Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
File: c8NA1CPOqEv-S_GRbURn2yhPG9E.mft (raw, json)
Hash identifier: IQJbrYG/8BJMkpo2BdFl2Vw3PmH/ZJKp0abP/nCqyxo=
Subject key identifier: D3:33:FE:8F:57:E4:85:9F:36:54:B8:58:B4:1D:5A:23:47:2E:BD:AC
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 01A1593006EEAABE95B184E06E2610E007AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:22 +0000
Manifest this update: Tue 20 Oct 2026 12:01:22 +0000
Manifest next update: Wed 21 Oct 2026 12:01:22 +0000
Files and hashes: 1: GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa (hash: 62+kuU98oy4EBWbGRZ1tg6jTebE/AiOSPPyh1dqPc7k=)
2: b29z0SmKuf57xTcfTwg8xTH0h9U.roa (hash: 7FbHeUWOoJSoqd/LHofesB/M+xhe9b4HJWzm53NLUIg=)
3: c8NA1CPOqEv-S_GRbURn2yhPG9E.crl (hash: I12OJFD1TtU6MREMSeAiSBGV1gqtcM9vGc5F0BRiWdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:06:ee:aa:be:95:b1:84:e0:6e:26:10:e0:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Oct 20 12:01:22 2026 GMT
Not After : Oct 21 12:01:22 2026 GMT
Subject: CN=d333fe8f57e4859f3654b858b41d5a23472ebdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:eb:69:b9:c2:79:93:3c:79:97:bc:8b:1f:
0d:d2:b0:27:36:38:02:92:de:24:dc:ed:61:b9:60:
15:50:6b:c6:63:ec:b9:30:a4:99:d8:b6:a5:7a:d1:
b2:ab:ad:11:77:f5:ad:0d:0b:7e:8f:f3:d2:b6:a3:
88:fc:15:ba:f4:35:49:c2:b4:35:70:1f:97:22:ed:
93:50:11:38:97:f2:17:67:07:ca:ea:80:99:97:81:
42:95:64:23:aa:bf:f8:8b:40:ae:32:b6:60:88:b9:
b3:da:1d:d7:ac:49:d9:31:dc:17:7a:00:20:69:29:
62:50:95:56:06:01:3c:a1:c6:44:35:81:10:bf:d6:
63:8c:2a:f6:b8:8e:07:87:70:c5:76:10:e0:88:3b:
b6:19:c0:59:3b:43:6e:8b:0e:e1:d6:7c:03:5c:a0:
da:45:3d:d5:f7:63:d2:bc:83:8c:b7:b9:25:f3:08:
40:dd:5f:45:e3:eb:89:65:d6:8b:7d:81:df:ee:c8:
6f:a0:00:4f:19:14:b1:f5:15:3b:24:f5:95:50:25:
d3:c2:d0:18:7c:1b:2b:53:ae:58:1e:9f:c8:26:d0:
48:52:a3:df:9e:2d:87:3a:45:c5:01:93:8d:bc:8d:
45:e1:00:38:47:29:07:27:e1:e5:20:57:87:c5:eb:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:FE:8F:57:E4:85:9F:36:54:B8:58:B4:1D:5A:23:47:2E:BD:AC
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:c2:f8:b7:76:78:8c:bd:19:5a:67:1d:93:21:ed:cd:ea:
b6:4a:07:94:9f:e2:72:15:18:af:a0:d2:f9:48:06:ae:97:40:
2f:b0:0d:97:41:e3:80:6c:89:38:e7:fa:ac:ff:5a:03:e9:76:
38:d3:11:8e:97:fb:d4:8d:0c:ae:db:d8:a5:ce:19:8d:fa:ca:
32:71:cd:32:fd:1a:0b:0f:d4:5e:9a:85:00:a9:bb:2a:f4:4a:
37:5f:7c:f0:ed:29:70:49:85:13:a7:b9:a8:1f:b4:37:a0:83:
5b:18:51:f1:78:ad:ba:36:5c:6e:7d:a4:86:f5:c8:6e:f5:2b:
ae:cf:85:76:8b:69:ec:ba:68:ff:3f:85:34:88:3c:8e:0f:5d:
87:0b:84:41:06:ea:9b:70:70:11:0e:a9:a6:a8:4b:dc:bd:bf:
67:b5:83:ac:42:fd:aa:8c:40:42:c7:25:fc:c4:12:7e:05:07:
b5:72:76:0e:94:76:5b:12:96:b3:ee:92:28:e2:0d:79:a2:81:
60:63:7d:43:52:ba:b0:8f:e1:2e:d3:1c:c6:5b:99:7b:d5:a9:
a7:a4:f4:47:a1:16:03:85:10:c3:6a:4d:1a:27:1f:85:a7:aa:
a1:4a:fe:5c:13:97:16:42:00:87:8f:ce:66:47:0b:ea:61:a4:
8b:b6:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:25:18 2026 by rpki-client