Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 5UR44ywTNhsLmOKl/VtkR1TYinzODon1zSHapW2xrh4=
Subject key identifier: 89:99:BB:36:28:05:C9:50:C6:5D:A5:0F:A3:BB:9F:AB:47:B7:8E:5B
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01A181504D0A0578C985264132E3863BB9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 08EB
Signing time: Wed 28 Oct 2026 07:01:25 +0000
Manifest this update: Wed 28 Oct 2026 07:01:25 +0000
Manifest next update: Thu 29 Oct 2026 07:01:25 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: zztmV5RmFH9jxqPN6bchI8WZ/YG5iRabKtO2A1vrkxQ=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:4d:0a:05:78:c9:85:26:41:32:e3:86:3b:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Oct 28 07:01:25 2026 GMT
Not After : Oct 29 07:01:25 2026 GMT
Subject: CN=8999bb362805c950c65da50fa3bb9fab47b78e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:09:8d:73:87:b8:dc:c3:0c:52:83:43:71:
cd:07:ef:9b:67:2b:36:eb:8f:23:32:92:be:b1:24:
15:72:1b:3d:78:a3:8f:56:a7:f1:fb:1e:5b:ed:05:
18:fe:63:53:0c:40:7b:d1:20:aa:fc:e8:37:73:84:
c3:4e:68:94:cc:72:ba:b6:48:3b:4f:05:63:8e:09:
b5:c4:98:d2:de:7d:d4:84:bb:41:c4:63:4f:e6:7e:
ed:ce:13:1b:ea:f6:f1:76:aa:4a:86:88:84:4f:d6:
b8:a2:2b:7a:5e:c7:f8:55:bb:0d:53:c1:0d:f3:a5:
42:df:07:4a:2c:a5:71:50:1f:f9:b6:fd:36:77:bd:
5e:84:43:c7:ff:87:d0:73:08:23:c2:2d:6a:f8:03:
fd:67:16:22:18:0c:3f:2c:c0:d5:59:61:c3:a0:5c:
65:05:71:52:9e:14:68:e8:97:cc:fa:68:7c:9d:45:
09:29:84:21:ba:64:e0:c9:cf:a1:6d:92:87:23:f0:
a5:79:6e:81:1e:cd:21:d7:f9:6a:d0:ce:b6:64:c3:
3b:c4:95:a2:fb:80:9d:48:9d:4b:e9:f6:21:30:2c:
1a:d6:ac:e9:61:a3:76:9b:35:a0:d6:45:90:0b:d4:
57:b9:88:3f:1a:32:4f:8b:f6:59:42:e9:ef:f3:a7:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:BB:36:28:05:C9:50:C6:5D:A5:0F:A3:BB:9F:AB:47:B7:8E:5B
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:2e:30:bf:42:68:aa:81:30:d2:3a:ac:7c:bd:f5:3d:2c:
60:bc:27:e8:59:93:23:3f:a6:a2:b6:c0:f5:6f:a1:43:a8:37:
08:0c:9a:00:b3:f4:08:f7:8f:43:f8:e0:c0:df:64:94:45:5a:
b2:02:ec:9c:5b:ae:8a:59:40:56:01:95:ef:06:a3:b8:7d:0d:
94:79:77:ab:ab:a1:dc:be:c3:c4:ed:e7:97:3d:8e:a0:e6:87:
69:30:7d:0b:f9:e8:32:02:2d:5e:de:6e:aa:13:1f:ef:b9:be:
56:89:9e:9d:2f:53:8c:67:c8:0c:c4:99:42:ae:0f:f5:c9:8d:
aa:60:43:9e:78:2f:dc:b0:7f:e7:ce:5b:85:0d:83:c0:6d:95:
38:11:4f:66:38:46:ca:aa:27:4b:8a:3d:18:62:a6:fb:e6:a0:
3c:4a:f4:11:3f:e8:0e:a1:c2:b2:89:02:64:46:10:c7:c8:6a:
0a:00:bc:5f:80:01:34:ba:31:04:32:2f:9f:b7:c1:c0:c3:39:
2a:5c:44:01:2f:b6:46:07:b7:07:30:e0:68:c7:f1:16:3f:d4:
27:e0:23:c3:f4:16:7f:e8:3d:5b:a7:71:5e:15:7b:f5:f5:6d:
76:0a:c1:38:90:2e:03:d6:d0:10:9f:b5:95:96:82:2a:b5:bd:
37:53:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:51 2026 by rpki-client