Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: ER53qblFqyuJGxWfuIqRbRTPjSTlnwV1w2oK4qnm2C0=
Subject key identifier: 45:E3:7C:4F:BF:46:B3:29:0E:E6:18:75:37:19:0E:13:18:8A:58:65
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 01A17A044649F61DEE931B9AFA8AD9B0A080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1A57
Signing time: Mon 26 Oct 2026 21:01:02 +0000
Manifest this update: Mon 26 Oct 2026 21:01:02 +0000
Manifest next update: Tue 27 Oct 2026 21:01:02 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: yuGEgDvTfT20m89Ce3S7NbrZOJfGed8MeaflxjtLLQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:46:49:f6:1d:ee:93:1b:9a:fa:8a:d9:b0:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Oct 26 21:01:02 2026 GMT
Not After : Oct 27 21:01:02 2026 GMT
Subject: CN=45e37c4fbf46b3290ee6187537190e13188a5865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:de:0c:e8:95:d0:d0:d6:3d:21:24:8f:b9:
e1:1e:ec:9e:8c:02:ea:e0:c5:a4:ed:52:4c:08:e5:
90:50:71:f1:4c:f3:f8:84:0f:16:d6:c2:b5:37:de:
62:2a:1a:1c:4c:fa:c3:f8:2d:b5:b3:e9:f4:be:9c:
00:b6:e1:51:8d:22:5f:1c:8b:08:2f:2f:1e:70:34:
02:45:de:e7:ce:cd:2e:69:e9:25:97:7b:b6:06:ef:
45:7f:16:7c:b2:08:54:cb:50:e1:43:f3:2f:19:be:
4f:5e:db:69:78:e0:16:2e:01:25:71:d1:49:63:2e:
48:db:7e:6e:f1:b4:a9:bf:7b:d2:1b:53:3e:84:c6:
08:e2:c5:67:64:dd:9b:42:7b:9b:4a:d3:b1:af:15:
8e:96:ad:98:0c:a1:c3:49:44:43:42:ff:d3:2d:d0:
49:05:d6:47:88:6e:79:01:79:81:99:22:cc:24:87:
96:f0:1c:d5:97:9b:9b:c5:2d:fe:a7:9f:a8:1b:36:
07:04:0c:ab:cf:95:f1:cd:5e:2e:4a:41:b7:58:e9:
61:3f:89:60:90:70:c7:af:c3:aa:59:5e:39:71:0c:
68:ab:9f:6e:ac:6d:75:cf:a3:01:21:1c:32:80:5d:
e9:ac:3c:0b:19:15:eb:b0:d1:91:f9:4b:25:4a:ec:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:7C:4F:BF:46:B3:29:0E:E6:18:75:37:19:0E:13:18:8A:58:65
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:20:95:1e:9a:f7:39:ac:a8:f3:e4:24:7d:33:c5:84:05:
04:21:00:fd:5d:b2:33:2a:83:87:aa:f3:f1:a1:e8:0d:2c:9d:
ee:c1:af:d4:bf:3d:bb:2a:51:0f:2e:2e:07:fb:3d:d9:6d:e6:
5c:e1:42:52:6e:7e:00:9a:6b:48:c0:28:66:ce:03:e3:69:0e:
a7:73:df:b8:41:bc:dc:9f:4c:6b:83:d9:0d:ae:00:56:b2:f7:
bb:3a:af:5b:7a:d3:95:66:c9:dd:5e:5e:7d:7d:29:8e:6d:0b:
21:c5:d7:72:14:b0:06:94:4c:08:ed:76:07:da:ae:2f:b6:97:
33:6d:f7:76:bc:14:f2:11:17:b3:d5:dd:36:67:47:ed:88:51:
b6:9d:c0:05:ad:6f:93:1d:21:cd:89:fe:43:09:d5:3f:87:50:
6e:d0:1e:28:8b:7b:4c:00:ad:27:58:2e:9f:b9:1d:f0:c5:48:
9e:fe:92:49:40:ea:d0:2f:1b:79:98:a0:3a:af:6a:c6:63:f1:
04:bf:17:6c:93:87:12:03:09:fa:b0:49:a2:92:6a:d3:9c:07:
47:b1:18:98:7a:cd:f1:45:a1:6a:49:8d:20:66:dc:06:a8:9a:
19:c7:79:9e:ae:28:ab:f2:0d:a3:bf:ba:f0:b3:89:03:4f:74:
1b:46:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:09 2026 by rpki-client