Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: d6VdQOE31m1UaeKMkjAoQA5IjXjhD2Ew8X/yzjtymq8=
Subject key identifier: D6:10:B5:9F:7C:D8:73:70:A8:9C:BA:D0:A7:66:0F:D9:A4:99:4B:89
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 01A1197497684AB43C45796A9D6535AE1120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 17AA
Signing time: Thu 08 Oct 2026 03:00:33 +0000
Manifest this update: Thu 08 Oct 2026 03:00:33 +0000
Manifest next update: Fri 09 Oct 2026 03:00:33 +0000
Files and hashes: 1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: gSndDrPHeP005D7roLZPbyRrtQuo2ovxIGxXwaabjA8=)
4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:97:68:4a:b4:3c:45:79:6a:9d:65:35:ae:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Oct 8 03:00:33 2026 GMT
Not After : Oct 9 03:00:33 2026 GMT
Subject: CN=d610b59f7cd87370a89cbad0a7660fd9a4994b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:f9:3a:1a:c2:69:bc:d1:3f:b4:21:cd:c0:
6f:57:52:7f:b7:36:09:6c:c1:e2:6d:40:8b:47:f8:
c3:5a:c9:a5:cc:0c:af:cb:72:dc:55:bb:92:84:fd:
4f:23:5c:e4:d3:a2:f8:90:c0:7f:d6:70:5f:2e:8b:
d3:45:ed:d8:eb:b6:be:d9:4e:37:fb:d6:76:74:2b:
97:8a:e5:65:ec:e7:2c:db:83:e3:91:34:95:80:ac:
49:c9:92:da:7b:00:98:ba:4c:d4:a3:23:8f:08:bf:
0b:5d:32:ca:4c:09:3f:b5:0c:62:d0:1a:9d:87:eb:
8a:8f:5f:58:fc:91:60:10:f3:b6:14:d6:79:48:b3:
73:2f:a7:de:19:d5:89:a6:92:6e:84:97:70:d8:2b:
cf:f7:e7:e6:1d:73:3a:ff:a4:b9:fa:57:8a:c2:7d:
28:72:05:bd:2c:29:73:7c:53:47:08:12:55:fb:8b:
b3:13:5b:3e:92:f5:05:1b:ff:1f:ce:c0:84:a6:03:
fe:20:e6:95:f0:5c:b4:76:36:d3:f9:d1:64:ea:7b:
70:be:d1:32:53:b2:f1:0e:13:d7:43:0f:72:95:63:
55:8f:89:28:38:2e:3b:4b:ae:d9:f4:99:ab:dc:e9:
a6:ad:99:ee:e6:06:a3:74:7a:c3:77:32:ab:c3:11:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:B5:9F:7C:D8:73:70:A8:9C:BA:D0:A7:66:0F:D9:A4:99:4B:89
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:a4:81:15:35:5c:42:bb:b4:c7:62:30:37:b4:f1:82:68:
65:75:84:58:bd:3e:c3:ae:fb:4b:14:27:a5:c0:9c:43:aa:a0:
34:b5:63:d3:55:36:f8:5a:dd:4f:3b:16:bb:da:9f:2a:1f:3c:
6c:7e:46:4a:07:66:0b:ee:e1:cb:dd:3a:18:f9:9b:9a:54:bf:
a3:1f:1d:54:31:30:cb:50:fe:f0:df:8a:0e:69:f2:35:e9:7b:
d7:7c:a2:5c:04:57:be:44:4e:89:79:d0:cc:7f:82:ab:3b:ca:
7d:9b:75:8e:a2:9a:e4:a0:57:03:ff:d1:54:c9:15:9a:6d:c7:
14:bd:4b:3c:24:5a:47:8d:26:62:81:e8:d0:a2:12:46:e3:b1:
b3:05:10:c8:a7:c4:51:5f:6e:92:02:05:6c:70:c7:0d:94:ce:
33:34:d8:8f:f3:a3:2c:d9:8f:58:c8:e1:b7:a4:ef:22:53:07:
bc:77:63:2d:df:42:72:a7:ac:31:fb:2a:7a:65:eb:cb:ea:f3:
2c:26:36:0d:f6:8c:ec:c3:56:fd:dc:2f:88:ff:d1:99:1d:99:
64:27:96:06:a5:66:68:4f:07:1c:8b:f0:61:3b:82:2f:9d:a5:
f7:32:56:33:68:20:8e:a0:6d:3c:f1:9e:d3:49:05:11:c5:9d:
5d:1b:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:48:06 2026 by rpki-client