
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: JKfdLL67tW+N8guyokdUO/pry+91jiZ0rKszgfLvByY=
Subject key identifier: 22:DE:04:BE:98:30:E3:4A:69:71:E8:AB:22:5C:35:EB:B2:4C:3E:09
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 01A0502F45828EB01CA2F5771514DB749D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 02BD
Signing time: Sun 30 Aug 2026 01:01:10 +0000
Manifest this update: Sun 30 Aug 2026 01:01:10 +0000
Manifest next update: Mon 31 Aug 2026 01:01:10 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: uzAWC0eeF2FK8C6F5kCznuxSL1j28P3cG8M8wiYi+lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:2f:45:82:8e:b0:1c:a2:f5:77:15:14:db:74:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Aug 30 01:01:10 2026 GMT
Not After : Aug 31 01:01:10 2026 GMT
Subject: CN=22de04be9830e34a6971e8ab225c35ebb24c3e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:e2:4a:a9:54:5f:8e:7c:53:d5:79:4e:59:
1d:ed:6b:cc:1f:13:b0:49:15:2e:d3:ee:d8:7a:a3:
87:99:b0:5d:2c:3c:23:a2:da:c0:3f:fe:a7:f2:50:
3b:47:58:ac:63:b5:bd:1a:79:8e:3c:49:7a:69:69:
30:88:1f:1e:51:a7:41:60:81:2d:4c:12:93:74:3d:
04:22:88:6d:e1:64:c8:9d:36:65:91:23:c0:71:dc:
d4:c6:88:43:86:ef:4d:53:50:cf:5f:30:39:87:8f:
9e:88:af:aa:ad:2f:2d:e5:0d:1b:18:95:2b:f6:8f:
ae:22:ff:00:26:08:d6:86:86:e7:dc:00:5c:4d:ea:
8d:b6:c0:35:13:1e:41:34:65:c7:1f:8b:71:64:b3:
35:24:aa:be:0c:be:29:cc:17:2a:6c:06:ae:86:0b:
94:60:74:d6:41:b7:7b:a9:1f:60:c8:3a:d9:6b:bd:
11:e0:a2:45:67:99:f7:03:ee:10:b3:fc:64:f9:42:
5d:d0:42:cc:45:45:3b:94:23:98:10:8c:e2:df:b9:
3f:39:cf:6c:b5:9d:80:3e:76:c9:b2:53:aa:9a:3b:
17:52:d7:84:d7:0e:66:eb:ac:ce:03:9d:4d:78:41:
a9:00:0d:bf:7a:9d:67:96:5a:c8:28:e5:ac:1c:21:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:04:BE:98:30:E3:4A:69:71:E8:AB:22:5C:35:EB:B2:4C:3E:09
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7f:d4:8c:99:f0:c6:28:13:d6:89:74:bd:13:f0:5f:35:97:
74:4c:db:6e:a6:af:58:c4:3d:01:6c:1d:cd:36:84:d4:5b:17:
cb:e7:b0:63:69:33:cf:94:7e:ee:51:e9:e6:50:45:2c:3f:54:
35:75:5a:fa:9a:68:04:51:11:66:0d:e8:6e:5e:93:30:db:ea:
73:7a:12:e3:ab:89:0b:12:9c:e1:45:e8:e6:72:df:d8:be:77:
14:26:45:6e:96:c2:76:39:10:ff:0b:ce:2b:35:85:49:9d:3f:
c7:70:f9:6b:6d:d5:d4:9d:6c:42:7e:11:c0:c8:d9:25:15:86:
d5:8c:bd:78:09:ab:f7:ad:9a:80:19:79:ad:d4:9f:a6:81:38:
f7:e2:24:d4:44:1f:28:c8:83:a0:7a:a5:89:89:04:26:aa:37:
23:93:68:c0:d4:68:84:3d:ab:43:fb:33:dd:d1:e2:ae:2a:36:
46:c5:47:fb:b3:0c:b9:15:ae:1e:94:05:ae:1f:85:70:2d:c6:
1f:3c:93:8d:e4:f6:4b:e0:5b:7b:05:17:e9:ed:73:36:c4:59:
9a:55:60:8a:01:18:e1:1d:1e:f7:4e:bc:42:cc:96:54:26:6b:
e3:ef:bb:f1:8d:9e:c4:02:92:e8:21:ec:76:b5:04:0c:70:58:
0e:8a:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 05:10:18 2026 by rpki-client