Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier: S2dw4j16z5IKWGl+/vL9VyD/z6J8FrbvZxWf73ynR14=
Subject key identifier: 82:50:DB:D8:3C:83:C3:E6:56:F4:68:58:DB:FB:4C:67:52:80:C9:6F
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 01A181195C7968C3A682F44C3BF70F9E25EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number: 18CF
Signing time: Wed 28 Oct 2026 06:01:25 +0000
Manifest this update: Wed 28 Oct 2026 06:01:25 +0000
Manifest next update: Thu 29 Oct 2026 06:01:25 +0000
Files and hashes: 1: CprHXAsrH8JdmMZSQZXivSSe6E4.roa (hash: FeFr2Lyz21YuPKbhFzqjbNPKoCmaSebQnIlOtdAGIx4=)
2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: jOlP7l3RBmswjhefCnQyOjKTfRlXDpag6THQkZ8wFhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:5c:79:68:c3:a6:82:f4:4c:3b:f7:0f:9e:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: Oct 28 06:01:25 2026 GMT
Not After : Oct 29 06:01:25 2026 GMT
Subject: CN=8250dbd83c83c3e656f46858dbfb4c675280c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:9f:0b:9d:a7:90:1f:39:df:ff:b1:47:4f:
e4:77:ba:5c:c6:ae:e3:b7:a2:73:d4:f9:92:4b:22:
42:e7:39:de:d7:3e:b9:25:87:90:9b:d5:1f:76:5a:
cf:6e:8b:d7:e4:d9:da:50:fb:5a:f1:76:d9:f9:2b:
69:ca:1b:ba:01:77:ea:6a:d0:7b:c7:c2:18:ac:f4:
dc:97:27:3b:b8:00:09:c5:6c:52:38:8a:2e:ee:f4:
75:26:c0:d9:3e:9d:52:03:fb:fc:1c:d6:40:82:57:
57:7f:8f:5b:79:b8:c9:07:61:c3:c7:8b:cb:9a:8e:
e4:9b:1b:c2:39:b9:9a:90:e1:ca:27:6a:03:63:e5:
6d:87:05:0c:6a:83:ad:5c:8b:cb:82:fa:ad:d0:30:
80:b7:d4:f1:b1:4e:49:bb:46:af:e2:6c:6a:fa:5e:
88:ca:b2:f3:0a:90:b2:f8:80:da:6c:71:fc:5e:51:
31:f6:9d:bd:4c:c8:0f:5b:d4:d3:fd:bf:f7:1b:8d:
12:1e:e2:22:9d:03:b8:92:f9:34:4d:86:67:62:9a:
91:29:46:33:f2:18:19:c0:4d:39:10:62:7b:e1:e7:
ce:c5:80:78:f4:42:e0:50:37:77:26:15:00:f1:1d:
f3:71:5a:82:32:7b:74:f7:09:29:5f:b1:31:c7:c4:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:DB:D8:3C:83:C3:E6:56:F4:68:58:DB:FB:4C:67:52:80:C9:6F
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:52:d5:94:0f:ca:b9:2a:0b:af:25:cd:c4:22:d1:56:8a:
59:30:07:d5:11:ed:3a:02:ab:44:a2:80:61:88:10:c5:f8:e9:
3b:dc:bf:1c:09:7d:e6:ab:26:a0:09:94:08:dd:cb:e6:20:e8:
6b:b4:42:28:bc:4a:64:4e:67:05:26:8f:35:35:6a:f0:b2:82:
fa:89:23:5b:b9:00:70:04:22:00:3a:8d:e1:46:bc:03:68:d3:
b2:2c:f2:af:1e:b6:99:f2:aa:e8:78:92:db:54:03:19:0a:be:
bd:06:f6:5c:77:08:55:a2:aa:31:f6:ad:4b:b6:c1:8b:4d:7c:
36:a0:61:29:a0:c0:2d:49:dc:b0:a3:36:70:c8:14:03:cc:ed:
02:5d:55:eb:77:f6:c1:23:00:84:97:05:37:7c:91:b1:ed:d7:
ea:c5:e2:c6:68:79:d6:2e:a2:f0:88:d6:20:83:5e:3a:2b:a9:
d0:89:49:d0:94:47:22:c8:60:85:af:c4:6f:e4:4a:fa:a0:b0:
d4:92:56:bb:c1:0a:b6:01:66:ad:00:49:2f:4e:c3:ff:7c:d4:
c0:16:b0:53:28:03:a0:55:c7:c0:71:55:1f:ff:5c:b3:6e:3f:
71:f0:c3:1a:e4:73:8b:14:35:d5:d7:55:0a:03:6f:31:04:fb:
da:62:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:42:07 2026 by rpki-client