Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: n2AmsE8TUlkSg7sQosseH6XbVtqRuiVvFKMjX2H0jns=
Subject key identifier: 9F:93:B3:EB:0D:65:DC:FA:1E:91:17:FE:89:97:8E:AB:C7:CB:7F:0D
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 01A17C6053B8DC9EDCBFAC70EBA22D35554F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0F08
Signing time: Tue 27 Oct 2026 08:00:50 +0000
Manifest this update: Tue 27 Oct 2026 08:00:50 +0000
Manifest next update: Wed 28 Oct 2026 08:00:50 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: 1saJr42Kk+WDhKM0eljYLqEMuSocc57D8YsepE3mPoA=)
2: xyOkTXVPZjz9JAhos1QM2vsm3W4.roa (hash: QXjoMKDwi6j1vpZqYsBGzsQGgoo9dIBXi5WlfEHsxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:53:b8:dc:9e:dc:bf:ac:70:eb:a2:2d:35:55:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Oct 27 08:00:50 2026 GMT
Not After : Oct 28 08:00:50 2026 GMT
Subject: CN=9f93b3eb0d65dcfa1e9117fe89978eabc7cb7f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:30:e9:e9:f3:0e:a1:ec:39:76:2d:00:25:
06:e2:0b:0b:c7:c8:73:c6:2c:35:46:8f:1a:16:d7:
4e:e2:bd:d1:b2:a7:ae:26:ac:9d:08:f6:ae:14:0c:
d1:3e:bf:e7:c1:90:6d:49:79:97:16:6f:90:69:e8:
9a:9b:2b:51:f9:21:af:90:40:40:93:5a:82:92:5f:
60:35:8b:8a:d6:53:8e:7b:7b:0a:ca:23:a1:02:6e:
64:8e:77:3e:d2:47:bd:87:0c:2b:da:8a:eb:ad:52:
3f:2b:37:d5:9f:7b:3e:43:a3:ca:27:0e:d3:ed:d8:
89:df:ad:bb:11:96:45:e2:b5:c3:b8:1f:39:b5:0a:
5b:86:b6:4e:3c:33:5a:3f:9d:32:98:7e:df:86:85:
89:e9:de:de:1d:78:a8:cd:fd:f6:04:b2:0c:21:f8:
9b:1d:52:37:c0:d0:97:2d:5a:b7:37:2b:04:5e:29:
d4:46:6c:3d:70:3b:14:ea:2f:a4:46:26:81:9b:3c:
76:9b:00:bb:7d:3c:b8:0a:b7:71:ed:3c:90:28:3e:
15:a6:53:1b:ef:51:fd:45:e4:ec:45:51:a7:0c:eb:
b9:53:49:ce:8b:5c:b1:6e:34:33:04:78:53:51:fa:
f7:65:b3:3c:d8:6e:59:7f:a0:19:bf:60:37:de:ec:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:B3:EB:0D:65:DC:FA:1E:91:17:FE:89:97:8E:AB:C7:CB:7F:0D
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:87:81:0f:f5:bf:20:cf:4d:d2:95:52:7b:3a:48:19:a4:
08:13:75:80:1a:38:bc:3c:c9:63:52:6c:60:37:29:7f:85:10:
b4:6d:61:f5:e6:e6:0e:5f:48:fe:56:7f:43:45:27:b8:58:d3:
47:04:6b:c7:ed:8e:9e:fd:b9:b8:0f:4e:98:41:ae:96:77:a3:
2d:bf:a4:e5:83:8b:b4:43:c0:0d:9e:76:28:c3:c0:5d:e8:e3:
39:9a:97:c1:cc:fd:fa:16:cd:be:32:6b:b7:ce:d6:2b:01:0a:
51:bf:0a:d4:2e:0f:93:25:4c:b2:61:66:9f:f0:e8:ec:fa:be:
55:c7:b4:ee:d8:e0:7a:86:a3:e5:2f:9d:55:56:8c:23:67:f2:
de:2f:c8:1e:cd:3b:b2:cb:d7:44:ee:92:14:99:1f:d4:9c:72:
45:ab:44:4e:12:c8:f7:c0:b3:19:5d:26:90:9f:52:6f:70:a6:
d3:54:99:e2:d0:e0:db:a5:94:ed:c5:37:94:e6:60:c2:05:37:
d1:0c:cb:53:28:2b:20:6c:68:92:45:5f:29:a8:81:2b:45:c8:
e5:9b:04:da:d1:48:e9:bd:71:fb:96:62:68:8f:18:f6:3e:80:
87:8d:19:2d:cd:51:1d:18:a7:8c:eb:55:e4:7b:63:5e:fa:85:
35:11:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:17 2026 by rpki-client