Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: 6hhFW06b/BfZ9ECw8mnGnV9VXVbACTCmjGmowbXmQxA=
Subject key identifier: 07:0D:70:17:A7:C3:AA:63:EA:37:FD:CF:1C:92:53:3D:0A:D5:05:84
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 01A1618E3D46A8CE739E54FD578F09AF0BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 03E8
Signing time: Thu 22 Oct 2026 03:01:14 +0000
Manifest this update: Thu 22 Oct 2026 03:01:14 +0000
Manifest next update: Fri 23 Oct 2026 03:01:14 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: t/yFORo6voKnhm2I4nTW/MtkN5AERqTaaiDY7mZ0hrg=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:8e:3d:46:a8:ce:73:9e:54:fd:57:8f:09:af:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Oct 22 03:01:14 2026 GMT
Not After : Oct 23 03:01:14 2026 GMT
Subject: CN=070d7017a7c3aa63ea37fdcf1c92533d0ad50584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:c8:89:25:24:cd:91:a5:ca:6a:9d:ae:51:
69:a9:4b:4f:ca:e8:b9:d8:51:fd:76:c9:f4:1c:a6:
ce:7a:53:d3:27:d0:f2:27:a6:82:ee:a7:22:94:60:
c5:62:7a:d3:cc:c6:2c:fe:df:56:df:65:c6:14:c2:
88:3c:e1:78:c0:02:81:05:13:f6:ec:38:08:e1:c7:
09:99:59:02:59:e5:8c:2b:a7:aa:36:fd:e3:65:f6:
f0:ce:02:fa:1c:17:95:84:d2:f8:ab:15:ee:55:9a:
35:60:a1:86:36:7b:92:3c:f2:31:d7:b8:d1:e9:d6:
c0:4e:89:7b:0c:21:b4:87:08:5b:5c:d0:24:02:2b:
6d:62:2e:1c:3b:fc:9f:6c:f3:71:12:63:85:ec:e1:
f4:13:56:d4:76:8b:c5:86:82:54:78:87:48:0b:78:
91:c9:17:ce:3e:66:7b:5b:00:d7:f8:fd:e5:1e:4e:
5f:b7:e5:f2:c9:6e:de:6f:46:e5:4e:eb:b8:3b:f3:
e1:2b:b0:b4:25:f9:b0:03:bc:36:eb:c4:3e:8c:23:
df:3d:2f:77:13:59:8f:6f:af:79:69:b7:64:52:63:
7d:38:0c:96:27:2d:1f:79:8e:41:ee:76:91:57:5d:
18:4b:93:5b:39:54:60:67:a3:c3:eb:24:1a:35:c4:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:70:17:A7:C3:AA:63:EA:37:FD:CF:1C:92:53:3D:0A:D5:05:84
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:94:31:00:0a:eb:30:3f:19:7a:e7:82:33:7e:07:2a:ac:
19:8f:76:ae:63:3e:50:f8:b9:76:e8:d0:84:09:41:72:59:f3:
be:8f:ab:4b:6e:c6:60:e1:ee:44:4d:ea:7c:67:ff:8b:53:e4:
4a:b7:83:6e:d9:83:6e:1c:8a:d2:98:30:96:0c:74:36:77:3b:
d6:46:ed:33:46:2e:51:b1:88:6d:63:35:d1:bc:8d:bf:5f:b3:
17:66:fe:75:c9:d0:58:85:09:c1:47:95:92:e1:ea:a3:06:27:
0e:af:a8:68:a8:4a:a8:f8:c5:46:79:de:ea:09:fe:0a:1c:aa:
d4:06:f4:87:c2:77:bd:f4:ed:a8:2b:f4:80:df:0c:f6:36:e6:
c5:95:96:53:73:bb:4c:da:f6:5b:70:74:2b:d8:8a:40:95:e4:
e1:ad:f7:6b:07:f5:57:29:ac:67:f5:3d:ae:5d:c3:e8:dc:3d:
c8:79:7c:1d:16:a2:50:4c:dc:73:2d:22:99:20:c5:7b:d5:a9:
14:00:54:f7:e9:e4:e5:15:30:11:8d:ae:e3:1e:2d:48:4a:a0:
8e:0f:82:ad:38:25:3d:1d:6e:93:b0:cc:53:a7:a1:90:05:06:
6d:48:c7:48:02:8b:ea:a1:cc:1a:d0:16:66:29:55:4a:62:d9:
02:ea:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:02:22 2026 by rpki-client