Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: wFOSVskoN027GlXn2pCxpbMoadq6xN83gY4gfSXWSDE=
Subject key identifier: C4:E1:4C:CA:30:11:A1:66:F1:92:17:C8:AF:8D:39:E2:BC:A6:62:CA
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01A08AFA862D618BA50CF99A0A064E144731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 05EB
Signing time: Thu 10 Sep 2026 11:01:09 +0000
Manifest this update: Thu 10 Sep 2026 11:01:09 +0000
Manifest next update: Fri 11 Sep 2026 11:01:09 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: uuC/JFPtXT1VHaFt+HfqZyAfsZErucutd8LLzm24ZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:86:2d:61:8b:a5:0c:f9:9a:0a:06:4e:14:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Sep 10 11:01:09 2026 GMT
Not After : Sep 11 11:01:09 2026 GMT
Subject: CN=c4e14cca3011a166f19217c8af8d39e2bca662ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:e6:19:da:9f:ff:a6:11:07:b1:74:bb:d3:
a1:32:ed:74:80:3d:17:13:30:10:9a:ae:d5:97:22:
33:fc:75:45:f7:ea:9f:24:44:70:7e:aa:0c:ba:78:
8f:2e:77:b1:bc:9b:e3:14:6a:8c:12:9a:11:ce:c0:
b7:53:65:ea:39:98:97:d0:86:04:f7:90:81:94:e3:
bd:fe:15:cb:4a:0b:f9:d5:93:7b:54:ec:ad:4b:ec:
91:84:c0:86:71:a7:2a:08:07:d6:48:6f:01:33:55:
80:e6:c6:e2:9d:5f:e7:d5:f1:87:b7:32:0f:e2:75:
75:a2:cc:c4:24:45:cb:86:47:28:e5:da:ee:d3:e6:
97:9e:b8:6c:48:dc:2a:27:04:cf:f3:b7:11:33:f2:
04:0f:f6:dc:c5:55:6b:c7:33:da:78:9d:1d:8e:a2:
06:3c:f3:4c:f4:d5:fb:b2:dc:5b:3e:78:84:ce:ab:
48:48:ac:22:be:4c:58:cb:4f:ac:e6:1b:95:f2:e4:
38:33:8b:de:2d:56:a8:a3:cd:27:a2:dd:af:09:3f:
4b:09:8b:24:93:d4:48:49:27:7a:b8:54:67:5f:85:
a5:b1:70:a8:37:25:ae:16:c8:e4:d6:a1:a9:cc:66:
fb:fa:3b:76:af:f8:c7:1a:ad:a1:e1:b9:ac:b8:ce:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:4C:CA:30:11:A1:66:F1:92:17:C8:AF:8D:39:E2:BC:A6:62:CA
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:92:e8:00:98:14:22:19:7b:2d:2b:70:34:dc:21:59:21:
48:f5:29:65:f8:62:9e:b9:50:e9:d7:81:42:1f:43:58:f6:a4:
ff:32:a1:97:ac:77:6e:51:b5:62:be:f6:30:14:c5:01:a1:65:
f4:76:1e:ce:69:66:97:9a:5e:ee:e0:20:e5:a7:af:fa:39:c7:
3e:6c:de:04:62:cb:b4:50:78:97:a0:01:4c:04:29:62:0d:77:
bb:e9:23:48:ec:ca:27:f3:38:e8:32:bf:f7:6d:8e:55:04:fe:
af:52:b3:fd:e8:ac:c9:27:83:8a:85:cb:46:77:41:98:e6:0f:
0b:1a:9f:a0:dc:43:99:33:fe:49:40:da:12:51:8d:c9:63:ec:
9b:61:7b:b3:a0:80:4f:78:08:e1:e5:c7:8d:4e:d4:7f:fa:3b:
71:13:77:6e:0c:33:89:de:0d:aa:7c:5b:b9:20:66:bc:f6:6d:
fc:d2:08:a7:df:9f:73:2b:c6:8a:58:a5:c2:eb:1e:93:9f:2c:
7e:09:2b:14:57:c1:af:0d:1c:fb:75:c8:a7:7a:81:70:9f:d7:
6f:3d:55:7c:a6:1a:d1:4a:50:bb:7f:e1:27:d1:fc:e7:3f:b2:
61:b1:5e:04:ba:2e:c2:5e:8d:18:e5:cc:c9:f1:fa:04:bd:c9:
03:c4:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:36:35 2026 by rpki-client