Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: 9CJKMiQig5CRjX/v1qrFWxIAHNx7dXlnnU50mTNGC6o=
Subject key identifier: 0D:0D:A1:3D:1C:1B:D6:13:EE:2E:C0:96:67:92:68:60:B5:A5:63:F0
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01A13DB8A67F222DD3AAD1591C4EBDBB88AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 17D0
Signing time: Thu 15 Oct 2026 04:01:13 +0000
Manifest this update: Thu 15 Oct 2026 04:01:13 +0000
Manifest next update: Fri 16 Oct 2026 04:01:13 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: 5HyazVraB0nKhnF9dpJt8LFHhx5DnYAnkfQsCPiLglY=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:a6:7f:22:2d:d3:aa:d1:59:1c:4e:bd:bb:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Oct 15 04:01:13 2026 GMT
Not After : Oct 16 04:01:13 2026 GMT
Subject: CN=0d0da13d1c1bd613ee2ec09667926860b5a563f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:08:44:71:26:81:d1:b5:be:45:b0:fd:04:
b3:44:ba:21:3c:d0:62:a4:ad:04:5e:f3:c2:a6:a4:
61:93:45:ce:57:9b:17:c0:33:a5:89:e9:80:37:4e:
16:61:34:e1:c1:d2:93:7e:de:63:a9:9d:73:45:0d:
f4:76:d5:40:e8:99:27:78:3f:36:4c:dd:18:8f:aa:
56:10:3a:49:16:d9:4a:1a:88:67:fc:44:e2:79:73:
a5:1d:0c:3e:97:b3:15:a8:1e:8d:02:65:8d:1d:68:
0f:f1:5f:30:d8:e3:a0:94:2c:45:93:d3:6b:36:33:
1a:52:e7:35:c2:f8:23:9c:24:d2:a9:af:0e:95:52:
47:70:a4:84:fa:bc:60:89:06:d9:2d:e5:7b:d0:3d:
d8:9f:f1:7a:51:3b:49:d6:e3:52:a1:aa:3f:39:7a:
22:03:0b:40:4c:91:2e:4e:da:0d:0e:85:3f:2e:b5:
5b:bf:77:b6:4b:f6:08:d9:2d:c9:cf:95:87:35:e8:
fe:83:7f:bf:0c:11:13:bd:c0:88:fe:b8:65:2e:44:
f1:3a:c8:b1:d2:24:5d:4e:3a:79:07:7b:a3:1a:9a:
63:5b:ae:8c:fc:0b:20:d0:e2:23:6e:c2:4a:8d:b5:
9f:0a:30:ee:aa:d8:48:48:c9:4b:b1:64:0f:1a:59:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:A1:3D:1C:1B:D6:13:EE:2E:C0:96:67:92:68:60:B5:A5:63:F0
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:27:2e:bb:68:57:82:50:dc:5f:0a:b5:a9:75:17:5d:3a:
2a:1d:f2:29:24:c3:3b:cc:c8:d4:16:59:22:03:63:2f:c4:3b:
39:c9:aa:a5:8e:13:c7:19:1b:e3:07:ee:6e:25:fb:e4:d5:68:
19:a7:42:4e:21:e0:35:8c:1e:82:5a:93:04:25:4e:30:66:31:
02:64:a2:96:a8:dd:09:0b:d1:53:5f:51:47:b0:48:1a:1c:60:
09:c0:e1:4e:97:9c:66:45:c6:9c:7c:b6:0e:65:2b:32:cf:e6:
42:6c:59:ef:0f:a6:b0:49:fc:a9:5f:02:bb:5b:71:c7:0e:2a:
3f:50:55:1a:ad:d1:54:a7:f8:a7:8f:59:6a:4c:61:df:5b:d9:
21:a6:28:7f:c9:91:44:0a:63:a9:ad:ab:ee:02:ca:52:63:48:
ed:4b:ed:77:c5:18:61:d3:a2:d5:21:21:89:24:a3:c8:56:e0:
55:59:09:31:c3:6f:77:4f:57:2d:bb:26:50:f4:db:75:95:d5:
c3:24:4f:bd:00:67:e5:75:a8:10:11:5e:dd:8f:6d:b2:aa:1e:
60:94:85:e5:d8:70:c5:70:2b:ff:39:71:ee:89:a7:ce:48:e0:
e4:25:be:6b:c5:65:d5:3a:a7:6a:4f:76:f0:ff:45:0a:46:1d:
1b:1b:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:48 2026 by rpki-client