Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: DWADyYEc56gT0PnnZ2GgULMsw7nKOsujbAznBh3Jp+4=
Subject key identifier: D5:CD:16:17:23:49:13:1A:A4:47:2C:23:AC:48:C3:3D:20:65:69:5D
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01A10B1435E984689359943C2A5E0BC3AA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 08:00:36 +0000
Manifest this update: Mon 05 Oct 2026 08:00:36 +0000
Manifest next update: Tue 06 Oct 2026 08:00:36 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: ntWa9X8kmkDOJlg6zdDKVp27E046iTAaLmqTr1CmwdE=)
3: kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa (hash: pEw/S9jOxpWQLVzYTg3rhlxmJoczWXUHF2pKiEgawmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:35:e9:84:68:93:59:94:3c:2a:5e:0b:c3:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Oct 5 08:00:36 2026 GMT
Not After : Oct 6 08:00:36 2026 GMT
Subject: CN=d5cd16172349131aa4472c23ac48c33d2065695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:53:ec:c5:3e:2a:24:a1:aa:2b:52:51:92:
74:24:d8:08:eb:70:38:7d:51:76:ac:98:e6:b7:91:
5d:cd:f1:43:a5:8e:bf:af:0a:be:4f:15:03:e6:20:
b7:a0:b4:e3:4f:de:89:38:e8:23:a8:8c:fa:39:fe:
c1:30:83:4e:85:49:b1:89:ca:43:ea:7b:ef:de:aa:
91:4f:46:c9:e5:64:6b:52:60:6f:c4:22:d0:dd:b3:
52:bb:f5:ef:c7:33:a6:a7:08:57:eb:e2:9c:f1:84:
3e:55:93:02:22:65:66:2b:97:19:fb:cb:9f:ea:c1:
35:dc:d3:85:4d:71:fa:fb:44:b6:3d:83:a0:14:ba:
e2:b3:68:b4:fe:de:b1:3a:a1:60:f8:2b:7a:dd:09:
ac:66:93:62:49:56:48:f9:c5:bf:7b:74:af:d0:9c:
16:c3:b3:c3:72:ea:b0:bc:66:a0:2f:30:a2:e0:d0:
d6:e5:23:1f:35:7a:7b:97:63:8e:61:28:13:b9:3f:
7e:d4:b5:16:40:f5:5a:64:6f:dd:c7:4d:8e:ca:b1:
af:b3:a1:5f:2f:4c:1f:27:bd:a6:e7:67:09:4d:88:
11:da:27:76:8d:dd:41:7a:61:9a:2f:1d:6f:c8:a9:
58:ba:82:25:93:df:76:20:87:67:5b:07:a0:e6:ab:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:16:17:23:49:13:1A:A4:47:2C:23:AC:48:C3:3D:20:65:69:5D
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:64:d2:0f:72:6b:6b:b0:47:91:26:b7:e3:5e:46:86:5f:
66:eb:44:8c:e9:bf:0f:56:35:7f:e5:a3:70:26:41:b4:89:90:
53:e1:8a:87:c1:00:15:09:a7:07:6e:b2:b7:26:b7:73:ea:87:
06:92:c6:8c:86:b1:42:8a:87:81:c6:93:9a:49:6d:da:f5:9e:
7b:7f:7c:83:e1:ad:3e:81:2a:cd:ab:07:26:4c:37:a1:fe:6d:
71:e6:0e:e5:a8:e8:4d:53:6a:5c:1e:fc:cf:4c:11:b8:d3:f9:
7f:37:b2:cb:2d:67:2b:50:8a:05:c9:83:07:65:91:39:6a:00:
30:a9:63:6b:ec:d4:36:7d:c6:69:dd:2c:9e:43:53:b4:d0:2a:
fe:56:eb:30:ba:a0:ed:27:89:2b:19:d3:7e:fe:7b:b1:f8:04:
c4:88:43:03:e5:ff:19:75:cd:33:8e:94:b9:c6:ec:75:ca:6e:
55:42:c8:93:9c:5f:bc:4c:df:29:43:ed:81:52:2e:c7:db:48:
23:74:3e:50:9c:f2:77:09:28:85:6e:1c:7e:ed:82:bb:df:66:
ac:11:c6:ad:b3:23:22:d7:fa:eb:83:4d:c4:e6:95:08:79:78:
90:ed:40:cb:15:20:24:86:d6:7f:aa:3c:d5:a4:1f:3d:7c:b0:
f0:fa:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:43:10 2026 by rpki-client