Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: 2DpY99va+VNpcHbBt5pYDxLPK7PxfxTzX4QCVn2S9v4=
Subject key identifier: 99:44:89:C8:04:D3:DD:3A:74:2B:55:0D:AC:FB:AD:19:B9:6D:5A:C3
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01A17EBD0CC6CFEE85163ECB744EFF27F80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0DBF
Signing time: Tue 27 Oct 2026 19:01:21 +0000
Manifest this update: Tue 27 Oct 2026 19:01:21 +0000
Manifest next update: Wed 28 Oct 2026 19:01:21 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: vOAgOoCZL7bRQF9Us5AB45J6Uzr7fpt01SUkcl4ChK0=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:0c:c6:cf:ee:85:16:3e:cb:74:4e:ff:27:f8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Oct 27 19:01:21 2026 GMT
Not After : Oct 28 19:01:21 2026 GMT
Subject: CN=994489c804d3dd3a742b550dacfbad19b96d5ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:0c:51:e9:97:4a:e1:68:17:de:ed:ff:4d:
9b:ec:8d:9b:5b:fd:2b:fa:d6:8e:b8:96:dc:13:0d:
cc:87:a2:c9:73:21:53:16:1f:46:d1:b8:a1:b0:25:
47:47:0e:c5:35:14:5d:b3:ae:1d:c3:30:52:09:e3:
82:1a:72:8a:20:58:d8:bd:d7:a7:13:40:92:b4:a2:
c1:4c:3b:78:c0:e4:d7:1d:1e:1a:17:0e:07:a5:65:
c1:bb:61:42:fb:a2:48:40:7a:59:41:7e:af:62:15:
52:07:46:0b:32:32:b8:38:7d:46:05:f7:26:03:4a:
15:34:fd:81:2a:b6:96:d7:81:8c:16:c6:e4:67:9c:
16:70:a0:0b:b3:5e:17:d1:6b:96:c5:14:77:d8:d3:
70:73:47:70:51:2b:f5:81:57:b9:4b:25:8d:53:23:
51:a9:16:ca:ea:32:d0:76:ca:d4:9b:27:b0:98:8c:
2f:8f:fb:2b:9e:36:d6:ce:b9:10:26:14:ac:cf:7f:
e8:da:f4:cc:f3:d4:8c:65:1d:67:89:2b:86:53:64:
f4:3c:fe:e5:06:94:08:26:f8:a2:b6:9b:ba:d2:63:
f4:44:e4:54:b6:09:2d:26:fe:12:6f:e7:88:71:1b:
a4:db:9a:7c:4e:02:b7:4b:0d:fa:56:04:3d:f1:cc:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:89:C8:04:D3:DD:3A:74:2B:55:0D:AC:FB:AD:19:B9:6D:5A:C3
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:67:53:5c:57:06:50:c0:3b:a9:2d:6c:fe:e2:d4:33:88:
d9:97:9f:64:81:a7:a9:c8:c8:e7:a0:dd:28:12:ae:59:1a:e0:
21:49:8a:b6:fb:df:57:2c:96:ce:57:f9:f1:79:bc:88:f2:b9:
2b:f4:a7:5d:df:78:d2:b6:61:d6:22:25:d2:9b:26:1e:6c:af:
ad:02:13:f6:6d:af:30:0c:e7:e8:f8:b9:3e:cd:a4:e7:92:a2:
23:5f:f0:de:99:6b:d7:e6:84:5f:14:90:fa:6e:d6:45:9e:cc:
9a:2d:d7:1e:d2:77:75:7f:b5:34:7f:6a:cf:6e:da:0a:fc:bd:
af:85:b9:6f:b8:e1:96:ff:db:3c:09:9f:3d:53:38:34:22:d5:
3b:da:ae:22:5d:95:9d:ec:95:3f:53:f1:d2:a6:4c:ef:a0:58:
6b:3f:64:04:9e:d3:42:01:34:11:d6:5e:e0:e4:e1:03:3a:b6:
17:d4:f4:bc:80:6a:9d:74:9d:d7:53:2b:13:d3:32:14:64:c4:
7e:f1:d1:a0:a3:1b:c2:b4:37:c9:f0:f8:59:8b:78:8a:f3:d6:
50:bc:79:3b:2e:7f:f7:c0:b0:4e:55:29:e6:a0:9b:b1:d6:71:
e1:6c:0a:2e:92:18:ea:00:83:bd:a7:2c:c0:f8:f2:51:68:46:
12:b7:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:34 2026 by rpki-client