Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: iaM2KHIjL4QYAeZCC2JijTgS9xEFzmsoshHxwy9c25M=
Subject key identifier: 2C:2A:BE:7A:A2:43:2C:A5:7B:8B:38:FE:D4:07:36:AC:E9:DF:DC:B5
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 01A11CAC5425CA4A412C5D3D63DB33B43B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 010D
Signing time: Thu 08 Oct 2026 18:00:18 +0000
Manifest this update: Thu 08 Oct 2026 18:00:18 +0000
Manifest next update: Fri 09 Oct 2026 18:00:18 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: gYc8ovxEvySnnWszDeMrakJWRWUHrD1HlFEka1AUrlA=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:54:25:ca:4a:41:2c:5d:3d:63:db:33:b4:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Oct 8 18:00:18 2026 GMT
Not After : Oct 9 18:00:18 2026 GMT
Subject: CN=2c2abe7aa2432ca57b8b38fed40736ace9dfdcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:fa:f7:15:08:66:76:f4:99:d1:d0:29:b7:
de:2f:b3:d0:df:40:0c:82:c4:1f:62:56:de:0d:67:
cf:f4:5c:b8:ba:3a:5b:3a:df:40:b3:c5:a3:56:ed:
95:27:51:fd:9d:54:18:3d:2d:84:1f:de:69:91:1f:
9b:9f:de:51:8a:f6:4d:19:bb:15:b7:3f:9c:c2:3b:
e8:43:12:e5:d3:eb:aa:6e:67:71:1a:d7:13:d3:85:
a0:dd:7e:60:b7:02:7a:ee:a1:40:12:7a:32:6f:71:
07:c0:76:a7:e6:15:fe:7d:81:e1:6d:2e:0c:7f:65:
ba:ab:01:71:0f:7b:8a:f7:e1:ba:e6:ed:65:4c:ec:
81:a5:51:a6:4c:c4:61:8e:20:a9:9a:47:da:68:d5:
ca:50:0b:09:f5:be:96:8e:19:a2:e5:67:7b:c3:7e:
6f:41:82:00:4a:e6:44:9d:dd:0d:54:e8:dd:25:0c:
70:ca:23:c0:02:82:e9:4a:0b:ed:7f:f3:0f:86:7f:
26:de:61:7a:7a:9b:dc:6b:59:d6:fa:57:86:13:50:
f6:f1:dc:f9:be:4d:10:fb:e5:a0:d4:7a:37:96:e6:
b1:34:cc:d7:e6:62:12:0c:33:8a:2c:32:3a:cf:a0:
47:39:9a:61:8d:6a:35:8d:43:8a:df:39:17:11:96:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:BE:7A:A2:43:2C:A5:7B:8B:38:FE:D4:07:36:AC:E9:DF:DC:B5
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:02:71:64:db:04:24:04:0a:88:72:cf:fc:1d:10:81:b8:
3b:90:09:2c:8d:97:d5:5d:65:36:0d:fb:8b:6a:fe:bd:bf:69:
26:aa:13:dc:42:e1:16:4a:87:04:8c:94:a2:bc:a3:5a:2f:16:
61:4f:cc:3e:61:4c:1f:1d:6d:d6:35:55:1a:22:31:e9:24:b6:
e9:1d:47:2f:0d:4b:49:8a:11:6b:9d:bd:e2:64:b3:fb:36:f1:
83:03:a4:58:79:e7:d2:06:69:fd:51:27:f0:b1:17:8e:f4:c5:
4a:1f:9d:58:c5:ff:3e:04:42:86:4c:0a:d9:f2:69:54:5b:c5:
b9:b2:21:fa:17:e9:f6:f0:27:e9:00:54:1a:c6:78:21:16:fe:
ea:be:ed:76:6e:63:a4:4b:f8:78:fd:e4:8a:23:c4:09:9b:1f:
92:a5:fc:b2:77:68:e3:f2:85:e5:4f:94:90:fb:12:9f:a1:1d:
69:2d:b8:06:57:6d:dd:9c:2b:34:ae:0b:b2:f8:63:4e:75:47:
2d:47:5c:6c:21:e6:30:80:6a:4d:31:63:37:b7:79:63:0e:63:
b5:a6:b8:9e:48:28:fd:de:c0:f5:02:04:61:3a:02:dd:dd:37:
ab:03:bf:1c:8b:0f:44:cf:f1:84:60:a4:c8:bd:d5:49:9f:2f:
9b:b8:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:58:47 2026 by rpki-client