Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
File: ca0Clb70axWYk68wgc7WgZG3bJI.mft (raw, json)
Hash identifier: KFqX20BZcPjTSuJXs3Yzxpx4XWKJAxYKZ55qMuO6sDg=
Subject key identifier: C7:36:B0:2A:0A:68:02:E7:FE:D4:B1:BB:71:9F:BE:08:14:45:37:66
Authority key identifier: 71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
Certificate issuer: /CN=71ad0295bef46b159893af3081ced68191b76c92
Certificate serial: 01A18F426301D42983FE0781AECBF0B2CA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:54 +0000
Manifest this update: Sat 31 Oct 2026 00:00:54 +0000
Manifest next update: Sun 01 Nov 2026 00:00:54 +0000
Files and hashes: 1: 9vxud7StOxsVGpJ4u8HWgLt1evM.roa (hash: geRuwSQcxs/ntg9jtSwo/JgbYczfuqf3BwONRGwXIlo=)
2: ca0Clb70axWYk68wgc7WgZG3bJI.crl (hash: m0VQMc/fBcYbSo1PI1qkT9Vjhbvx8mx6au/AnylUR9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:63:01:d4:29:83:fe:07:81:ae:cb:f0:b2:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ad0295bef46b159893af3081ced68191b76c92
Validity
Not Before: Oct 31 00:00:54 2026 GMT
Not After : Nov 1 00:00:54 2026 GMT
Subject: CN=c736b02a0a6802e7fed4b1bb719fbe0814453766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:a7:6b:4f:89:95:29:c5:54:bd:0f:a3:26:
b9:b3:15:0d:71:7c:e3:14:f5:ca:45:e8:05:5d:74:
aa:32:73:34:48:f8:51:91:f0:99:99:38:31:60:88:
e0:74:f2:73:94:11:ee:34:7a:91:c8:66:9e:12:ca:
05:12:ed:66:65:f6:73:db:3e:03:56:46:8b:a5:1f:
2c:e8:0e:cd:2e:d6:5b:09:8d:52:e0:c7:49:cc:60:
d8:a4:cc:9a:02:de:0f:c7:3c:7b:4e:31:53:0b:2d:
62:14:e5:15:97:09:b0:33:bf:c8:9b:15:27:7b:ed:
2c:d3:42:0b:5d:e5:ca:5b:26:e1:ae:ce:fe:34:fe:
c6:c8:fc:ff:42:a0:81:4f:ca:86:6a:7b:5e:8d:92:
6a:1f:6b:2d:f9:44:0d:9f:64:14:3a:0b:33:59:b0:
a7:49:0d:6e:10:a5:1b:91:77:16:f3:29:19:a2:40:
2a:2f:2e:75:c0:bf:af:43:8f:59:0b:ae:1a:ae:c9:
1e:92:ef:bf:f0:10:5f:96:3b:0b:c9:96:24:cb:ff:
ff:e5:13:c6:eb:1e:76:ea:c4:45:d8:e2:67:b0:c6:
fb:b7:9d:4e:d3:36:7f:ba:23:95:94:77:0c:27:77:
c3:cd:02:07:e8:35:7d:99:10:15:b9:16:67:d0:be:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:B0:2A:0A:68:02:E7:FE:D4:B1:BB:71:9F:BE:08:14:45:37:66
X509v3 Authority Key Identifier:
keyid:71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:98:72:ac:be:1d:e6:3a:4d:ad:4d:5f:98:d9:15:5e:83:
b4:4b:1e:e9:67:db:d9:c3:1c:62:4f:55:2e:47:b3:e5:76:50:
08:1f:4f:9d:f1:47:6e:31:a3:c7:39:10:d6:17:c6:ce:16:98:
39:75:ed:1e:54:70:ec:b2:4d:b8:62:18:d5:2a:0b:f8:ec:28:
12:6f:7b:8a:89:de:5e:3f:81:d1:0b:4f:4d:9d:f9:36:79:a3:
c3:18:da:5d:1c:1f:49:59:c1:20:b3:e2:bd:ad:8c:1c:99:6a:
ff:dd:58:3c:79:ef:82:e1:8c:b9:ae:d2:1d:a6:0a:24:88:05:
9b:62:43:89:24:31:7c:7f:ff:f3:1e:6c:41:3f:ba:a6:6b:8f:
31:01:38:aa:73:b4:22:d6:04:d9:38:99:c6:1d:b2:38:55:91:
61:44:41:1b:2a:9f:d0:57:d0:9d:fe:fb:ac:cb:0e:53:93:f1:
ba:d8:69:dd:58:e5:88:38:57:51:a9:d9:c0:95:c9:0b:cd:84:
8a:74:0c:35:c7:72:18:c9:99:11:c8:e7:a6:38:73:5e:f3:2c:
72:dd:83:59:5a:fe:62:85:51:af:10:70:7c:b8:a8:55:11:62:
02:cb:3a:ef:1f:4d:73:b3:a3:ea:66:3a:1c:1c:c2:60:b9:24:
ca:e4:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:35 2026 by rpki-client