Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: 9izYrwyR0KNGQBOXZe/NV8f6WKpDjjz8jc8XyuhSE5I=
Subject key identifier: 92:98:52:0F:8F:65:33:F7:8C:11:50:F1:79:CD:45:B6:93:0F:C3:EF
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01A08B67DB0C5DAE6D82FA0939094685A4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0D41
Signing time: Thu 10 Sep 2026 13:00:34 +0000
Manifest this update: Thu 10 Sep 2026 13:00:34 +0000
Manifest next update: Fri 11 Sep 2026 13:00:34 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: GxkjOYXJl3aCPLPfYVXWtZGG6bleE0ktRVrtgocN9yo=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:db:0c:5d:ae:6d:82:fa:09:39:09:46:85:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Sep 10 13:00:34 2026 GMT
Not After : Sep 11 13:00:34 2026 GMT
Subject: CN=9298520f8f6533f78c1150f179cd45b6930fc3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:d2:c1:1f:70:66:7d:f0:a0:c5:5a:74:25:
c5:80:c4:c0:97:58:07:3a:b4:f4:08:0d:55:e3:14:
8c:1c:2c:d4:fb:90:3e:40:37:fd:10:68:0e:4b:ae:
fc:10:e0:dd:0b:7a:41:5d:58:76:71:6f:18:97:87:
2c:88:59:3f:da:4a:b6:e3:f6:2e:01:19:a0:4c:0b:
00:3d:d6:66:8c:ad:24:f9:61:78:b6:1f:64:f5:3d:
a3:4b:23:f6:69:01:ee:57:0c:b8:0f:c6:0d:aa:81:
8e:3d:85:8c:d5:36:8c:4e:6b:b9:17:0f:74:13:a7:
8a:62:71:e3:c6:8a:8d:e0:32:cd:21:f8:0f:82:31:
96:d6:7e:a4:d9:2a:ae:bd:34:51:30:67:64:f5:13:
fe:11:4c:11:4e:4d:04:11:d4:13:2e:b7:bb:61:6e:
9d:ac:b1:07:da:36:eb:04:c6:ad:b5:66:02:72:54:
2d:27:f0:86:6b:b4:c3:80:f0:fc:b1:0f:73:a2:cc:
bc:3f:f8:5a:98:7d:82:09:d5:b1:8a:0a:f7:bf:d4:
58:ec:e9:49:53:a4:ce:53:12:a8:50:16:00:c2:20:
26:c0:a1:76:3d:26:45:4c:5d:17:f3:39:3b:d5:59:
d5:ea:b4:1e:ce:35:2f:1f:37:2b:96:1d:56:d0:5d:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:98:52:0F:8F:65:33:F7:8C:11:50:F1:79:CD:45:B6:93:0F:C3:EF
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:56:00:99:23:db:b3:20:21:7b:32:ae:6b:c7:60:ec:02:
f8:89:0c:ae:4b:61:87:90:01:9a:a6:d0:2f:c4:a4:1b:5b:20:
d1:94:e7:8e:d4:cc:ee:4f:8a:21:62:94:1d:86:4e:e2:0d:79:
aa:a6:4d:63:84:24:d3:d0:e9:8e:b1:2d:12:c1:c9:47:71:1f:
39:56:0a:30:43:63:8a:2c:14:a4:64:01:8f:45:d9:69:81:1b:
e1:b7:0d:5f:34:27:d7:e8:3a:78:8c:5e:5e:57:5b:e0:9b:c5:
5c:82:fd:fb:3a:c9:c0:24:08:0f:77:aa:b9:d1:50:9f:36:52:
f7:ca:5a:15:3c:69:56:d3:92:e1:dc:02:97:ae:81:46:2e:38:
b2:8d:35:87:02:ac:13:e9:f1:71:23:f6:3f:c7:7d:75:59:6a:
41:4f:2b:4e:e4:c6:10:0c:f0:ed:2c:5e:74:a1:3c:22:a9:bd:
ed:81:94:07:be:36:73:c9:d4:3c:77:77:7c:32:c0:26:ff:ea:
4e:21:2a:a0:44:66:38:06:db:f2:db:05:c9:b9:00:a1:ee:6d:
7e:7a:3f:53:d4:cd:15:eb:17:16:35:14:fc:44:78:eb:58:eb:
50:0f:85:82:56:8d:2f:a1:19:f3:66:03:17:c0:b3:01:5c:69:
6c:30:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:23 2026 by rpki-client