Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: +0H34//Fxbo2IJ7xq98ttO5nQkdIyrh8IgibzHg2uOo=
Subject key identifier: E3:04:DD:32:B9:2F:F0:55:29:4D:BA:B2:9D:A5:84:6F:8A:3F:74:9A
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01A134B5A07A18C937244E7A3C4B9E078697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 17EC
Signing time: Tue 13 Oct 2026 10:01:20 +0000
Manifest this update: Tue 13 Oct 2026 10:01:20 +0000
Manifest next update: Wed 14 Oct 2026 10:01:20 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: JauwRM/3h4Yy4ZROfsMxaVfAj6o6ETrmL70loXHPPYQ=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:a0:7a:18:c9:37:24:4e:7a:3c:4b:9e:07:86:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Oct 13 10:01:20 2026 GMT
Not After : Oct 14 10:01:20 2026 GMT
Subject: CN=e304dd32b92ff055294dbab29da5846f8a3f749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:5c:92:a9:75:08:25:64:52:b1:c1:6d:d3:
c2:91:f3:01:a8:76:45:b6:19:34:f5:a0:db:fe:0f:
fb:72:43:4a:66:9d:74:19:c6:e1:15:56:b2:71:06:
ce:92:64:8e:f2:ad:bf:fc:a1:00:a8:2f:fd:28:9b:
9f:25:54:84:d5:c3:82:f1:1f:84:24:48:b0:3e:eb:
ec:c6:41:0a:cb:ec:d7:9e:ab:c6:86:22:3c:b6:82:
1d:4f:1f:3b:35:27:f6:18:86:4e:c9:17:0f:cd:15:
84:4f:60:83:5b:81:a3:6b:85:8f:88:db:c2:89:4b:
c3:24:4f:d3:a7:14:fb:3a:ce:53:61:6a:1f:9e:8a:
09:bf:ae:66:1d:fa:05:4d:da:5d:09:15:1a:07:d0:
7a:40:18:65:2d:0c:0e:f0:cb:7a:90:da:49:02:97:
10:50:c3:1a:94:2f:a1:ce:6a:d4:8b:6b:cc:34:da:
22:cf:76:14:67:20:48:c4:63:70:7f:20:ce:90:41:
b6:b6:68:72:d5:d8:ab:b8:e1:22:84:6a:40:65:a0:
e5:34:01:39:65:c6:8b:b0:03:02:e9:6e:ec:82:04:
47:5c:c7:30:55:94:be:96:91:9e:ba:3c:c5:58:1b:
2c:14:06:0b:67:42:ce:79:6a:8d:5c:3f:ff:6b:cb:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:DD:32:B9:2F:F0:55:29:4D:BA:B2:9D:A5:84:6F:8A:3F:74:9A
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:a7:53:be:ba:bb:7b:d1:fa:b3:f2:b6:13:dc:7a:8c:0c:
25:03:d8:a4:98:6e:97:dd:53:e1:bb:d2:db:7b:cb:a5:0a:86:
80:7c:02:49:75:75:fd:09:94:02:5f:2d:c8:f1:00:c9:d5:19:
8b:53:74:6d:e0:0c:ba:71:e0:96:aa:f4:fe:2f:74:f8:97:09:
e1:33:2a:1c:1c:6c:2a:7f:45:50:08:ef:7d:0b:2f:75:42:e2:
4d:59:6b:4d:65:55:a3:d3:27:e4:02:3d:50:a8:32:08:37:ff:
9a:37:10:e8:18:a5:58:3a:dd:b9:ac:43:f9:cf:fa:6f:00:6a:
92:7d:d8:7a:9f:98:bf:42:79:33:26:19:73:0a:e1:1b:54:b2:
e7:e0:cb:d2:33:a5:6a:e9:3a:a6:f0:f9:29:99:d5:53:32:b5:
9a:28:ec:41:df:3c:4b:90:52:26:7e:f9:e5:a2:a7:ec:f8:d4:
66:1f:7a:fc:d8:b2:ca:6b:83:76:61:cb:c0:d2:9d:2f:4d:74:
47:94:d3:20:1b:65:c7:66:7b:99:db:ff:6e:6e:e8:fd:a0:0d:
63:43:ae:c8:55:a2:b7:9c:24:08:7d:e5:4c:65:64:f0:23:a3:
4b:ba:c3:e5:11:42:9c:ac:14:13:1a:dd:48:20:b7:3a:83:2b:
29:b1:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:42 2026 by rpki-client