Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: huCke/4kgv9qaHd/SMgJW0VExEVMf6uCmNwktK0bydo=
Subject key identifier: 2F:35:E6:80:B6:60:A5:CA:7C:54:4F:F0:AB:9B:7B:C8:E2:DE:F5:E2
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01A175F05B6791AC819BBDF9400F5250B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 17D3
Signing time: Mon 26 Oct 2026 02:00:48 +0000
Manifest this update: Mon 26 Oct 2026 02:00:48 +0000
Manifest next update: Tue 27 Oct 2026 02:00:48 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: 9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa (hash: YJWL8DLQPhj/nDX+QYjr1+pXanbWsVZjAovQ36i7A/U=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: hB6MVFsScgHGwAAMY5N8cbMdEaendbQT+OC8yg/atzA=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:5b:67:91:ac:81:9b:bd:f9:40:0f:52:50:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Oct 26 02:00:48 2026 GMT
Not After : Oct 27 02:00:48 2026 GMT
Subject: CN=2f35e680b660a5ca7c544ff0ab9b7bc8e2def5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:5e:a9:f2:78:11:06:ce:52:17:0c:18:0b:
30:dc:8c:38:37:10:21:f0:86:9c:cb:6b:07:3f:99:
3c:d3:12:f0:e9:4e:e8:7d:2b:39:ed:c7:c5:52:89:
81:fa:1c:32:10:aa:30:8f:08:2d:a4:1f:e7:6b:16:
1e:00:fa:b2:30:02:6f:33:eb:f2:50:79:cc:ae:91:
a3:a8:a7:94:32:76:45:9a:e0:4c:9e:b9:53:6c:ff:
e0:4a:ce:44:81:d5:67:3b:b7:51:1e:9c:01:8b:98:
48:50:79:8d:9a:4f:46:5a:39:6d:ef:70:89:e9:b6:
c2:31:40:57:d0:8f:33:ec:b2:6e:da:ca:10:c0:5f:
d6:27:11:67:18:32:28:64:3c:8f:ef:7d:8d:54:5b:
09:81:95:7c:7e:ca:ad:3d:6b:45:18:b9:4f:1b:97:
e8:b4:54:02:3c:e3:6c:23:f6:78:1d:0c:67:e5:f0:
2b:2d:b7:70:12:42:39:6f:ae:9f:86:a3:07:82:c3:
7a:9b:19:16:15:bf:a5:cd:24:8d:f5:6e:62:40:ac:
12:57:d6:81:c9:35:a9:b9:29:d7:4b:de:80:32:8f:
22:ca:8b:30:da:eb:1a:47:4c:8a:0a:0f:24:92:a3:
bc:79:5a:4b:31:0e:f8:11:36:43:20:74:56:0c:d0:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:E6:80:B6:60:A5:CA:7C:54:4F:F0:AB:9B:7B:C8:E2:DE:F5:E2
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:2a:2f:83:f8:90:04:f5:c0:5c:05:ee:7c:ae:27:ea:56:
e6:cc:27:b0:fc:f2:95:44:8e:b8:65:27:cc:ba:96:f7:c2:65:
57:2f:50:62:4a:97:22:3e:60:f1:a3:e5:27:9c:03:f4:6f:0b:
9d:91:dc:82:64:6a:c1:5a:80:e8:c8:ca:4d:1e:67:d9:ab:bf:
67:c0:43:2c:77:19:7b:54:0b:c4:ba:56:af:44:ad:87:18:84:
eb:6e:c0:8f:08:52:ba:b2:02:cf:64:a2:c4:c5:8a:17:91:c0:
39:be:b1:2d:fb:9f:7a:6b:4e:ad:0e:84:70:30:4a:0a:d0:eb:
c2:ca:f0:34:a7:77:da:e9:74:58:3d:39:91:e9:fb:c5:66:75:
28:31:88:40:c6:97:7c:8a:a5:c5:b8:c8:e9:ca:74:47:e6:d8:
07:bb:73:8f:e6:3b:53:3d:58:52:c8:66:66:04:dc:81:5f:d8:
02:0e:02:33:23:1d:59:73:21:57:1a:e0:e7:4a:ad:07:31:17:
f3:dc:b0:07:21:a1:ed:bf:0f:89:8c:9f:d1:9b:a1:3d:57:45:
bf:04:d3:0e:30:56:07:d6:bf:89:e4:f9:9c:a0:0d:29:22:f4:
f2:16:55:0d:27:71:95:73:7c:26:6b:04:40:81:54:5b:0c:08:
6d:17:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:37:38 2026 by rpki-client