Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: zgbLNhNri0sb7NdLvDCDBclL/W1FCshnFfhxo1Ok4Nw=
Subject key identifier: D7:BE:7D:52:A4:1F:FA:F9:9B:D9:42:8A:86:37:BD:C8:84:09:3C:6D
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 01A1822C23CF4B8BFE4042B2E28325DE7E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 11:01:33 +0000
Manifest this update: Wed 28 Oct 2026 11:01:33 +0000
Manifest next update: Thu 29 Oct 2026 11:01:33 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: RFvdAIOoOcRR7LiQL2E6eWlv8ZjS+yBoAH5tAWX5hQM=)
2: gcKOKxEu02t-3Qr3Q-lePTEhZ3s.roa (hash: g+4vWnl1tBU1fCe7iU6G7v9CqqpjdaB8SvwjYcrHkAA=)
3: r0sAkZKQjB0vS8O7iQ56X-aB2xQ.roa (hash: WhI0GBlFVNmUWesEvEtCpV14xg5saJG4u4JXvCc5SS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:23:cf:4b:8b:fe:40:42:b2:e2:83:25:de:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Oct 28 11:01:33 2026 GMT
Not After : Oct 29 11:01:33 2026 GMT
Subject: CN=d7be7d52a41ffaf99bd9428a8637bdc884093c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:91:31:a4:21:4f:a6:64:b5:de:f3:e3:25:
78:40:d3:82:2c:00:4e:5c:bf:c1:63:db:b4:61:1b:
e7:21:a2:86:d5:8b:da:e8:70:5b:9e:23:c8:0d:48:
a8:87:ee:51:1d:a8:f6:51:73:88:de:4d:f8:19:e1:
e4:b6:39:2a:e3:0e:79:7b:cf:d0:72:b4:0c:87:e0:
a2:d6:97:79:27:e7:13:dc:be:2f:c2:63:e8:3a:a3:
e5:06:6d:d2:84:39:73:b2:3b:14:a5:74:a3:8f:a2:
af:f3:fc:39:7e:bd:0b:7a:70:5f:6e:51:3a:8b:90:
26:d3:cb:f3:bf:3b:bd:80:03:1c:c2:0d:d1:51:e2:
c1:49:1b:99:b8:3b:26:83:1b:c1:22:1f:de:5e:8c:
18:58:06:f0:9b:d9:e8:dd:94:b9:c8:6e:23:4b:6d:
59:0a:61:a1:5f:9a:5c:bd:e2:94:87:7d:f9:34:6a:
a3:a7:2e:5c:b7:11:5a:9b:ff:e7:1a:b1:eb:eb:3e:
3c:c8:fc:d1:6c:07:1b:ec:7a:e1:9f:96:06:cd:c6:
81:c2:28:a1:5f:d9:e3:1b:6d:a0:b4:e5:00:50:d8:
36:3a:91:34:fb:9e:7d:1d:69:f2:83:c0:89:7e:d6:
43:ed:2c:d7:a3:20:47:6e:37:c6:24:4c:71:e7:10:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:7D:52:A4:1F:FA:F9:9B:D9:42:8A:86:37:BD:C8:84:09:3C:6D
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:bd:37:20:ed:a9:e6:1e:98:0f:63:3e:46:1f:ae:4e:54:
61:dc:ce:76:1e:ad:82:9d:f9:d2:f2:4c:ab:93:10:ff:21:f0:
a9:d3:51:f7:8a:d1:e9:7b:b6:a6:95:b4:8a:1e:ac:37:c0:52:
ae:34:ff:6e:79:f9:7d:b4:78:3d:58:3e:f3:2d:c3:c2:d6:bd:
d2:d0:66:df:89:15:44:c9:3a:98:54:a1:9c:55:bc:8b:d5:9a:
9a:63:2e:31:02:6d:8c:94:a0:58:b1:0b:3e:f6:85:2d:16:3d:
15:d1:ef:de:16:07:48:fe:81:81:06:8b:01:be:e1:5b:3f:25:
cd:d8:9f:d6:15:9c:82:3b:53:d2:a5:16:89:85:ed:a8:72:8c:
50:65:60:39:5b:04:a5:ea:63:ad:9c:b7:f5:d6:bf:2d:0b:3f:
9d:97:8f:ed:04:65:81:1f:fe:d9:f6:26:8e:c6:f4:e4:b5:b7:
8a:1b:3d:72:1a:93:16:61:b2:06:f0:a7:e3:10:80:b0:0e:15:
f6:3d:65:4e:c1:41:33:5f:73:2f:1f:86:98:54:a8:6f:0a:c0:
8e:29:57:44:06:fa:68:26:24:28:d8:54:d7:ac:b8:10:4d:bc:
9f:c8:e1:bc:8a:47:c0:a0:81:23:ee:c7:f6:7f:01:5a:f8:f4:
fc:cc:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:32 2026 by rpki-client