Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: CdKEegnmuX9dVOxtvao3m6nCLjIdifsDmnM3a2OvmKE=
Subject key identifier: 05:56:C1:F8:E5:97:F2:20:B9:F0:8C:EE:A9:AD:BA:4F:56:1E:E6:23
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 01A00281B148C5CCA60232778CF7CDD7788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 1712
Signing time: Fri 14 Aug 2026 23:00:48 +0000
Manifest this update: Fri 14 Aug 2026 23:00:48 +0000
Manifest next update: Sat 15 Aug 2026 23:00:48 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: gsyAYpQkg5099msThbu+kqi7zlUs/dKiHUTqqJLkO2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:b1:48:c5:cc:a6:02:32:77:8c:f7:cd:d7:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Aug 14 23:00:48 2026 GMT
Not After : Aug 15 23:00:48 2026 GMT
Subject: CN=0556c1f8e597f220b9f08ceea9adba4f561ee623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:f7:8b:99:24:4e:79:5a:8d:e1:21:ba:4f:
7d:ad:10:79:f5:24:3b:dc:0d:33:27:98:96:6d:0c:
e2:e8:7c:8d:64:d1:5c:d9:c3:d0:34:bf:6a:fd:96:
2b:bd:61:51:d4:d7:e2:6b:cc:15:ad:a7:92:67:4b:
33:f7:32:ad:ad:f4:fe:ed:e2:00:3b:18:0b:99:5a:
8f:8a:9c:7c:05:93:4b:90:b1:b4:c2:4a:ac:55:51:
14:16:82:07:36:d4:2f:92:8b:d1:ba:bb:18:58:30:
e4:77:ea:67:23:10:f5:b1:50:7d:44:82:31:17:0c:
3b:5f:4a:65:97:ae:13:56:c9:54:f9:b6:20:f2:22:
f4:61:69:d6:5e:d3:18:60:42:65:2f:9f:ab:f3:b3:
b1:8a:2c:43:73:21:a5:a1:43:09:74:5b:45:79:b3:
22:ab:0f:94:21:ba:4c:80:06:08:c5:a4:94:90:26:
c3:be:e6:8f:24:a5:b0:11:65:50:9d:8d:f6:94:c1:
f1:39:7f:56:58:e0:40:89:ff:57:ec:79:87:bf:7f:
47:d8:b6:a1:e7:2b:20:95:66:eb:0b:b3:d7:3c:ed:
23:1f:50:9f:82:28:d6:d0:05:87:c4:3d:17:7f:af:
fb:50:a6:bf:f7:73:22:92:03:3f:37:e3:88:08:c8:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:C1:F8:E5:97:F2:20:B9:F0:8C:EE:A9:AD:BA:4F:56:1E:E6:23
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d3:01:c9:44:03:12:eb:0d:0d:e1:78:9d:8b:21:cf:20:b7:
f4:65:17:79:83:22:46:f9:64:97:85:07:54:e0:a0:b7:a8:f6:
09:7c:80:1c:c1:09:37:b9:d0:1e:54:ee:66:e8:77:67:7a:13:
f6:1b:fb:48:30:0f:47:51:65:d8:22:82:d9:d3:d3:f7:c6:08:
a0:50:44:c3:01:0f:00:41:a9:60:35:8f:7c:c4:e7:47:9c:f2:
25:a6:b0:82:27:32:0b:74:3d:b3:0a:de:cb:28:8c:78:f8:97:
b5:b0:71:4e:43:e8:92:04:fc:c3:20:15:df:33:9e:a5:3a:bc:
76:db:15:92:b8:b9:5f:cb:71:cb:52:71:59:49:fe:e1:d6:24:
a3:47:da:86:96:b8:f1:78:dc:6e:4c:4c:17:c2:58:2e:f7:0f:
b5:c5:77:9f:35:ef:4d:28:7d:53:d0:97:01:36:2f:04:13:60:
1c:e2:5b:53:59:17:85:a1:17:8b:29:e0:7f:8c:84:df:85:cd:
7c:08:f2:0c:b6:7d:00:02:e6:87:10:fa:a4:e7:63:f0:39:9c:
08:0b:0d:cd:94:62:38:8b:72:22:88:fb:a2:e4:2a:41:85:09:
c1:00:e4:3c:35:56:d0:b6:75:cb:e5:61:29:9d:58:e7:5c:ff:
a6:ed:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:33 2026 by rpki-client