Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: XQa5t9DyngAORMGd56KLZGBXOnjRc75krlkK5ZW3fUc=
Subject key identifier: A9:B3:25:D8:E5:AC:F2:5F:C3:FB:1C:C1:46:57:7B:D5:B2:E7:C4:6D
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01A18BD312231DCFF1E6CABF1C76AE816975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0670
Signing time: Fri 30 Oct 2026 08:00:28 +0000
Manifest this update: Fri 30 Oct 2026 08:00:28 +0000
Manifest next update: Sat 31 Oct 2026 08:00:28 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: OPAFfY/TMp+1yhCkW9/fW7ozBzQXcC+gqSpfAlDc790=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:12:23:1d:cf:f1:e6:ca:bf:1c:76:ae:81:69:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Oct 30 08:00:28 2026 GMT
Not After : Oct 31 08:00:28 2026 GMT
Subject: CN=a9b325d8e5acf25fc3fb1cc146577bd5b2e7c46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:cd:47:d3:bd:ad:c7:e7:e4:b8:47:0c:74:
0c:ca:18:61:c1:1e:ac:95:9a:c3:25:2d:1a:15:9e:
24:1d:de:26:7c:4f:46:76:0b:dd:62:67:c2:d0:34:
c3:b4:4d:f7:11:f6:4d:94:10:58:20:76:ba:c8:80:
16:da:57:f3:cf:32:5d:02:8d:b8:7d:f6:5d:25:d1:
af:cf:ec:41:f2:bd:f1:29:78:68:cb:a2:6c:6b:50:
eb:cc:7d:af:9b:dd:43:2e:00:3f:bb:55:2c:e7:ae:
30:9f:67:20:83:1d:04:d2:3f:18:4a:bf:60:51:06:
9d:6f:39:4f:b5:72:b0:25:cc:a4:95:d1:52:24:1e:
57:45:8c:9c:4c:37:94:40:db:35:e1:fc:43:52:6f:
e4:c8:f1:9c:87:2c:e1:32:1b:74:6a:64:65:ec:c1:
21:f8:06:75:d1:4b:9d:58:09:a5:43:e3:9c:e0:7a:
9b:1b:52:4a:de:ed:52:56:70:d6:a3:bb:05:0a:93:
ae:53:e6:a7:be:d1:89:08:58:86:25:a5:4f:80:f7:
fa:73:70:22:b0:a1:19:e9:02:e8:eb:1c:76:3c:ed:
1c:ad:6a:90:b7:a3:fe:56:1c:b2:6b:6d:5d:07:85:
62:09:4d:5f:f7:5f:00:88:6d:80:72:61:cd:2e:59:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:25:D8:E5:AC:F2:5F:C3:FB:1C:C1:46:57:7B:D5:B2:E7:C4:6D
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:21:3e:21:57:5c:f4:8b:d7:30:3e:b7:70:b7:0b:0c:8b:56:
02:ae:52:f9:25:d3:23:19:13:f8:84:bb:cd:da:74:4c:14:ed:
58:ba:ee:3f:7e:fe:bb:54:75:e5:16:da:fe:f6:6f:c6:64:41:
c3:84:11:5a:74:79:29:65:a7:59:7b:ed:34:dc:a5:ba:10:7b:
29:7e:8a:f4:d5:dd:a7:a9:57:d4:1b:03:5f:c3:6b:2a:6c:08:
b2:0b:1f:64:07:8d:9e:af:eb:84:60:dc:c2:7e:34:48:9f:16:
05:d8:8e:c4:91:42:c9:d3:8c:aa:01:0a:60:8e:f7:21:ae:be:
ba:b9:46:db:b7:10:b1:83:42:ed:c8:df:5f:10:f8:ad:09:58:
0a:0a:6e:5d:58:82:43:e9:53:1d:48:53:91:41:47:47:52:0e:
da:c4:e7:0a:eb:10:b8:17:4b:0f:82:03:91:3d:6d:40:84:e0:
a1:bc:1b:97:37:b8:ba:93:df:8e:69:97:00:4a:f5:6e:fb:b1:
c0:54:54:63:ad:80:9e:d9:67:3a:bd:a7:2f:36:1a:43:72:cd:
42:57:eb:55:f9:97:3b:1e:5e:6e:ae:ed:f7:d4:c7:0d:0e:42:
e8:b7:d5:a8:73:d9:c5:dc:57:b0:eb:9c:87:89:ec:9a:1e:e7:
08:d6:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:05 2026 by rpki-client