Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File: cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier: p8+XZ0t2lLfqe+4LuVdFFtTyAdxF35gR5FwcShELSz0=
Subject key identifier: 3F:30:4D:80:CA:5F:15:8B:98:2C:70:13:B1:20:EC:AA:9C:A4:C5:B7
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 01A18118F08C1BB851B77D775A3E1EB36D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number: 1AC0
Signing time: Wed 28 Oct 2026 06:00:57 +0000
Manifest this update: Wed 28 Oct 2026 06:00:57 +0000
Manifest next update: Thu 29 Oct 2026 06:00:57 +0000
Files and hashes: 1: 3mRFvb6f33KmA31Wa3PPdgxjRxc.roa (hash: MiE5PdWpWMnyQs7sOHf+pEyweupb9aFtOXGfUjzPuCk=)
2: RAfopN6tdeJL1sjFRpqIy4imIeQ.roa (hash: 4hFaV9gs/RBpS6I2/H1rs69idfo3PhuX0d8XFhEvMeM=)
3: TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa (hash: v3vwX/rnfU0pht1yHzZosZwM8qWsFePSYoMrkrYm3gU=)
4: WlB9YLYhSliFMj5epuERd5qEZAE.roa (hash: Oedmof1Wu9NtwtMyhtlElFL2nm6OxYZaEnrIDhS86S4=)
5: YpBsHbpimwIlAlhChqTHWu0SrjE.roa (hash: dfAnmwPEESyQsxLDnMoSSBvKQiPlbGyS6lnr8b8V888=)
6: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: aL2R1ZfzUnVlM5OhcDKF44TpnAHzXDE6QA68lr2YKlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:18:f0:8c:1b:b8:51:b7:7d:77:5a:3e:1e:b3:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Oct 28 06:00:57 2026 GMT
Not After : Oct 29 06:00:57 2026 GMT
Subject: CN=3f304d80ca5f158b982c7013b120ecaa9ca4c5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:ff:dd:4a:a1:c4:a7:f2:3c:6a:41:a3:70:
96:0a:d0:69:89:94:2a:19:f5:a7:70:aa:f0:9a:d8:
46:68:2c:77:27:be:42:e9:12:2d:99:cd:9c:2a:47:
8a:63:c7:e9:eb:b6:be:dd:bf:ac:95:67:46:6a:dc:
c3:7d:2e:72:b4:5e:34:7f:99:e6:f7:c0:21:c6:1f:
03:5f:f9:d6:b3:60:9a:31:37:6d:7c:f4:c6:33:71:
8c:f3:51:88:5e:28:4a:30:78:91:68:3a:9f:fc:6d:
4f:64:29:e1:12:e3:12:a3:61:6b:ff:46:0b:5e:8c:
96:cd:d3:92:c1:62:4b:e3:07:bb:a3:59:aa:ea:cf:
3f:c6:d2:ba:bc:1a:9d:45:9b:b4:37:0b:b1:e9:fe:
6a:c9:39:7d:4c:d7:d1:d1:14:c1:c5:59:d5:09:b8:
05:b9:bb:99:99:15:27:66:52:47:c0:d4:da:3a:e8:
21:02:6b:17:29:fd:c9:a9:7d:ae:23:9d:7b:90:b1:
65:1f:4a:64:0d:d6:97:30:7d:bd:70:94:39:3c:a5:
28:45:29:fe:3c:33:51:ef:0e:f9:a0:21:49:90:72:
0e:bd:11:a4:2d:6b:e0:13:61:86:42:1c:8c:87:91:
d7:87:a3:87:eb:ac:34:b5:d4:fb:d4:a1:e2:54:e4:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:4D:80:CA:5F:15:8B:98:2C:70:13:B1:20:EC:AA:9C:A4:C5:B7
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7a:00:32:42:be:2b:9c:62:43:d6:8f:fc:84:78:79:fc:a1:
74:bb:96:dd:83:21:ef:20:0f:62:f0:34:34:48:dc:5f:33:a7:
fb:1a:a4:73:e3:58:14:ec:83:b7:c9:c3:e7:f6:36:d0:92:a7:
7d:37:d2:73:42:ae:f6:f1:77:59:8e:7b:61:87:ae:c6:df:86:
28:06:b1:bf:17:19:67:0c:be:b4:47:26:3a:e6:f8:0b:36:e3:
6a:63:82:55:2d:68:57:cf:50:73:e5:49:7c:ee:3e:f5:ef:34:
81:6d:0c:7b:a6:05:45:56:d4:74:0f:a4:87:87:8b:68:2c:62:
21:9f:87:ca:90:fe:30:f6:42:75:6b:db:60:6f:08:27:b6:5b:
70:d1:06:2d:e6:77:98:73:39:78:81:5a:91:f6:af:60:8b:fc:
89:26:cf:ae:b1:8a:e8:b1:65:42:58:92:b5:34:12:82:63:4d:
cf:89:3b:f2:9a:a7:01:59:86:70:3e:f1:16:13:5c:04:a7:f6:
e2:d0:23:cb:14:a5:eb:86:c8:0c:a3:8e:f2:e7:7b:ca:64:f4:
76:ee:7e:d0:f1:c3:ce:17:58:e7:25:26:87:55:47:5e:6a:fb:
c0:e2:24:25:a6:e4:29:89:27:66:db:b1:6b:76:d5:9f:3f:bf:
87:53:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:33:57 2026 by rpki-client