Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: Si+ark8zxVPPThNbjvCCo+FSxF90U/1OKRoPBx6Jj2I=
Subject key identifier: C2:AD:3A:FE:6B:95:A9:75:E8:31:B9:3B:6C:E8:C3:58:AA:15:80:14
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 01A08A1E50927715F832529C2B3E3F59820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 13C2
Signing time: Thu 10 Sep 2026 07:00:37 +0000
Manifest this update: Thu 10 Sep 2026 07:00:37 +0000
Manifest next update: Fri 11 Sep 2026 07:00:37 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: Aq2WfRY72g9SpUp6ViW0M/YfEWOKq/8qLSTi9SCF6F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:50:92:77:15:f8:32:52:9c:2b:3e:3f:59:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Sep 10 07:00:37 2026 GMT
Not After : Sep 11 07:00:37 2026 GMT
Subject: CN=c2ad3afe6b95a975e831b93b6ce8c358aa158014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:8c:41:e7:72:94:26:7b:a0:ff:58:66:a1:
f2:07:05:55:0d:d3:82:37:2e:6a:c1:67:45:70:10:
8b:99:cb:ff:c3:b9:69:c8:f1:bc:d2:66:35:5a:7f:
ff:a8:4f:b2:9d:57:4d:6a:e7:9c:1d:a5:07:62:8f:
ec:1e:7a:5a:1e:2e:be:4c:1d:cf:ee:4c:63:7f:62:
14:66:71:88:7d:b9:2c:a1:d1:6f:08:9e:72:6f:d5:
89:80:19:54:61:b7:6c:62:cb:86:17:d8:ea:6c:40:
a5:63:8a:db:15:53:f9:16:ca:2b:e1:28:e0:77:8f:
46:5a:ec:f4:6c:88:de:ce:c1:86:d7:22:ac:45:12:
bb:28:a8:77:07:d1:59:48:ff:ff:0c:0b:65:00:54:
fe:ff:18:6f:41:23:3d:48:27:b3:2e:d2:fa:ec:bd:
1b:b4:8f:e8:01:a8:2b:36:af:aa:0e:fd:5b:74:38:
5b:1a:ca:1d:73:40:27:13:b6:f6:c8:94:7d:7b:28:
de:a8:33:00:af:6a:fc:c5:fc:bc:b6:23:cd:42:c4:
9e:dd:81:a4:37:61:c7:2b:b0:a4:01:cd:42:70:82:
64:ae:df:af:48:b1:eb:76:b1:e1:28:fb:a3:7f:66:
ac:f9:12:ee:39:6d:f0:6c:f2:b6:25:fa:1c:37:35:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:3A:FE:6B:95:A9:75:E8:31:B9:3B:6C:E8:C3:58:AA:15:80:14
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:74:e7:86:fb:66:58:d7:36:73:bd:52:a1:47:4a:e6:ca:
ac:b7:ed:3c:11:4c:a2:e0:2d:59:0d:65:df:8a:9d:8a:b1:39:
06:7c:b9:be:9f:46:ce:60:c6:95:ff:bb:dd:2b:e4:92:49:52:
28:e6:d8:9e:ce:3e:08:6c:6e:a6:c2:a1:60:bb:e2:3c:a1:bf:
f2:0f:d6:3c:a0:c4:e8:22:3e:43:17:18:31:21:e2:56:e6:2b:
b4:71:22:f9:ca:25:88:27:e4:a4:61:0d:6e:e6:f7:ae:52:1b:
47:bb:54:36:f7:2d:f2:47:c5:41:24:35:29:25:6b:9f:cb:ef:
35:a6:6b:41:27:29:91:1a:25:ed:53:cf:3d:7e:7d:d1:5d:1f:
9b:12:77:f5:23:a1:05:26:c4:d1:9d:03:9d:b3:46:2f:4c:4c:
d8:cb:5d:77:48:06:2f:4d:bd:1b:f2:29:b8:75:e6:65:9e:00:
82:74:f4:99:1b:1b:68:2b:60:c3:02:6f:53:68:c7:9f:18:66:
aa:43:ec:c2:ef:ad:2f:d7:b3:8a:44:81:89:2e:dd:84:25:ad:
42:11:c4:cd:09:5f:d2:49:52:41:32:2c:1c:be:21:65:f9:73:
ff:89:be:25:67:51:b2:c8:fa:5b:c1:1d:08:a6:4d:cd:21:39:
a0:a1:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:42:22 2026 by rpki-client