
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: hoySE0zehk+yGNeqfHCL3+xAtBFX5m6ENdRuvOtDgxU=
Subject key identifier: 4E:BB:C9:EC:CB:AC:A1:2D:EF:36:58:67:26:D5:FB:16:4A:5A:01:C5
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01A08C0DA7B23843D351A252D91BD9E1CEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 086C
Signing time: Thu 10 Sep 2026 16:01:40 +0000
Manifest this update: Thu 10 Sep 2026 16:01:40 +0000
Manifest next update: Fri 11 Sep 2026 16:01:40 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: eX99G3HhVBeP1UqOMa/Ia+eEhpkz/sbpFSdEXoarT+o=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:a7:b2:38:43:d3:51:a2:52:d9:1b:d9:e1:ce:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Sep 10 16:01:40 2026 GMT
Not After : Sep 11 16:01:40 2026 GMT
Subject: CN=4ebbc9eccbaca12def36586726d5fb164a5a01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:60:d2:37:76:3b:9f:fb:c3:99:f9:bd:ea:
e4:14:87:d5:40:00:dc:09:ab:8a:fb:64:f7:32:05:
3b:77:2b:8a:cf:ca:ef:13:26:b1:ff:41:00:67:3e:
11:5b:38:49:9c:9e:99:e8:96:38:70:54:a5:91:4d:
78:2c:24:17:af:cb:d7:19:e0:ba:62:c2:ad:15:ae:
4b:1c:26:27:db:00:a2:85:54:46:55:17:a1:fc:2f:
69:81:39:c7:eb:43:06:f6:ef:ac:2f:95:c6:a2:b7:
f1:4d:47:85:4a:ac:c3:12:1d:1b:fc:fd:2c:04:b1:
ef:be:06:09:7f:95:55:f7:40:aa:58:e4:0c:78:18:
1d:33:27:63:2a:c4:15:32:49:c3:d0:83:40:dd:a8:
14:92:84:12:2e:7a:83:a0:16:d0:bf:f1:9d:31:44:
f2:34:1c:63:f0:46:d7:0f:bb:40:9a:70:1d:d7:81:
af:b3:9f:04:ff:a1:6b:50:e5:85:ce:8a:50:23:e7:
86:99:33:64:f4:a4:0e:72:10:c2:10:25:5d:d5:98:
4b:0e:fc:45:12:dc:21:78:0b:58:a2:84:e6:1f:d3:
a4:05:84:8c:39:1b:7f:bc:cc:12:d3:51:8a:fc:3e:
2d:2a:0e:26:c3:b4:32:3c:ce:13:59:5d:e5:c3:b2:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:C9:EC:CB:AC:A1:2D:EF:36:58:67:26:D5:FB:16:4A:5A:01:C5
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:1d:4d:2a:eb:b6:53:20:a8:17:2f:3c:f5:ac:aa:62:ea:
ce:a9:6e:64:5b:69:f1:34:6b:69:67:cb:7d:d6:9f:6e:23:23:
3f:8d:d2:0f:88:1c:e3:2e:83:75:94:28:0b:af:0e:14:6b:42:
cf:f4:00:2b:30:2a:bd:eb:96:f5:89:4b:5f:4e:06:20:98:6b:
b0:a8:a6:59:e5:cf:1f:b5:d5:a6:2e:0d:9d:2b:ad:32:cb:d6:
93:12:b5:01:ac:19:82:8e:91:67:be:b1:e4:62:43:db:fc:17:
65:ac:5b:f7:4d:30:ee:4e:56:12:a9:9b:95:ae:5f:89:e6:96:
ab:b1:53:b9:30:8f:69:5b:f4:64:4a:9d:b0:33:80:41:24:9c:
f4:7e:b1:b0:87:d5:78:7c:fb:fd:9a:cb:87:00:a0:37:b6:24:
e4:f5:21:05:43:fb:63:e0:e0:ad:96:b9:cb:b4:aa:44:b3:7a:
ef:6c:49:c1:23:00:f5:b1:56:2a:4a:d5:e8:8c:03:d8:15:3e:
97:72:db:b3:93:15:99:51:83:ed:e1:a7:b3:64:fe:15:9f:d0:
eb:f4:96:2b:f1:05:0d:6e:b0:c1:5a:65:6e:cf:18:52:e7:21:
bf:67:ea:92:37:61:ec:07:3b:85:39:34:5f:fc:81:d7:c6:ed:
cd:29:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:43 2026 by rpki-client