Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
File: PO7GxHlRspnHCAZYPXkdUM2BbF8.mft (raw, json)
Hash identifier: 9TJxu/Ro6LCg2fHKrsNsmongbGIo5iWhbYTe4qOnZNY=
Subject key identifier: C0:CF:AF:8B:B2:BB:52:13:37:D4:08:BF:5A:58:2B:92:BB:6F:7A:D8
Authority key identifier: 3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
Certificate issuer: /CN=3ceec6c47951b299c70806583d791d50cd816c5f
Certificate serial: 01A089E76A4A4A77B5584C67D4D948BDEC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
Manifest number: 0696
Signing time: Thu 10 Sep 2026 06:00:39 +0000
Manifest this update: Thu 10 Sep 2026 06:00:39 +0000
Manifest next update: Fri 11 Sep 2026 06:00:39 +0000
Files and hashes: 1: PO7GxHlRspnHCAZYPXkdUM2BbF8.crl (hash: SgzN56rb/JJ144ZND96hqnLdaAAK0eTvG9uynXIMxtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:6a:4a:4a:77:b5:58:4c:67:d4:d9:48:bd:ec:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceec6c47951b299c70806583d791d50cd816c5f
Validity
Not Before: Sep 10 06:00:39 2026 GMT
Not After : Sep 11 06:00:39 2026 GMT
Subject: CN=c0cfaf8bb2bb521337d408bf5a582b92bb6f7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:8b:be:dc:e9:23:ad:49:14:c4:ab:bb:d6:
d8:72:ed:4b:0d:2a:36:cc:df:33:e8:8e:cd:05:a5:
13:cf:1e:ac:96:74:59:8c:30:88:e9:f3:f7:91:03:
51:f1:72:30:05:7d:3b:d4:e4:ff:1b:ac:e6:ec:58:
b4:cf:e8:a2:cd:a9:e8:0b:7e:2c:77:aa:a2:9f:41:
6a:0f:c3:7b:5c:79:f7:b7:0e:15:b2:39:34:29:f1:
97:63:48:1f:b9:57:b9:0b:fc:98:25:fe:39:f0:5b:
c8:ff:e4:68:0d:b0:72:72:c5:66:4d:d4:01:10:a0:
f1:8a:b4:ae:46:54:7d:20:fd:74:b0:92:b2:c4:72:
72:5f:69:2b:67:ed:b8:88:63:d8:48:65:29:b8:b8:
12:7b:40:be:ab:da:98:63:c6:e3:d8:a1:6c:c1:5e:
03:19:b6:47:f9:05:c6:29:a7:1e:e2:0c:ce:46:f3:
64:09:59:ea:0f:39:98:40:f9:15:61:eb:9b:bd:90:
68:c5:60:19:cd:4f:62:72:71:6c:fb:0b:80:f0:af:
1e:78:55:38:20:3e:f0:1b:2b:3b:4b:ef:73:15:b5:
3c:17:f2:7e:5f:7f:23:fe:34:62:48:97:51:c1:52:
76:3e:44:ca:89:5f:17:d0:8e:b1:32:64:7b:81:8e:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:AF:8B:B2:BB:52:13:37:D4:08:BF:5A:58:2B:92:BB:6F:7A:D8
X509v3 Authority Key Identifier:
keyid:3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fd:ba:b0:f3:a1:7c:c2:3e:e8:98:08:12:66:b2:d8:ae:6b:
7d:f5:6d:88:f6:74:20:98:c8:45:9e:bb:e8:ce:4e:f5:4e:00:
eb:2e:88:6c:c7:ab:a2:91:b1:8d:de:cf:d2:d5:37:f5:b1:73:
33:04:db:70:25:41:50:1c:69:cc:33:d2:26:a6:8c:e8:06:21:
2b:19:08:30:03:6b:34:1b:34:f0:84:cc:7e:96:36:0c:cd:f4:
4e:96:56:26:37:c6:6a:02:5b:48:62:27:25:7f:8b:7a:15:ac:
24:c9:ac:ae:a5:c3:f2:b8:ee:30:00:00:b8:9f:07:2a:fa:bd:
06:42:ed:62:85:ae:bc:40:36:52:74:27:39:a8:9e:4b:0e:0e:
4e:e2:f3:10:ed:bf:e7:17:29:0c:3e:6b:d9:39:8a:cb:24:14:
f2:f9:3a:56:1a:2a:a1:da:52:28:d9:a3:9b:d3:c1:48:09:56:
d4:13:9d:e1:4e:76:fe:25:24:7d:e0:20:36:06:43:06:fe:42:
ca:5e:11:1d:7a:7b:0f:b2:02:12:e1:b4:87:d7:a1:82:57:4c:
50:3b:af:03:4a:0d:7a:63:96:5b:bb:a8:8e:bc:ae:ca:f9:b4:
1a:fd:73:f8:6f:de:a3:b9:58:b6:96:99:b2:84:ac:15:4a:c1:
15:1b:f6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:52:35 2026 by rpki-client