Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: 7gkqLn2T8VGwTIUvYvvi9qDwqb1yOsXUpguIgebDC3s=
Subject key identifier: C5:07:89:E1:1C:FF:E6:25:32:0E:20:F3:AF:6E:61:89:D1:66:20:D0
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 01A08AFA5A944D2B18BFAD6C5082A69925E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 0CB2
Signing time: Thu 10 Sep 2026 11:00:57 +0000
Manifest this update: Thu 10 Sep 2026 11:00:57 +0000
Manifest next update: Fri 11 Sep 2026 11:00:57 +0000
Files and hashes: 1: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: jLop41olCCekl2CaPhKqpaX8zRzENnepGLquKaqMJH0=)
2: fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa (hash: v0PmtJ3pzpVot2Wloq98GRl87XDpPUF7bbjfx1/ffng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:5a:94:4d:2b:18:bf:ad:6c:50:82:a6:99:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Sep 10 11:00:57 2026 GMT
Not After : Sep 11 11:00:57 2026 GMT
Subject: CN=c50789e11cffe625320e20f3af6e6189d16620d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:b1:11:ec:da:5c:47:35:02:22:60:93:72:
93:cb:de:56:50:d4:df:5a:1a:0c:ee:d0:e5:86:ce:
77:62:d8:87:10:8e:1e:8a:d4:0d:88:e1:2f:0f:1d:
ec:b6:bd:40:81:a7:a7:cb:a2:93:f1:65:97:01:2c:
1d:8c:7e:87:1e:b3:41:95:b2:a4:98:cb:e7:c9:35:
74:d6:7d:3f:b1:81:ed:86:68:41:3b:ef:b0:11:72:
ca:6a:3a:40:fa:a1:1f:64:80:0f:64:3f:a9:ae:8f:
55:6c:01:e0:18:30:40:66:1d:c6:e0:5d:02:e3:ca:
b0:a3:80:f8:59:ae:01:28:30:1c:72:c8:96:6c:69:
02:6e:d0:9c:f2:c6:ec:57:54:af:81:9f:93:c7:1c:
02:75:b5:2a:c5:18:40:db:2d:06:11:ad:cc:cb:01:
7a:9f:ab:a2:47:43:13:fa:cf:bf:ea:1f:58:5e:19:
1b:52:40:4f:d9:4c:34:bc:05:dd:15:38:16:8b:52:
fd:f7:c5:55:4a:ee:96:9d:d3:c9:da:55:c7:32:10:
9a:78:30:c8:e6:8f:45:d6:3a:1e:82:df:c1:76:86:
0a:53:33:c8:28:1c:48:71:8a:15:5a:d7:dc:e2:4e:
65:5b:45:bf:48:95:96:35:7d:74:16:af:c4:fc:53:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:89:E1:1C:FF:E6:25:32:0E:20:F3:AF:6E:61:89:D1:66:20:D0
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:6f:9f:88:68:d9:17:50:b6:86:e1:f4:5c:3e:d7:d7:f7:
da:5f:fd:28:1b:f3:e0:14:8f:08:6b:68:c1:ee:c3:7c:cd:f9:
51:3f:9e:84:62:ed:ea:16:04:29:04:cf:a7:d1:a7:b2:7e:03:
92:c5:d5:68:7a:e5:ba:26:52:16:af:c3:a9:08:87:4c:02:03:
f7:10:d5:69:3f:11:6d:cc:ed:43:37:1e:44:4b:14:b1:b8:7f:
86:28:98:5c:0c:e5:be:21:cf:51:bd:3e:42:fd:89:89:26:37:
2c:5a:1b:37:a8:2a:07:d5:a7:bc:26:ef:07:d8:1d:ac:54:90:
bc:c2:e2:e8:85:40:a2:62:1b:3c:8b:53:f2:73:c1:17:b1:98:
4c:68:c7:16:52:4b:6a:68:bd:d8:84:d8:af:1b:0c:c7:79:1b:
15:61:6e:21:d3:46:a4:8d:d9:dc:8a:06:ba:9a:84:42:d2:c3:
5d:42:a3:c7:bb:43:90:e2:cc:73:c7:39:68:38:7d:b0:93:0e:
33:1d:c7:1c:f5:43:2e:63:ce:e0:e6:a3:b8:ea:1a:ab:d3:8d:
32:f1:ab:f6:c9:e4:55:b5:2c:f4:9a:62:cd:52:7b:a7:58:a7:
b5:50:4f:78:f9:9c:44:f1:ba:1e:fb:1f:0b:57:ae:7e:6a:c9:
f6:42:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:34 2026 by rpki-client