Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
File: c8NA1CPOqEv-S_GRbURn2yhPG9E.mft (raw, json)
Hash identifier: s17+/CzZ+juL7wdPf43UJyaOQV4XEQXEaMDtfkOw2Rw=
Subject key identifier: 76:2D:C4:FC:4A:C6:3B:64:4A:B5:8A:82:3D:9C:83:93:E1:9E:44:F0
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 01A15365B5719A36F5D721AAFE9A0BBAE67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
Manifest number: 0129
Signing time: Mon 19 Oct 2026 09:02:16 +0000
Manifest this update: Mon 19 Oct 2026 09:02:16 +0000
Manifest next update: Tue 20 Oct 2026 09:02:16 +0000
Files and hashes: 1: GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa (hash: 62+kuU98oy4EBWbGRZ1tg6jTebE/AiOSPPyh1dqPc7k=)
2: b29z0SmKuf57xTcfTwg8xTH0h9U.roa (hash: 7FbHeUWOoJSoqd/LHofesB/M+xhe9b4HJWzm53NLUIg=)
3: c8NA1CPOqEv-S_GRbURn2yhPG9E.crl (hash: ok5J4Hy9MQadTXBlgfs77VU5zIpel+JLfJNH5WxjFwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:b5:71:9a:36:f5:d7:21:aa:fe:9a:0b:ba:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Oct 19 09:02:16 2026 GMT
Not After : Oct 20 09:02:16 2026 GMT
Subject: CN=762dc4fc4ac63b644ab58a823d9c8393e19e44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:37:2e:ee:54:b5:6b:43:fa:f4:e3:33:78:
c6:17:f0:7d:dc:27:b5:30:e2:3b:d1:15:21:93:a9:
56:be:29:11:ea:39:01:2d:ff:e7:eb:9d:ae:a4:ff:
eb:40:1f:41:13:6f:99:04:a1:73:49:93:84:a3:69:
60:d4:af:de:2f:21:03:d7:d2:0c:08:39:8d:e4:d7:
f4:fe:3f:0f:dd:09:29:28:22:a0:98:49:b6:a3:07:
e1:11:08:8b:53:41:20:d7:5e:c8:05:65:d7:5e:ad:
0b:ec:12:92:b2:ff:2b:62:28:b9:f1:93:5b:f5:0d:
cc:cf:e0:92:2f:a4:61:38:48:8d:af:d4:d6:4b:52:
e8:7d:3e:a5:ea:06:29:67:3d:c4:fc:39:56:ec:93:
d7:e6:90:a4:24:1b:8b:a6:42:18:42:dd:99:90:60:
26:7a:57:e3:2e:ec:14:16:59:08:cc:9e:c5:c6:75:
40:a4:27:71:0b:0b:f3:8b:13:ce:23:a9:d8:16:e2:
de:7d:76:e0:96:86:8e:07:a0:d2:2e:1d:d1:75:b2:
c2:69:1f:8f:72:57:f6:7b:83:69:d6:c1:44:79:68:
ac:5a:e4:bb:d1:e1:fd:70:c9:df:20:1b:5e:8a:f5:
85:b3:22:43:2c:1b:70:c3:94:4b:61:a4:2d:c5:4d:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:C4:FC:4A:C6:3B:64:4A:B5:8A:82:3D:9C:83:93:E1:9E:44:F0
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:f7:1f:56:97:26:8a:f9:b8:c5:e1:be:e0:03:84:bd:ec:
ce:b7:23:e6:64:6b:66:48:0d:14:69:49:18:10:41:e2:24:53:
1a:f2:1a:0e:c4:43:a5:0d:d8:22:c7:b5:2f:5d:2b:da:07:48:
d8:9d:72:19:46:25:53:20:08:b0:96:5c:84:76:6f:17:c8:cd:
5f:23:8f:37:b9:bb:69:bc:e1:a7:3a:11:a1:c9:d0:5b:6f:87:
4c:6a:75:82:9a:f1:fe:e4:58:b7:e3:67:a4:88:f0:dd:c6:4f:
81:de:98:4b:5a:35:f2:3f:fd:b1:c6:3e:96:65:70:32:8f:e4:
48:ad:7d:b8:76:74:34:a3:f2:0a:9a:d4:a1:ec:75:89:37:f7:
6b:70:15:cb:d1:c6:44:41:b9:0a:91:77:9a:28:fc:e5:61:1b:
d4:27:b3:df:e2:65:04:b8:b7:3e:53:c7:65:3f:47:67:5a:de:
04:9b:cf:46:e5:27:0b:a0:93:1f:18:91:73:2e:f7:cd:35:f4:
5b:24:6a:56:5a:66:ce:cb:1e:6d:9d:b4:00:14:57:5d:eb:cb:
35:f4:45:49:3e:39:2a:e6:d8:8a:22:a1:f1:eb:66:37:4b:e1:
99:cc:de:45:68:92:a2:f6:f4:ac:18:b0:3e:b3:3c:91:05:84:
e2:46:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:47:21 2026 by rpki-client