
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: 2PMhUsScQGL9fj/IY+tbknD2R5WrlBOA9Yw6vFTimL8=
Subject key identifier: 5E:DF:01:BC:4C:31:51:E1:99:A8:BC:E5:4E:D3:6C:C2:74:BA:78:C0
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 01A15AB0266C90DD34E7BC725F2D42F0C833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 0347
Signing time: Tue 20 Oct 2026 19:00:55 +0000
Manifest this update: Tue 20 Oct 2026 19:00:55 +0000
Manifest next update: Wed 21 Oct 2026 19:00:55 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: b3DNI3u7QsyuYZxOKZEY6aAW03rqOt2WzCb8WvJJWhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:26:6c:90:dd:34:e7:bc:72:5f:2d:42:f0:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Oct 20 19:00:55 2026 GMT
Not After : Oct 21 19:00:55 2026 GMT
Subject: CN=5edf01bc4c3151e199a8bce54ed36cc274ba78c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:0d:ed:8c:cf:70:8f:cc:76:dc:3c:cc:cb:
3c:ae:2d:fe:a7:d6:07:2c:46:d4:51:2f:4c:ff:f1:
3c:43:76:3e:cd:4c:dc:1d:94:ea:07:ad:b1:90:98:
77:7c:69:a1:34:72:67:4b:d0:c5:6b:44:cb:e2:c3:
fe:d9:bf:1f:36:6b:c8:b3:64:62:72:cd:d3:dd:bd:
3a:04:11:70:8a:d4:6b:fb:d1:27:46:d6:23:56:01:
0f:94:c8:3e:20:d5:cd:01:e7:8a:09:d2:99:25:bc:
d2:ed:d9:10:98:63:35:af:ca:27:b3:da:c5:aa:f2:
19:89:56:08:f2:48:5f:77:72:ab:c9:88:d0:c4:d5:
5d:63:5e:ce:06:36:d0:7d:80:54:81:90:c8:aa:a4:
f6:50:81:78:d6:7a:37:50:a2:70:a3:de:b6:15:53:
59:cb:45:cc:df:df:8a:f1:30:54:71:c3:26:dd:8e:
e0:9a:79:0e:26:fe:63:9d:e9:f7:26:d6:ca:33:0a:
60:f7:d0:0b:3a:27:c5:76:8e:e8:09:d1:8f:ee:e9:
b9:01:af:1f:88:05:f7:35:1a:70:8f:dd:4f:7d:fc:
c1:5d:5e:9b:93:fd:f7:29:ea:9b:89:c2:50:2c:4e:
8d:62:30:b3:77:65:69:23:85:62:bd:b6:e1:c3:b7:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DF:01:BC:4C:31:51:E1:99:A8:BC:E5:4E:D3:6C:C2:74:BA:78:C0
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:55:55:13:85:2c:ef:4f:7d:6d:97:df:9d:f9:8a:2e:85:f2:
1b:88:d3:e5:9b:d3:4f:4d:e4:bc:68:d4:00:bc:7b:93:9f:f0:
96:57:0e:41:80:58:79:c4:01:ca:78:a0:b7:9c:8a:5d:07:60:
61:1e:25:fe:49:7b:85:8b:5e:e2:7c:19:14:da:d1:a1:8f:74:
12:ca:9f:8f:44:b8:86:27:31:8d:48:34:ef:ad:11:f3:a7:1a:
95:f7:3d:f3:dc:35:57:3f:17:96:fb:54:cc:d1:6d:57:2e:4b:
41:ee:ca:8d:d0:3f:64:c8:0c:3e:22:5a:0d:a0:69:04:23:b4:
40:43:08:9b:ad:7f:02:c0:ad:f9:83:02:41:14:e6:e3:6d:47:
2b:1a:ec:98:b7:3e:ed:51:48:42:65:38:ac:e3:2c:52:52:75:
a2:85:12:1b:f6:d5:7f:f0:1c:86:bd:be:e3:a1:04:53:88:37:
85:ff:22:6a:45:c1:6d:9d:0f:37:b3:8a:3e:4d:b1:d3:c2:3a:
38:da:41:56:cd:4d:b4:57:fe:a4:1f:f2:16:e0:b9:3d:e2:74:
d7:64:fc:42:92:65:a0:40:37:a5:3f:34:7b:2a:35:38:83:1c:
ea:9b:49:44:74:ce:a0:95:16:87:66:3b:a1:a9:81:24:3c:04:
c1:7f:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:14 2026 by rpki-client