Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: c0qgeKFC2QoELldvypq3Lg4TbR4LzxNg7zNaO6REpN8=
Subject key identifier: 8B:0F:F1:42:46:F1:C0:DC:6A:26:AD:F7:D7:E8:2D:AB:44:77:DE:11
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 01A182D067B07E9F4EB58CD5E417963D8F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 14:00:58 +0000
Manifest this update: Wed 28 Oct 2026 14:00:58 +0000
Manifest next update: Thu 29 Oct 2026 14:00:58 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: H5fmucbRO6+uSYhG2H2G88qcgcAIIEkdZn8c4M2eSvw=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:67:b0:7e:9f:4e:b5:8c:d5:e4:17:96:3d:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Oct 28 14:00:58 2026 GMT
Not After : Oct 29 14:00:58 2026 GMT
Subject: CN=8b0ff14246f1c0dc6a26adf7d7e82dab4477de11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:c9:e1:53:44:d0:c6:4e:b4:46:37:b5:40:
37:fb:7a:f6:87:52:e8:52:63:11:5d:8a:0b:71:fc:
66:39:dd:e0:f7:63:8a:a8:c7:6d:14:22:e9:04:f9:
55:cf:a0:fa:ae:1f:67:83:58:4d:09:21:42:49:e8:
e6:7d:a9:b1:bc:e8:85:0d:cf:4b:10:15:db:60:76:
e7:db:00:0f:af:af:48:fc:34:65:27:7e:85:07:7f:
02:3d:db:ee:f3:eb:53:4c:86:9b:1f:f6:f0:59:c3:
4a:72:16:4a:03:19:da:9b:71:2f:c2:44:3d:bf:be:
47:38:98:bf:77:7a:36:1a:f2:43:2d:ab:6d:f0:f4:
85:bc:bc:14:1d:83:b7:58:80:3b:c4:ed:9f:c8:fe:
a4:bb:e1:7a:3d:26:f7:d7:24:78:e2:95:bc:f9:40:
14:a2:85:07:7d:31:87:fb:ca:26:6d:a3:57:25:99:
e2:82:15:7c:09:6a:3a:d9:06:b4:22:09:2e:f3:2d:
c3:c7:27:fb:52:4f:db:9c:c4:8b:90:e3:31:dd:ef:
f5:03:91:ec:fd:1f:77:9c:03:9b:13:6b:0d:b4:ac:
e9:e1:2c:29:7f:0d:65:03:3a:0c:29:6d:c9:70:b3:
e6:60:67:b8:c3:c3:c1:a0:36:a0:63:ca:04:05:69:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:F1:42:46:F1:C0:DC:6A:26:AD:F7:D7:E8:2D:AB:44:77:DE:11
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:19:88:da:b2:25:2a:b1:74:06:e7:16:0f:73:9f:70:a7:ed:
9d:d8:a9:a4:51:d6:1c:c4:2e:d8:64:af:3d:09:08:6b:66:8c:
bc:69:d2:de:3f:48:d9:dc:b5:0d:7d:6b:90:ea:4a:78:80:73:
21:6c:ce:20:94:0f:09:b7:2d:48:33:7e:90:09:9c:b5:12:b6:
6a:e9:dd:f3:0e:33:cb:d9:13:93:98:d0:bd:56:17:14:46:87:
24:85:2d:18:09:35:4b:93:7f:99:06:34:49:e1:7a:dd:5a:54:
1a:b8:15:b8:f0:31:ed:66:d9:db:d3:e3:c7:ae:fe:ed:95:4f:
b9:ff:00:a1:84:fc:27:c5:10:57:80:4c:76:3a:4b:13:e2:69:
8f:07:8b:2a:6a:a6:e2:ce:d3:c0:50:59:ba:2a:05:b1:21:26:
08:ee:82:fb:05:6f:0f:87:13:87:cc:4f:24:67:64:4a:de:8d:
9e:55:15:ae:3a:9d:2f:79:89:fe:18:2c:12:e7:8f:9e:f2:9a:
58:af:ce:77:f3:82:81:b2:70:21:28:ce:07:8e:1e:92:ce:da:
49:68:53:ad:07:f5:f1:4c:e0:ac:c2:ee:87:53:08:a9:12:27:
9a:38:5b:9a:2a:e8:4f:9a:1f:74:25:d0:1e:84:50:00:28:44:
44:47:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:14:25 2026 by rpki-client