Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: wIdAdsP8pLDVtBDeQAzzLJf4/lPS/UjHS93x4Adtf+A=
Subject key identifier: E8:A1:E7:8D:EF:CE:3E:2E:CA:E6:16:46:9A:00:E2:C4:CE:92:66:90
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01A11597F604BCA3748758D43211EAE9DCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0DBD
Signing time: Wed 07 Oct 2026 09:00:42 +0000
Manifest this update: Wed 07 Oct 2026 09:00:42 +0000
Manifest next update: Thu 08 Oct 2026 09:00:42 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: olL+XObQFX4jq7QJjX1An+7GGpDqMEHgd4UMNi6TYZI=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:97:f6:04:bc:a3:74:87:58:d4:32:11:ea:e9:dc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Oct 7 09:00:42 2026 GMT
Not After : Oct 8 09:00:42 2026 GMT
Subject: CN=e8a1e78defce3e2ecae616469a00e2c4ce926690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:90:3a:af:0e:e8:b9:f2:4f:7e:06:26:10:
fe:84:3c:f6:99:45:6a:66:06:aa:31:82:f8:1d:18:
f8:ce:e6:22:33:ac:81:4e:17:0e:dc:08:e7:44:7a:
7c:3a:94:76:9d:ad:22:7e:6d:02:be:96:33:ad:99:
59:71:b2:7e:41:26:00:2e:23:c6:51:b1:29:b6:3d:
80:5e:50:b4:c1:53:09:ff:30:df:88:1f:d9:c5:ca:
43:80:50:7e:90:9f:69:83:00:c3:5e:25:2a:88:9c:
fc:83:a1:f3:ef:37:e2:33:3c:fa:fa:25:06:58:cc:
98:00:2f:89:43:35:a2:17:c6:2d:a8:84:0a:17:48:
74:0a:8d:ce:83:a4:6f:b4:38:c8:e4:7f:0e:5d:d4:
ac:64:68:d5:82:a2:ac:da:c3:c7:9a:cd:3d:80:2a:
10:83:f8:5f:59:9e:8b:e6:0e:7d:51:bf:6c:d8:1a:
dc:79:4f:5c:8f:43:46:37:7b:0b:f8:68:d0:bc:1c:
57:60:d4:48:53:b2:4e:db:f2:01:fe:2f:33:6f:d3:
f0:5e:16:2a:cb:75:27:5e:7d:aa:10:f6:e1:05:f9:
c7:7f:59:0c:12:2a:6d:6a:4e:2b:18:92:e3:54:e3:
b7:d3:a7:7e:54:f7:1f:40:c8:a0:d2:4e:ac:85:14:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A1:E7:8D:EF:CE:3E:2E:CA:E6:16:46:9A:00:E2:C4:CE:92:66:90
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e8:f4:0a:c3:a7:77:ad:59:8b:49:a2:8c:94:af:a1:bb:41:
e5:06:b5:39:0a:91:16:ca:14:8d:ed:ce:b1:25:6a:ef:4a:bc:
9c:e2:c0:99:fe:91:fb:10:33:d5:d9:2a:73:d6:d6:7e:c6:13:
88:15:7d:05:ff:11:4b:fc:01:3d:00:c2:95:c6:17:bb:39:c7:
89:85:bf:c7:f5:e1:67:fe:ec:67:17:5c:83:0b:8f:5b:74:01:
5f:13:4b:b5:d6:96:fc:91:06:c9:61:2a:a7:90:20:c5:72:20:
28:26:a2:63:77:20:82:34:4e:fb:7a:4e:9c:24:aa:b9:60:84:
28:d2:41:87:59:89:49:5f:f5:2f:8a:04:e6:bb:b3:b2:4d:4e:
55:55:59:e4:86:db:fb:05:82:9c:5e:97:77:cb:f4:d8:b2:28:
1c:8f:3f:0a:c5:df:12:fd:2f:98:ec:4d:98:3f:dc:3e:75:82:
8e:0e:64:d6:81:66:cd:31:c7:a9:f3:d2:04:de:b5:b9:60:ae:
27:79:12:b8:e9:72:2e:7a:f6:91:f7:0a:a4:0a:f8:f3:29:e9:
13:ad:9f:25:71:2d:5d:bb:71:66:64:9d:41:6d:10:4b:19:50:
f4:76:9f:a7:3c:1c:c8:e3:cd:b0:01:df:97:2b:86:21:05:c9:
6b:28:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:13:19 2026 by rpki-client