Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: cJaCJEr8FT8IyauyCZl2kjAlfqtAX/9uws9OgchhfoY=
Subject key identifier: 43:30:1B:E6:F9:93:6C:5F:9E:1F:A2:6E:69:A6:E7:B8:EB:71:B7:C7
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 01A186AD546047A07DCF18C4D70BA8268F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 1AD0
Signing time: Thu 29 Oct 2026 08:01:08 +0000
Manifest this update: Thu 29 Oct 2026 08:01:08 +0000
Manifest next update: Fri 30 Oct 2026 08:01:08 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: FyosXTxzvGCK1EWrWmPFQQ1fQyNJ0/tPT5QOH1n0Lew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:54:60:47:a0:7d:cf:18:c4:d7:0b:a8:26:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Oct 29 08:01:08 2026 GMT
Not After : Oct 30 08:01:08 2026 GMT
Subject: CN=43301be6f9936c5f9e1fa26e69a6e7b8eb71b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:74:f7:2c:a2:04:87:77:84:4a:b8:78:1c:
ee:f4:a0:b0:9d:bb:d2:10:b4:bb:0b:d2:fc:21:f9:
cf:56:a0:ea:a4:29:25:52:43:c1:92:a9:78:3b:39:
b8:8a:98:26:06:67:9a:60:11:0c:4b:8d:5c:d2:80:
bc:fd:0d:23:57:f8:3d:b0:46:08:22:73:81:9e:f3:
fa:f4:b1:d7:e5:3f:8e:1a:e3:11:f0:fe:45:cd:0d:
c2:23:72:f6:17:a5:e4:ad:5a:e7:84:79:9d:b1:d2:
b2:8d:09:20:d7:39:a1:64:8b:e7:83:da:96:17:62:
b8:7b:79:aa:e8:8c:94:f4:4e:4c:8c:1d:44:b4:c7:
29:9e:1b:8f:ec:6a:cc:bf:35:23:44:08:d6:03:e9:
f3:23:16:3d:01:c1:c6:68:d3:a5:a1:5c:28:37:db:
ba:15:94:7f:d4:b5:f4:9a:d7:ac:3a:92:ec:5f:4a:
c3:fc:84:ce:01:16:b8:59:f9:c4:ef:b0:c7:03:40:
c8:d7:4a:a4:4d:e0:aa:08:26:25:79:4e:52:89:0d:
08:f5:37:11:20:26:01:35:30:37:26:62:0b:ee:6c:
c0:b6:f3:35:59:34:59:d6:4d:b9:1e:2c:53:0c:f2:
3d:34:5f:52:1d:b5:23:cc:c1:2d:f8:e5:ed:ac:c2:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:1B:E6:F9:93:6C:5F:9E:1F:A2:6E:69:A6:E7:B8:EB:71:B7:C7
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:02:17:55:ee:70:5b:b1:b0:7e:bf:e9:27:71:d3:b8:3f:0b:
e5:af:bf:44:b5:9f:24:98:48:5d:2e:4d:e9:fd:0f:d4:28:6e:
b7:2f:7b:0d:9f:26:10:28:c8:9f:ce:9b:e0:1e:b4:67:48:42:
2f:a1:77:fb:29:7e:99:94:d4:eb:eb:b3:a7:c3:39:12:57:8e:
79:ea:48:fe:c0:53:67:e7:5c:55:de:22:d2:c5:eb:0a:c3:5f:
12:4d:ad:c7:e3:63:19:0d:43:64:8d:c0:b9:5d:b5:79:f0:3c:
76:95:33:82:a9:eb:37:e2:8b:eb:4a:6b:0b:b3:d9:78:47:40:
2f:70:07:dd:20:e6:4c:98:16:bf:20:85:ff:b3:df:60:62:52:
2c:04:28:2e:88:19:95:57:9e:cd:84:81:83:f5:72:3d:54:76:
1b:ac:cf:bf:a4:92:d5:e6:3d:77:32:f2:ec:06:eb:cd:89:63:
e0:1b:f9:87:63:56:23:7a:0b:8e:7f:ae:74:6e:1e:4f:63:bf:
fd:b5:0f:d4:25:b1:3e:cd:b3:e1:8f:e1:2f:a1:a4:0d:46:96:
ae:df:25:c8:2b:30:61:a3:f5:af:f5:2a:93:b3:0e:29:d9:e1:
20:44:95:61:8e:b3:c5:60:09:55:dd:ae:bc:76:a2:c0:15:fb:
9f:1d:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:06 2026 by rpki-client