Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: iLEmx+DqXVDbcNrcFEfoEdAUS3iBGjHV0L+HpnUaBS0=
Subject key identifier: 4A:DE:9E:E4:64:E6:1C:8B:F3:C3:0D:F9:B8:1B:31:D4:96:9E:10:7F
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 01A06E39F8D409196F22AF2E026D27F26D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1A43
Signing time: Fri 04 Sep 2026 21:01:27 +0000
Manifest this update: Fri 04 Sep 2026 21:01:27 +0000
Manifest next update: Sat 05 Sep 2026 21:01:27 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: hqdFyyfxa99rrhGhJmvzUhWiEqGoo7AooPJHhVCyd+o=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:f8:d4:09:19:6f:22:af:2e:02:6d:27:f2:6d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Sep 4 21:01:27 2026 GMT
Not After : Sep 5 21:01:27 2026 GMT
Subject: CN=4ade9ee464e61c8bf3c30df9b81b31d4969e107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:eb:e1:dd:5f:6d:ae:3d:9b:b6:9e:ae:85:
92:c9:c9:cf:ba:ac:82:df:24:83:b8:22:84:29:d0:
0a:3a:2e:71:e2:db:aa:90:83:52:fa:00:13:dd:4e:
b6:b6:36:0a:3c:68:02:f7:f3:84:16:7e:4a:46:5c:
dd:bb:ba:26:c0:7e:2d:d0:f6:51:6d:04:ed:2b:72:
45:62:0f:27:22:94:0d:06:14:95:07:2d:40:64:4d:
48:c2:40:54:13:df:ef:d5:c6:6b:22:b1:44:37:3d:
a0:5d:0c:d4:b0:56:3c:80:00:7c:82:02:f8:6f:f5:
8e:54:b3:f4:03:a1:83:f4:11:05:71:a6:37:7d:98:
49:18:c4:64:f3:3f:7d:b7:2b:36:79:be:2c:e4:94:
84:74:5f:37:e5:84:2d:75:85:2e:d0:89:5a:c9:36:
1d:d3:48:80:e7:64:8e:14:fe:16:50:db:a4:49:11:
7c:1d:f5:da:a0:15:f5:62:28:0e:28:65:1c:a7:af:
d5:d2:8b:35:b9:4d:c1:f4:10:8a:67:69:c2:2d:79:
09:dc:7a:8a:a4:12:38:81:1f:0a:6e:d9:98:16:71:
19:6c:c6:72:03:ae:6b:7c:00:c8:02:5c:9d:fd:a3:
97:f6:85:3b:35:32:4a:f1:b2:51:e2:61:b2:9e:1a:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:9E:E4:64:E6:1C:8B:F3:C3:0D:F9:B8:1B:31:D4:96:9E:10:7F
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f3:92:7b:d8:f7:8e:d9:3b:8f:65:f5:f2:ba:91:12:ce:90:
b4:c6:f4:74:63:33:33:f3:a9:a7:59:be:f0:e3:b4:aa:a8:74:
9e:55:aa:e1:6a:5d:71:56:01:d6:df:9d:06:8a:84:22:10:48:
19:86:a6:32:1a:ff:83:7b:3d:e2:34:8f:b4:17:bd:85:48:b5:
a4:5f:e2:94:7f:8c:96:11:cb:db:6e:e4:bc:cf:d8:03:60:a2:
7c:6b:d6:83:22:96:0d:12:cd:d1:4a:ae:59:13:42:1c:e1:46:
69:6c:10:14:e4:89:cd:48:a9:1a:3c:c2:d4:7a:03:98:9d:e9:
15:ea:21:6a:1e:80:8f:84:81:3e:0c:32:73:9a:e0:b8:da:07:
93:2e:47:d8:9c:9a:4f:83:e4:ac:ac:2b:14:33:c6:86:f1:ac:
b8:63:9c:c7:30:de:90:1f:1c:11:31:25:53:c1:af:5d:fd:1e:
90:25:91:17:6d:f8:ed:6f:4c:f4:4a:01:29:bc:0d:8d:87:e2:
bd:9e:80:21:b2:bc:3c:02:af:02:73:eb:27:29:0c:be:3b:71:
7c:f1:47:b2:8b:52:12:31:c8:31:13:99:e1:0c:fa:57:3c:98:
29:45:78:37:7e:30:3c:0a:ac:b5:7a:16:b4:73:49:2e:54:3a:
c6:4b:2f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuOfjUCRlvIq8uAm0n8m1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjYwOTA0MjEwMTI3WhcNMjYwOTA1MjEwMTI3WjAzMTEwLwYDVQQD
Eyg0YWRlOWVlNDY0ZTYxYzhiZjNjMzBkZjliODFiMzFkNDk2OWUxMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizr4d1fba49m7aeroWSycnPuqyC
3ySDuCKEKdAKOi5x4tuqkINS+gAT3U62tjYKPGgC9/OEFn5KRlzdu7omwH4t0PZR
bQTtK3JFYg8nIpQNBhSVBy1AZE1IwkBUE9/v1cZrIrFENz2gXQzUsFY8gAB8ggL4
b/WOVLP0A6GD9BEFcaY3fZhJGMRk8z99tys2eb4s5JSEdF835YQtdYUu0IlayTYd
00iA52SOFP4WUNukSRF8HfXaoBX1YigOKGUcp6/V0os1uU3B9BCKZ2nCLXkJ3HqK
pBI4gR8KbtmYFnEZbMZyA65rfADIAlyd/aOX9oU7NTJK8bJR4mGynhrskwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErenuRk5hyL88MN+bgbMdSWnhB/MB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffOSe9j3
jtk7j2X18rqREs6QtMb0dGMzM/Opp1m+8OO0qqh0nlWq4WpdcVYB1t+dBoqEIhBI
GYamMhr/g3s94jSPtBe9hUi1pF/ilH+MlhHL227kvM/YA2CifGvWgyKWDRLN0Uqu
WRNCHOFGaWwQFOSJzUipGjzC1HoDmJ3pFeohah6Aj4SBPgwyc5rguNoHky5H2Jya
T4PkrKwrFDPGhvGsuGOcxzDekB8cETElU8GvXf0ekCWRF2347W9M9EoBKbwNjYfi
vZ6AIbK8PAKvAnPrJykMvjtxfPFHsotSEjHIMROZ4Qz6VzyYKUV4N34wPAqstXoW
tHNJLlQ6xksvEw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:23 2026 by rpki-client