:3f:26:87:c8:4b:69:ba:88:
3a:91:d8:9d:c2:aa:30:9e:26:3d:91:d1:e7:7e:5b:
fd:e4:a4:c2:c4:e8:c0:b2:20:65:d6:f0:4b:cf:f5:
91:33:f4:79:b1:e1:63:c0:38:ae:f6:e6:6d:1c:cd:
90:b5:bb:1b:bb:57:b5:e0:b3:df:9b:df:de:64:a6:
0b:65:8c:66:0a:3c:87:a5:1d:01:8f:93:ce:60:f7:
f8:8d:03:91:c6:70:39:77:92:2d:c0:39:71:14:05:
df:80:a6:90:d4:98:8c:a9:af:22:66:72:b7:af:ac:
e2:84:39:75:04:2f:ca:3b:3e:71:b5:d1:18:9b:e4:
87:3d:15:d0:87:2a:e2:8a:11:9f:02:8b:03:de:60:
ef:91:5e:62:68:4e:f7:ec:0e:00:3b:26:18:0c:58:
00:01:4d:fa:ed:da:50:c2:61:72:0f:b9:b3:53:4a:
6f:13:06:58:ea:e9:96:43:c8:4d:3a:96:db:b3:11:
e7:2e:96:00:4c:23:a1:90:70:d7:06:93:f5:88:f2:
00:1a:63:e3:32:93:fd:25:89:78:e2:52:8e:d2:ab:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:51:E8:0C:DC:59:C4:D0:C3:A3:F2:02:DC:5C:44:68:B3:06:5F
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:be:0a:4b:14:fa:c2:6a:a7:c4:3c:30:6f:7c:68:63:6c:d0:
2d:38:82:2f:62:c3:57:93:b4:e7:41:8a:b0:3f:1e:3a:d8:f3:
8c:7f:0b:19:9b:1a:ce:49:3f:cd:d1:3b:e2:0f:e3:d9:61:44:
a2:e4:55:5d:e5:dd:b4:b7:46:76:af:04:72:67:fb:3e:c6:96:
e8:a2:7f:ce:f8:6b:ae:ff:a7:d3:14:80:41:b5:57:fd:e9:e6:
2e:d6:67:84:17:53:60:a4:fb:ad:a2:38:5e:6d:3b:d7:9c:f4:
87:94:e6:cc:ec:20:67:cb:e6:89:62:47:dd:ed:b2:4a:11:e8:
bc:3a:e5:68:c7:7a:ad:d4:a8:c3:5f:1d:1b:c1:38:14:d9:6f:
21:0d:50:0d:a6:60:71:3d:b0:c0:2e:72:1a:43:41:7a:ba:a4:
ce:d0:21:d1:65:a0:44:e9:3b:20:ae:0a:e0:c0:17:96:5c:8f:
d5:af:a5:43:f0:bb:52:29:13:bf:d4:2f:04:76:d9:c7:a8:e4:
42:3b:85:cd:06:b2:5b:00:f8:56:53:62:49:78:44:50:db:5a:
cf:e9:2a:1c:a8:b1:18:56:6b:ff:2e:02:0b:c5:2f:38:77:6a:
31:d4:74:b2:84:ed:b1:6b:6e:84:1e:1a:9d:17:b6:e6:10:dd:
d2:1e:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:59:09 2026 by rpki-client