
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: X1L9VvdaFhnRszQayuTK3v9/aNzdGSCVoHPrf954Zyk=
Subject key identifier: F2:6D:88:7C:6E:69:A6:E6:4B:D4:03:4E:0C:10:41:B4:BA:10:6C:02
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01A001A5BB9295913A0050CC745AF5044002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:00:33 +0000
Manifest this update: Fri 14 Aug 2026 19:00:33 +0000
Manifest next update: Sat 15 Aug 2026 19:00:33 +0000
Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: BgMAjpTHUebbrZs96q70jL5hXSZ2CPmwA+aKgwWAUqI=)
2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:bb:92:95:91:3a:00:50:cc:74:5a:f5:04:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Aug 14 19:00:33 2026 GMT
Not After : Aug 15 19:00:33 2026 GMT
Subject: CN=f26d887c6e69a6e64bd4034e0c1041b4ba106c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:31:d9:b9:de:57:07:30:79:21:4d:45:2f:
09:ec:6b:3f:3d:3e:cb:42:c1:2e:67:80:2f:95:e4:
c9:77:45:04:7f:da:8f:aa:6e:56:cb:b1:f1:be:3b:
7c:42:8e:37:6f:a5:d1:75:51:e6:1f:10:47:d9:52:
ee:56:af:8b:63:6d:95:f6:34:c5:dd:5f:f7:fe:4c:
26:d2:10:b4:fc:8d:c2:5d:aa:be:19:0b:ba:9a:29:
da:02:9d:44:6b:77:4a:6a:78:d7:f9:8b:12:8d:9b:
4e:89:e2:6c:9d:76:da:e0:5e:0f:ee:17:de:a6:30:
e1:cc:f9:d6:6f:cf:5e:2e:c5:b4:7a:38:f1:5e:c5:
72:8e:db:c2:3e:67:e3:c0:f5:c9:5b:c7:1f:12:2f:
74:aa:4f:2f:84:2f:f4:77:e2:23:8d:83:b0:07:b4:
9d:81:7a:41:0c:f8:3d:46:18:4c:0e:b9:8f:da:83:
e2:04:4a:eb:cc:96:c8:7f:6b:db:49:5a:fc:6b:cd:
57:e1:0d:16:58:44:0f:be:80:24:36:0a:ab:06:51:
84:8a:97:fc:1e:07:92:fe:c1:0a:12:e5:f8:d3:39:
7d:6c:e8:12:de:0d:de:ec:97:8c:e9:91:09:de:29:
b1:17:94:96:6f:48:10:04:fb:c1:5a:95:ff:81:c1:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:88:7C:6E:69:A6:E6:4B:D4:03:4E:0C:10:41:B4:BA:10:6C:02
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f1:1f:4a:61:a3:59:e1:aa:4e:60:71:b0:8a:36:7c:7d:dd:
c4:33:c9:31:e1:57:64:11:50:1c:4a:59:6f:28:dd:65:4a:54:
63:8b:b3:8e:a1:e9:d3:f7:dd:a1:8a:b1:43:4b:81:3a:d4:94:
f1:fd:77:92:33:86:1f:74:f8:5f:9c:b8:ec:e2:16:41:f2:68:
29:cc:47:cf:e3:4c:df:6d:f9:a5:74:b0:c7:f2:8a:14:6b:9e:
7a:7a:27:87:56:32:be:af:6f:bb:2c:1f:1b:79:02:60:8d:90:
ad:07:1c:0f:d4:75:c9:62:a7:e0:e9:86:1b:d3:b7:df:f3:ee:
aa:b8:13:7a:31:b0:f9:0f:47:dd:19:75:aa:d1:6c:27:85:9d:
1e:8e:fb:64:7e:34:c0:55:c0:83:d7:0e:e0:1b:b4:99:2d:47:
e8:64:96:5e:b6:20:7e:b6:db:19:98:86:20:69:88:56:64:68:
de:e0:54:ea:c2:9f:ff:bc:84:20:6c:e7:46:9d:97:25:32:9f:
0d:28:73:00:4e:5b:78:8c:bb:af:57:90:3a:f5:b5:38:98:ed:
9c:49:4e:57:0a:c4:33:bd:f5:5f:00:99:da:94:92:60:12:34:
4d:da:24:73:99:7f:63:b6:0b:b3:a4:84:97:40:7f:19:1c:c5:
f9:50:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:46 2026 by rpki-client