Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: Vju0Fez27nRgegTNH7ekVqv7GdIKqEMnpBHR0SAYYT8=
Subject key identifier: 9D:BE:74:16:07:7C:00:83:E6:D3:24:3F:1C:C7:CD:43:23:D9:1C:45
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01A16722A9B9D10781BB259880D38DE22D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0DFD
Signing time: Fri 23 Oct 2026 05:01:27 +0000
Manifest this update: Fri 23 Oct 2026 05:01:27 +0000
Manifest next update: Sat 24 Oct 2026 05:01:27 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: hrKHq4warzIkJV5JKWyasHiZGTLGDW10M7pLGouOPjQ=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:22:a9:b9:d1:07:81:bb:25:98:80:d3:8d:e2:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Oct 23 05:01:27 2026 GMT
Not After : Oct 24 05:01:27 2026 GMT
Subject: CN=9dbe7416077c0083e6d3243f1cc7cd4323d91c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:bb:9f:f0:39:0d:8c:69:7d:e7:c6:0a:08:
04:53:7b:0a:3c:85:55:6c:f9:ed:b1:08:14:48:bc:
82:b1:69:26:1d:c6:37:cf:7f:d2:bb:cb:51:39:0c:
e1:9e:26:da:38:20:6f:ff:9c:08:49:f7:af:6e:eb:
e1:37:4a:18:00:f7:c6:73:d8:77:da:49:8c:66:26:
97:79:3d:86:af:f9:f6:c4:48:25:74:25:49:d9:78:
be:e7:6d:90:0e:d5:99:01:50:54:b3:c4:a1:04:e9:
f5:f9:04:bc:73:4d:4a:34:c4:24:c5:6b:15:a6:c4:
36:a2:7d:7a:77:e9:40:6d:d9:4c:83:c8:f6:ac:a8:
e9:cd:7b:88:5e:70:ef:76:72:29:1b:b5:6c:85:ae:
ca:f9:df:78:47:69:e2:1e:d7:45:db:72:3b:a5:80:
a8:d8:e7:61:61:3c:25:76:ef:dc:fa:fc:44:04:45:
51:37:ca:14:b6:3c:64:16:de:42:19:9e:e2:df:2b:
50:95:16:9e:c6:ba:37:e0:0d:92:b7:67:45:08:03:
75:65:2f:6b:f3:a6:33:30:81:64:6b:a2:d1:ed:92:
e9:f9:b4:ab:d2:56:cb:15:3d:1a:d4:23:a4:ec:d3:
1a:3e:95:f2:a5:b8:8d:f3:1b:fb:ac:45:03:80:96:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:74:16:07:7C:00:83:E6:D3:24:3F:1C:C7:CD:43:23:D9:1C:45
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:75:a9:ed:ae:2e:62:93:d4:6c:b2:b8:f5:a4:c3:dc:c2:0c:
97:1d:49:a1:d6:ea:af:4f:28:c8:ac:00:de:ab:57:9b:b1:33:
5e:42:7c:b4:46:af:88:da:75:6f:62:ea:ba:85:25:42:e6:d2:
34:90:0c:42:01:f0:e4:83:a6:ba:27:9e:83:c4:74:a5:13:9b:
f3:8e:c7:2f:51:6d:26:69:31:3e:a6:05:d2:f6:44:90:a0:22:
0e:4d:a9:5b:98:78:5e:48:59:b4:74:c1:18:bc:aa:8e:64:15:
e5:3e:c8:86:72:47:aa:58:4e:7c:4c:83:6c:10:3e:d0:74:95:
97:b1:10:70:8a:07:01:9f:3f:5c:b0:bc:f4:fb:7c:b3:50:96:
5b:43:62:fe:17:9e:c6:4e:f7:4f:dd:93:4d:3b:73:32:a8:85:
2c:82:e1:fd:77:c7:9c:e8:41:7c:95:60:6b:fb:fc:ee:08:b9:
e1:a6:b7:41:04:83:55:b6:f3:0e:40:20:51:9e:49:cb:86:22:
5d:51:a5:1b:10:98:1f:54:f8:91:3e:21:7d:d5:39:88:d5:45:
7d:aa:25:15:16:ef:86:40:00:13:51:7e:e4:80:60:91:bb:ab:
f3:ab:70:ce:63:97:55:13:37:27:f3:af:cb:95:37:2d:a7:af:
7b:a1:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 12:38:45 2026 by rpki-client