Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: q5PTfp003CTVxSAaiBb0s3afFtGqmvylg3xo2TtqS3I=
Subject key identifier: 33:2F:E2:3E:E3:1C:B8:EA:14:0F:47:E5:3D:13:C6:1A:33:AF:A1:EB
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 01A08A8C35FCBC167FB3E656C64F8A5A6A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 09:00:39 +0000
Manifest this update: Thu 10 Sep 2026 09:00:39 +0000
Manifest next update: Fri 11 Sep 2026 09:00:39 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: O5ap+8eK1i8GkFUF6Bnq88w65/O/6f6+L47v5j4NXuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:35:fc:bc:16:7f:b3:e6:56:c6:4f:8a:5a:6a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Sep 10 09:00:39 2026 GMT
Not After : Sep 11 09:00:39 2026 GMT
Subject: CN=332fe23ee31cb8ea140f47e53d13c61a33afa1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:e2:8a:e2:38:ee:66:d7:8f:ef:34:eb:a8:
f2:d5:24:5b:ae:a6:b2:3a:56:4e:76:42:1c:5e:21:
42:a6:9d:74:d9:44:89:73:f5:fd:4b:4b:a0:6d:1e:
2b:ba:1f:c3:a9:34:d1:b9:70:75:f1:0f:22:00:d8:
a2:dc:63:62:44:c7:23:1a:40:6e:39:a8:c9:07:96:
53:b0:c3:11:72:3b:0c:89:ff:c8:bb:15:ea:dd:06:
6a:b2:9e:63:d4:7d:a1:1b:4e:fe:a2:bf:1f:da:f0:
8a:cf:c5:b2:62:73:5a:27:b1:f0:e2:0e:a1:c2:89:
f0:ec:5b:cf:3c:57:48:f1:c0:b0:64:7f:13:63:82:
b0:2d:c4:8a:9f:6c:70:f5:26:a5:42:66:a1:0f:ae:
35:e0:26:f8:f0:c8:26:ef:b8:5e:7d:c5:6e:5f:c0:
8f:98:bd:0c:20:be:bc:ef:53:0b:e3:f8:c4:4a:c1:
8c:96:d3:42:5f:33:48:c4:9f:1f:48:c3:e4:ef:c3:
8f:2f:1e:0f:21:f6:db:83:ae:2c:35:31:98:9e:62:
78:3a:65:4e:c0:e7:29:6e:36:71:9b:46:ee:55:ed:
91:e3:14:18:eb:40:e5:c5:0a:73:d1:63:83:d8:99:
7f:ab:3f:b3:a2:f5:ce:8a:fb:b1:8a:8a:70:fd:cd:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:E2:3E:E3:1C:B8:EA:14:0F:47:E5:3D:13:C6:1A:33:AF:A1:EB
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:84:e4:39:98:74:d0:19:eb:55:04:0c:9b:1a:e5:39:6d:14:
c4:af:1a:e4:d0:0f:5f:15:c3:43:1d:c5:11:c1:7e:eb:72:e3:
5f:ed:d1:3c:ca:64:46:52:fc:64:dc:dc:f3:20:86:5b:88:8a:
88:c0:78:03:5d:71:5a:3a:a9:46:35:0a:84:02:1c:df:d5:82:
ef:33:c0:a5:d1:b9:fa:ae:7f:fb:c6:44:c3:96:57:dd:e6:ab:
3b:c0:0e:af:f7:e6:f6:b5:b9:64:0e:29:40:d0:64:5a:3d:09:
41:6f:85:fd:fc:64:68:db:99:78:92:ed:3c:cd:65:d3:a0:e6:
aa:33:3b:e5:76:6b:bd:11:12:cb:7d:64:36:08:da:08:7b:99:
db:a1:41:37:29:27:e3:10:ad:ac:ec:36:1d:b9:e9:ca:35:2b:
f7:0e:60:92:9e:9f:e9:54:b9:84:f3:72:08:ba:65:d8:91:e8:
94:3a:d6:c7:d9:84:1a:42:61:47:0d:e6:d4:ed:b0:84:5e:3f:
83:b2:f3:08:82:b5:24:1a:eb:36:76:52:c3:13:10:f9:bb:0c:
13:79:17:9b:97:7d:58:a3:78:8b:61:bb:ce:f7:40:3c:5e:31:
7e:8a:b8:0e:64:30:0f:cf:78:95:c9:32:aa:bd:6d:d0:c3:a4:
8f:35:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:49 2026 by rpki-client