Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: hOVCdKw/g9P9GhCXAduw8T/ECvKm6Fl60tFNUtm3/hk=
Subject key identifier: 3E:39:D0:EF:A2:82:F6:36:E1:A6:59:FE:BB:D4:5E:8E:CA:E9:EC:C6
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01A0017032276191117C4202FEE82804F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0D2E
Signing time: Fri 14 Aug 2026 18:02:04 +0000
Manifest this update: Fri 14 Aug 2026 18:02:04 +0000
Manifest next update: Sat 15 Aug 2026 18:02:04 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: BqXoj+ey7FSZfGpGRaH8qOEH+UrkjMk1USgrZZhTMjM=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:32:27:61:91:11:7c:42:02:fe:e8:28:04:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Aug 14 18:02:04 2026 GMT
Not After : Aug 15 18:02:04 2026 GMT
Subject: CN=3e39d0efa282f636e1a659febbd45e8ecae9ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:f8:db:46:d2:5c:8a:19:c1:be:d0:1d:96:
f2:2d:cf:da:e6:8e:17:a9:3d:73:77:13:82:11:ce:
e8:ac:e5:0a:5c:3d:ae:f6:20:7d:ef:3b:6d:57:83:
33:30:41:42:2f:69:98:0e:9d:f2:24:4e:41:bd:83:
44:b2:74:49:90:da:06:5f:fc:ba:e0:ce:c4:f9:d3:
79:f6:ad:ab:ce:58:2f:ca:37:45:e9:9f:07:87:65:
ac:be:50:d6:1b:3a:c8:1e:6d:63:2f:1c:95:78:db:
55:0a:f0:d9:9a:2c:11:dd:24:fe:c0:e5:7f:ef:18:
18:69:1f:9e:cc:c3:e3:7e:94:bb:30:6e:8b:a6:80:
06:37:e7:a5:3c:ab:38:04:13:91:1c:7b:3b:64:98:
02:9c:35:33:99:2d:90:a3:e0:68:c7:62:e2:0c:a9:
a3:d1:c4:8d:5a:f2:f8:e7:5d:b1:26:6c:b6:4d:7f:
27:d0:4f:e2:f3:03:4f:2b:4e:cd:af:03:92:ac:8f:
66:7e:66:21:95:b7:c9:d8:7b:b5:8e:d7:cb:11:fa:
ce:9d:76:0b:75:b7:75:11:f3:57:4b:ea:70:a5:69:
a2:96:f3:a4:3e:93:e3:f1:b9:cc:de:8d:38:c2:0c:
52:78:80:6b:85:e5:00:4a:39:fe:27:7f:14:b5:19:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:D0:EF:A2:82:F6:36:E1:A6:59:FE:BB:D4:5E:8E:CA:E9:EC:C6
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:9a:17:c2:fb:3b:58:47:51:48:aa:bf:77:f0:7f:6d:15:
cc:01:60:e2:5e:b3:c7:6b:8d:7a:76:e8:79:14:24:9b:33:5f:
0e:6a:c3:c5:31:57:6d:d7:ed:be:ba:65:60:c6:d6:7f:a1:97:
1b:f4:a3:f5:90:36:f9:5f:49:31:86:e6:5d:48:3f:59:a1:dd:
b2:9d:cb:d8:ac:17:6b:91:fc:3c:b3:e0:ba:01:be:0b:bb:c3:
f5:9c:e7:14:b9:32:32:22:6f:b9:76:f4:64:0e:d8:b4:00:29:
49:0f:5f:16:d7:29:90:61:c4:82:d4:4b:a2:67:0d:38:8a:5d:
4d:68:78:51:01:b1:bc:c0:71:ca:09:3a:54:26:de:31:d4:69:
e2:44:42:ee:c6:0b:50:05:ac:94:97:fc:23:a4:f3:d6:25:18:
e3:47:95:3c:59:40:91:55:22:23:1f:26:f2:21:f7:c1:ab:a9:
08:52:37:c2:23:e8:13:8a:44:49:f8:b5:e4:93:b2:9d:21:51:
b5:1a:9c:30:f9:77:48:c6:9d:f6:92:35:71:d3:72:34:ce:95:
0e:5c:75:c7:6f:98:a8:fc:6d:56:c9:7d:12:72:e1:95:01:aa:
d5:ea:02:74:d0:c4:47:97:ca:dc:bc:21:56:63:3d:d8:94:91:
8b:e4:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:12 2026 by rpki-client