Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
File: CMD4JPxpxHv1_teUYxbN_-P6BFs.mft (raw, json)
Hash identifier: mCGfwz6yKZQQBM9ETJFesXK4GMRRuNGk/m+X/qJ2+SQ=
Subject key identifier: DF:91:1D:1B:CB:92:B4:42:59:93:90:63:6E:90:E7:BA:E6:4B:53:65
Authority key identifier: 08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
Certificate issuer: /CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Certificate serial: 01A08A55CDA3F29E77070528C669FAAA4B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
Manifest number: 0107
Signing time: Thu 10 Sep 2026 08:01:13 +0000
Manifest this update: Thu 10 Sep 2026 08:01:13 +0000
Manifest next update: Fri 11 Sep 2026 08:01:13 +0000
Files and hashes: 1: CMD4JPxpxHv1_teUYxbN_-P6BFs.crl (hash: cLL78dXKeGpfkM9vSOL/yQ7YvWG1t7+tccI/tNLMQ54=)
2: EcOiKWkfENOhpUFqCuAv__VHhnw.roa (hash: Dg3pxaRe1cEkDH8sGf4s69+1RouBE83t1FQSJNv9iHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:cd:a3:f2:9e:77:07:05:28:c6:69:fa:aa:4b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Validity
Not Before: Sep 10 08:01:13 2026 GMT
Not After : Sep 11 08:01:13 2026 GMT
Subject: CN=df911d1bcb92b442599390636e90e7bae64b5365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:ea:97:46:19:65:4c:d2:6c:59:fd:37:1a:
7d:da:23:af:6e:e2:a2:33:65:4c:2e:a1:5d:91:9a:
23:75:63:50:9c:a8:37:2a:ad:b9:c3:f6:a0:96:7a:
ab:8d:d0:ec:b0:31:ab:a0:e2:d0:bc:29:50:3c:93:
18:29:56:ee:c9:1e:7b:65:d4:99:f4:87:a7:9e:d2:
f9:a6:aa:38:fa:bd:b6:26:00:9d:75:bc:90:d5:55:
db:92:70:ed:bd:42:16:73:69:3b:52:12:5c:3e:bd:
95:20:d7:64:2a:f0:91:c5:6b:09:51:3c:93:c5:8f:
dd:cb:d5:29:a8:2f:f7:ad:63:6c:8f:11:fa:a7:e7:
7c:a8:e1:81:af:b8:3a:86:e1:5f:73:a4:b1:6c:05:
51:5a:9b:85:fb:3b:db:40:69:34:0c:4c:f2:82:c7:
9f:42:f6:51:e0:50:19:f5:98:c5:3f:d9:dc:23:37:
73:d8:a7:46:b1:fc:fd:7d:99:8a:7b:c1:19:58:e1:
80:83:ea:58:df:d4:dd:8c:49:18:2c:98:9a:76:31:
7d:1e:33:61:97:b0:5c:17:46:ca:f5:03:c3:f2:fb:
ee:2c:27:d2:85:6e:4f:ef:42:48:0c:37:e8:4a:3d:
0f:bb:e1:b4:27:33:63:99:dc:5b:20:0e:ab:3d:3a:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:1D:1B:CB:92:B4:42:59:93:90:63:6E:90:E7:BA:E6:4B:53:65
X509v3 Authority Key Identifier:
keyid:08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:51:0d:03:08:d5:a6:48:89:ff:0f:7e:3d:b9:0c:f2:b9:
f4:97:91:37:c5:e0:5b:bc:14:89:d4:64:65:1b:fc:e1:9c:3f:
4c:a0:3a:0b:4f:0e:80:a7:bc:b9:2b:d5:b3:16:a2:f3:9b:55:
00:47:bd:48:2d:ac:fd:0d:64:ce:db:cb:fb:04:a2:10:7e:13:
9c:db:83:5d:57:16:45:56:00:b3:00:6f:b8:bf:a5:c6:ca:65:
f0:63:d2:8b:70:9b:2a:9b:db:cf:6b:b4:26:8d:06:96:78:38:
4d:ad:2d:9f:8f:c8:a9:81:13:68:11:31:49:7f:e3:10:8b:ba:
c6:fc:e6:5f:aa:b1:80:a8:b1:52:d4:0f:fe:a8:86:10:e6:0e:
33:90:61:5e:83:1b:50:de:b7:f5:0e:09:de:44:09:e2:c4:5b:
fc:b4:1a:38:50:ca:4d:bd:90:e9:68:ec:63:83:10:ec:21:65:
a9:f3:5d:10:19:ff:5a:05:99:a5:5a:cd:26:26:c7:5d:15:53:
3e:00:dc:ac:df:70:68:14:b0:71:02:ef:30:c1:07:b7:67:89:
67:48:a2:92:7f:a3:8c:da:1f:87:b9:3b:e5:30:9c:21:6a:d8:
63:0e:9a:de:cd:45:c2:41:80:04:e9:99:5f:de:bb:4f:37:97:
7f:13:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:10:13 2026 by rpki-client