Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: 8aSDFiq7HZ4MDJO88DPrkxKIR+ePJzVgiYXcm7JcmzU=
Subject key identifier: FE:DF:54:53:32:46:0C:68:5E:23:98:C2:B8:BD:CB:6B:7A:37:3F:39
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 01A02958882EDACE472DD7366BFB96466EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 132A
Signing time: Sat 22 Aug 2026 12:01:02 +0000
Manifest this update: Sat 22 Aug 2026 12:01:02 +0000
Manifest next update: Sun 23 Aug 2026 12:01:02 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: XSoiDqXf7VJ41Bws+as1bJa4BLEAIkv712DWbvRzPhM=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:58:88:2e:da:ce:47:2d:d7:36:6b:fb:96:46:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Aug 22 12:01:02 2026 GMT
Not After : Aug 23 12:01:02 2026 GMT
Subject: CN=fedf545332460c685e2398c2b8bdcb6b7a373f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:13:dc:15:89:d8:8a:66:0b:8c:0f:d8:60:
c8:26:3d:a1:1f:45:4d:16:70:e8:81:f3:fb:13:81:
ed:0f:38:67:ed:cb:4d:30:1d:2e:e1:f4:2a:2e:e1:
87:9f:0c:49:c0:56:90:04:00:05:b3:b8:b5:5a:48:
a7:b9:7a:e2:db:20:c7:b9:e1:5f:9b:d8:dc:3a:9f:
f2:c0:e4:8c:04:7f:d0:27:79:6a:03:8b:3c:00:31:
43:f8:91:48:cf:87:b1:bd:72:8d:c0:9b:6b:83:cf:
03:d2:bc:fa:df:f1:92:65:52:c3:4d:d4:db:d5:49:
03:98:63:12:98:12:2d:c5:ab:b4:6e:b1:67:49:e3:
5d:2f:6a:f3:ab:1d:72:ed:8e:f4:c5:51:7d:e7:c9:
01:cc:b9:be:74:57:99:05:f5:6d:37:3a:a8:7f:4a:
ca:6b:5f:0e:3c:41:aa:85:91:1d:5e:59:34:62:ce:
99:a1:a6:8d:c9:a5:db:79:48:1c:8f:1f:d1:d9:fd:
ac:a3:ab:5f:ec:d5:60:a7:45:62:a0:8f:aa:bd:09:
70:02:6a:8c:dd:90:3f:6d:06:e4:a4:b4:74:99:c3:
9c:76:0f:1b:78:4f:c5:93:c3:bb:ca:ee:b9:64:94:
c8:ee:eb:fb:26:fb:c3:2c:52:87:16:6f:cf:9b:08:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:54:53:32:46:0C:68:5E:23:98:C2:B8:BD:CB:6B:7A:37:3F:39
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:96:10:1f:a4:9b:b2:c0:70:1f:a3:d5:15:49:a0:a7:30:
ba:9b:c4:31:16:e9:ee:a1:45:d7:71:21:18:10:35:1e:9e:5a:
f8:5e:cf:b7:ab:25:99:67:21:29:4f:cf:98:f2:19:a2:71:93:
63:db:eb:ce:24:4e:3c:a1:6f:d2:ab:54:0f:b9:89:f3:93:6f:
50:f1:84:50:1f:19:aa:d8:aa:52:af:3c:9b:be:ed:fc:55:33:
bf:12:67:9e:49:70:8b:a1:9d:6a:9f:b9:ca:6a:de:0b:21:44:
18:21:fb:36:a9:02:b6:25:c7:31:ee:85:0c:47:e5:de:5e:16:
bd:a3:d7:3e:9d:8b:38:36:fc:7f:40:f5:4a:2b:1c:8c:9f:49:
e0:b7:4f:3c:89:85:93:be:36:f1:a4:d5:02:f8:5f:42:7b:e8:
cb:ba:58:ea:15:bb:04:c3:f5:ac:39:f5:6c:3a:27:5b:ab:e8:
f2:af:46:f6:c5:ae:75:c1:33:f3:07:e2:31:2c:e6:58:c2:97:
89:08:99:14:73:00:69:ac:0d:41:6b:74:60:1a:db:89:f0:f0:
3b:80:af:82:b0:0c:64:d5:cf:a8:8f:45:09:24:9b:fe:cb:55:
ff:af:97:8a:a5:c4:e1:78:ea:a5:d7:79:3f:6f:d8:db:25:f1:
1c:41:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:13:03 2026 by rpki-client