Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
File: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft (raw, json)
Hash identifier: D3Ai0k5Aqkg7WG5QjSsNJKvQYvze6ydU1CJeAQBkGyo=
Subject key identifier: CF:28:8C:D8:F1:58:78:4F:21:70:32:71:54:16:94:EE:6F:6A:82:14
Authority key identifier: 70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
Certificate issuer: /CN=70857756acf339fac229a1c9e9c57c4895efa91f
Certificate serial: 01A08B315393BBDCE24FBEFF94E371E010B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
Manifest number: 011A
Signing time: Thu 10 Sep 2026 12:01:00 +0000
Manifest this update: Thu 10 Sep 2026 12:01:00 +0000
Manifest next update: Fri 11 Sep 2026 12:01:00 +0000
Files and hashes: 1: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl (hash: R4knPprwrCd0p97LrBmGESlkGteAYQByy/mfVTgA+z0=)
2: vV6KIbjbHUkMbwKENIBHTTXDdrU.roa (hash: EOt5kopYpNaYTBOsxtYCd3AAd6VIO4EI/DljsaKcEE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:53:93:bb:dc:e2:4f:be:ff:94:e3:71:e0:10:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70857756acf339fac229a1c9e9c57c4895efa91f
Validity
Not Before: Sep 10 12:01:00 2026 GMT
Not After : Sep 11 12:01:00 2026 GMT
Subject: CN=cf288cd8f158784f21703271541694ee6f6a8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:45:54:dc:02:90:38:50:67:4b:f8:73:25:
14:d1:f8:b8:24:0a:88:f3:f2:8e:3c:0b:b6:15:8c:
74:a1:39:ed:41:29:6d:00:1d:15:60:8d:5a:86:2f:
95:a6:f3:41:e5:6b:2c:71:22:bf:de:f4:bd:77:cb:
b1:a2:0f:59:e3:c1:24:d2:45:83:a0:74:ec:0e:2d:
af:d2:3d:c6:70:28:1f:98:30:c2:95:d7:ef:95:d2:
8e:a1:d8:54:22:78:19:94:f1:39:e9:51:43:7e:72:
af:47:67:9f:ba:c6:80:a4:81:87:2d:c3:28:fd:7f:
6b:c8:cc:aa:57:ee:26:c9:1d:ba:e3:93:c0:32:dc:
bf:be:da:76:8f:5c:60:fd:3e:5c:f2:59:a6:1b:51:
06:1a:89:65:ab:b1:01:80:da:67:d0:84:19:35:9c:
b4:3d:ae:fe:14:54:e1:84:5d:97:bf:fa:25:c8:f1:
d6:81:a9:c0:b4:ef:d8:90:f9:49:68:5b:57:8b:de:
b7:62:31:c6:e3:99:af:91:3c:57:28:14:e8:24:6c:
05:9e:df:94:4a:40:a3:3d:eb:c2:35:fd:ed:f3:e7:
bb:22:1c:0a:a3:04:05:b0:87:37:c0:17:81:a9:da:
fa:d6:19:96:cc:2b:8c:12:ca:aa:8c:92:33:57:8b:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:8C:D8:F1:58:78:4F:21:70:32:71:54:16:94:EE:6F:6A:82:14
X509v3 Authority Key Identifier:
keyid:70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:6c:85:b5:55:aa:db:ed:e8:ab:95:34:2d:e5:28:32:8e:
d1:a6:d1:c2:95:ee:1a:c4:49:a3:59:89:53:ed:fb:88:df:2f:
96:90:47:e0:1a:d5:76:23:a8:c8:4e:7b:a2:fc:63:92:ec:ba:
a2:2d:5c:3e:61:30:71:be:c7:50:93:bf:66:ff:39:12:57:8e:
b8:95:75:61:f6:7b:59:52:ea:63:9b:42:7c:8f:80:d7:5f:b7:
5c:79:df:37:1d:6c:67:20:3e:0b:33:c2:4a:13:31:ec:ba:49:
45:7c:9e:bd:29:8f:e0:77:aa:6a:ce:1c:c8:e9:1a:c0:d6:7c:
94:39:83:37:7f:c7:30:ed:72:9b:5b:8b:94:37:e9:e4:68:12:
3e:e5:d4:71:8f:ed:5d:72:77:c3:58:4f:3d:58:5a:a9:e6:fc:
92:5f:68:19:d6:79:5d:47:af:cc:62:36:b0:58:d4:42:54:32:
c3:de:cf:90:bc:f8:13:58:39:60:fb:08:6e:8e:08:2b:72:95:
28:62:9a:59:1b:39:8d:2f:6d:85:d8:e4:4c:f8:f5:df:31:2d:
76:60:a5:36:81:c8:40:a9:79:df:b3:b7:28:6e:2b:63:f8:54:
91:0b:75:9a:85:ae:c7:32:b6:7f:f7:bc:9a:29:ec:b5:ea:0f:
05:f8:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:57 2026 by rpki-client