Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: rVrQXoH3QGvfrizmZYk1QtJXIsgL7KszgdAc1raG2N4=
Subject key identifier: 78:01:15:F2:47:E3:0B:8E:9B:D9:79:E0:B9:04:0A:03:80:69:87:61
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01A06FF1AFC1983AC7A16224CB11E5174683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0D7D
Signing time: Sat 05 Sep 2026 05:01:45 +0000
Manifest this update: Sat 05 Sep 2026 05:01:45 +0000
Manifest next update: Sun 06 Sep 2026 05:01:45 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: /fSqKMfWS/XCbFemU/6gWvpTAltyzBPMLyWlghI/7f4=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:af:c1:98:3a:c7:a1:62:24:cb:11:e5:17:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Sep 5 05:01:45 2026 GMT
Not After : Sep 6 05:01:45 2026 GMT
Subject: CN=780115f247e30b8e9bd979e0b9040a0380698761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:7f:22:c0:5a:13:9c:4d:3c:ab:f1:fc:d9:
7e:c2:8e:3b:79:fc:03:78:f8:49:66:0c:1b:61:5d:
b3:a4:03:f1:c2:d4:ea:4a:52:9b:5e:ad:3c:60:85:
87:59:d0:58:b1:10:e7:0d:4f:58:23:c7:eb:c2:81:
72:8c:92:3c:6f:ce:f5:6c:e5:37:7d:e5:32:52:48:
62:20:e7:49:f2:da:6a:9a:56:a5:92:1f:14:10:4b:
3c:3b:f1:37:0c:47:43:ac:21:ca:ba:fe:40:dd:21:
d3:7a:d7:be:83:89:67:b9:21:41:5d:dc:8c:ca:d1:
73:95:ab:26:bb:38:ba:43:7f:01:53:c5:1a:77:17:
0c:01:4b:43:10:a3:df:c2:00:61:b7:f8:6b:44:b0:
5e:22:62:4d:41:c2:61:91:07:64:1c:8f:65:ed:80:
c7:e2:21:fe:c6:00:3e:4a:72:68:87:40:11:df:59:
0c:91:23:2c:af:01:85:8e:a2:5b:f1:06:7b:ce:79:
f3:0a:b9:26:be:7f:8b:3c:2e:d6:56:04:c8:7c:c1:
dd:21:b6:f1:af:c2:5f:cb:db:ee:ca:78:dc:08:bd:
9c:23:e9:40:3b:18:a1:15:6d:73:d9:c4:51:6b:e4:
79:79:5b:ef:37:3a:b4:1e:d0:f7:18:53:d4:6f:86:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:15:F2:47:E3:0B:8E:9B:D9:79:E0:B9:04:0A:03:80:69:87:61
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:20:1a:81:e5:c8:b9:32:8d:f5:2e:94:f7:d8:34:67:df:
01:c5:e9:ed:33:d1:7d:b6:95:86:ab:e8:bc:f8:a4:f8:9e:b5:
1d:6b:d5:97:18:ec:cb:52:b8:da:0e:97:a1:01:b9:32:23:cd:
59:e5:c1:5b:05:ac:13:b4:20:2e:6d:b9:4a:93:31:80:f2:8d:
9e:ea:d4:04:d4:75:b9:e9:7f:b1:0e:f0:d5:c3:cb:b8:3a:2b:
b5:48:3a:c1:76:45:12:2c:e5:13:59:25:c7:24:5c:4d:16:63:
3d:35:78:39:25:26:a3:5e:3e:1c:81:64:e5:4f:e6:10:36:37:
20:2a:04:8e:0c:9a:de:d5:89:b9:24:9c:c5:3b:06:a2:fe:98:
aa:70:92:35:53:0e:db:69:4e:a4:b3:69:3a:f5:e7:87:a5:9f:
2a:01:35:76:74:4c:c8:86:c7:89:8f:7f:a5:32:e8:4b:32:85:
0a:c2:46:ea:06:c2:aa:02:13:02:33:81:47:6a:ae:3e:50:51:
f7:d3:ca:8a:f4:5b:7c:53:5c:f0:32:c2:3b:5e:93:f5:b2:b7:
91:5a:be:8b:43:12:73:52:0e:53:ad:18:94:a9:90:54:04:5c:
14:f2:6b:40:55:dc:73:3a:77:06:51:d9:ad:4d:d0:21:52:f6:
d1:bf:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:09:10 2026 by rpki-client