Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: nZNov0+gmBDe3WPMd4bVp0G0mTzgDECWlXiaQ6AA4wc=
Subject key identifier: 1E:D6:06:8C:18:80:01:29:BE:6E:C8:6D:00:AB:DE:28:3C:DD:EC:14
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01A08B9EC21DCE0A36F8D97D2F19B2E8BE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0D90
Signing time: Thu 10 Sep 2026 14:00:32 +0000
Manifest this update: Thu 10 Sep 2026 14:00:32 +0000
Manifest next update: Fri 11 Sep 2026 14:00:32 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: HvAQQpna81McyjUtrfLf1OR/M+6ifWZU5+uAjGlhP3o=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:c2:1d:ce:0a:36:f8:d9:7d:2f:19:b2:e8:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Sep 10 14:00:32 2026 GMT
Not After : Sep 11 14:00:32 2026 GMT
Subject: CN=1ed6068c18800129be6ec86d00abde283cddec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:31:d5:99:4c:79:b1:97:33:41:ca:b8:77:
f3:23:e3:8e:97:7c:06:c0:de:0c:3b:d8:21:86:20:
23:46:4b:4a:01:98:4c:d7:62:58:62:bc:a8:aa:43:
49:d1:f6:94:82:ad:88:4e:cd:69:30:25:2a:65:49:
a9:54:ee:9a:83:ea:3b:e0:04:46:47:1f:f9:74:52:
5f:ef:72:42:ae:b4:c0:3b:ed:fe:b4:05:95:46:4a:
5f:67:87:2e:d2:f6:fa:b1:93:1c:33:af:4b:6e:4f:
d2:cf:3e:e2:21:ea:45:e4:1e:0e:44:8d:21:9d:2f:
a2:81:8a:0e:59:46:5b:32:31:01:93:4a:62:d6:af:
67:94:2a:90:84:34:d0:5a:a1:0c:d4:eb:b3:9e:de:
81:b9:2b:8f:14:a2:5f:a6:43:fb:8d:09:6d:97:ac:
8b:38:89:81:ab:d4:3c:3f:2d:34:3c:48:71:1d:b1:
d7:b5:29:ac:8e:ad:0c:20:b1:78:f6:3c:09:8e:b3:
42:09:59:38:f7:ab:ea:f8:e6:9e:13:37:dc:76:7d:
42:af:0b:56:58:57:1c:25:64:e6:86:22:9b:05:ec:
53:66:25:31:e4:8a:42:2d:e0:54:7b:8f:11:b2:f5:
67:97:4a:13:c3:0a:f0:7a:47:9d:c1:6b:b6:c4:f4:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:06:8C:18:80:01:29:BE:6E:C8:6D:00:AB:DE:28:3C:DD:EC:14
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:91:be:d9:bc:8a:ac:ff:fb:ef:c9:c0:92:87:67:dd:f5:
b1:13:27:13:d1:fc:d6:82:9a:77:39:b9:96:5e:48:a4:b2:e8:
24:b4:bd:75:d0:43:3f:03:5a:a5:c3:2e:da:66:a0:b3:59:71:
14:a3:ac:f6:e4:c1:46:2a:63:eb:fc:cd:4a:23:5f:b4:87:e4:
a0:73:44:05:b8:38:76:ff:5f:e3:67:53:1d:a4:42:5e:dd:63:
ba:9b:bb:24:bb:4b:e7:67:bb:de:d4:5a:b6:8c:19:04:6e:7e:
1d:23:77:d4:b8:07:c6:23:f3:65:67:48:0d:98:7c:ee:cb:9d:
38:b9:05:5d:54:d8:65:51:0e:71:5a:d9:98:23:d5:51:1a:b8:
c0:2c:20:92:8f:7f:e4:b9:8e:f9:fe:de:e0:16:f9:44:b6:b8:
5b:f1:6f:a9:be:26:4f:c7:30:69:8b:27:de:6f:ad:d4:8c:bd:
93:34:cc:50:0b:8d:6f:51:b8:73:83:34:fa:68:85:8d:24:bf:
c1:f1:4c:21:16:a6:72:d4:4a:d8:96:31:01:5c:c5:b1:9d:7b:
78:67:97:f8:de:b2:23:4b:83:6f:d3:db:01:a1:64:34:63:02:
d3:16:84:4e:b4:78:1b:37:d9:6d:c3:4c:d5:6a:72:1d:0c:cb:
b8:ef:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:50 2026 by rpki-client