Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json)
Hash identifier: ca9vG42UzYxjcjUURhWT1XVU5RQX3oCou6PyooQjGzE=
Subject key identifier: 10:D0:85:65:E3:51:64:54:23:F1:2F:D4:05:FE:D4:61:0A:C8:62:E5
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 01A0EE1D4A5C678E3929C7DE04C07BF4024D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
Manifest number: 037B
Signing time: Tue 29 Sep 2026 17:01:32 +0000
Manifest this update: Tue 29 Sep 2026 17:01:32 +0000
Manifest next update: Wed 30 Sep 2026 17:01:32 +0000
Files and hashes: 1: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: Juj6/u8tpyq24MjoJHWrkmT8VzKLO4ZIHf/hK8BmdnQ=)
2: eBvOcPc94TyvILGqHKvTDoMdG8c.asa (hash: tkdxw+1V9UvokM8aGYSRDXSz9Kd2tdbJUPMjzayWr5c=)
3: zXbldvcMA8dN_ba2zMyuoEGBz54.roa (hash: NXKCqlTZSC9M+ZHIabHezkycT+ugW1bhgAKQFOCfYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:4a:5c:67:8e:39:29:c7:de:04:c0:7b:f4:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Sep 29 17:01:32 2026 GMT
Not After : Sep 30 17:01:32 2026 GMT
Subject: CN=10d08565e351645423f12fd405fed4610ac862e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:ca:09:ad:00:9c:16:a1:aa:73:6e:fb:d7:
be:77:18:80:35:42:4b:27:1f:16:32:e1:6c:9a:d3:
33:aa:f2:06:65:9e:ba:f5:05:42:b8:11:2b:5d:fd:
6e:f3:8d:87:96:95:ee:2e:fd:c3:03:38:f0:07:67:
be:4e:8b:ed:a5:d7:4f:30:c4:65:9a:f8:95:2a:bb:
83:93:12:c3:49:43:cf:77:e0:a7:52:47:dc:de:15:
5f:d8:43:6b:7c:f6:97:ad:e7:36:da:2a:15:27:48:
b2:37:c7:74:70:cb:c0:74:4c:da:bc:f9:ca:74:5c:
11:19:4d:46:d3:98:47:6e:c6:28:7d:83:c1:f6:25:
bb:c1:7a:99:9c:a8:00:09:d7:28:48:98:f8:ec:02:
e7:b7:5b:51:2d:62:25:2f:77:03:cf:06:90:3b:f4:
8a:cc:d9:97:28:cf:e8:2f:86:b8:98:4c:9a:13:63:
0d:45:68:10:3c:2d:13:c9:4f:46:ea:3b:90:79:bb:
43:2c:f6:14:84:78:70:65:34:b3:ac:5a:dc:82:8f:
37:50:b9:c0:03:1b:30:96:e2:f0:6a:d2:22:06:b0:
3b:a4:a7:46:52:2a:a4:bc:04:96:03:18:0a:38:a1:
a4:64:ef:01:f1:da:f2:90:0b:cd:9b:2b:ae:1a:10:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:85:65:E3:51:64:54:23:F1:2F:D4:05:FE:D4:61:0A:C8:62:E5
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:94:83:e3:e6:84:68:94:4e:ce:fe:ea:eb:12:c1:49:52:
27:e0:9a:d8:86:36:3a:d5:53:fc:5c:e0:3e:90:27:04:d4:6f:
e2:55:3b:ac:7d:6b:86:e9:8a:12:16:20:14:77:16:c1:e0:1e:
40:7e:68:63:73:56:a5:90:42:5d:b9:9d:1e:c3:89:bf:9d:48:
03:4c:6f:2f:47:e0:01:f7:62:e0:0a:28:61:ac:33:af:d1:be:
f4:6b:f7:fa:79:ca:80:e0:af:66:b6:7d:38:56:dc:79:29:20:
2c:4f:80:67:e3:f8:f8:4a:2d:07:fb:7e:e8:f9:49:81:b8:18:
9b:a8:f8:1b:f5:d3:fb:c5:ac:68:0f:b8:b2:93:ff:b4:ea:91:
1a:00:a6:13:e7:b3:70:f2:8e:0e:1f:bc:aa:fc:ff:ef:2b:d9:
e9:a5:20:de:b7:44:01:5d:47:f5:5f:b3:cc:6b:fb:86:dd:b3:
5c:46:fe:81:02:2b:95:7e:70:bc:bc:48:32:1e:91:b7:50:d2:
cb:bf:b0:4d:80:86:12:6d:8f:ae:4f:96:5a:30:e7:00:e8:65:
8c:f1:cc:3e:53:77:ef:f1:e5:f4:47:69:f3:fc:89:67:20:9f:
b6:57:49:5f:98:84:3a:46:c7:68:8f:2e:5d:c9:1f:64:ae:9c:
0b:a5:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:07:34 2026 by rpki-client