Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: yhzAbv6Phzpb7TWoPrxJhBZEiVQWyLZh8lvZwnQKC9Q=
Subject key identifier: 3A:27:3B:66:4E:D5:0A:0F:92:9B:2D:B4:E1:EC:4C:01:9A:78:80:88
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 01A105B7D77D255931F6AA45EF41662083A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 07:01:36 +0000
Manifest this update: Sun 04 Oct 2026 07:01:36 +0000
Manifest next update: Mon 05 Oct 2026 07:01:36 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: iFr+Cb+Pqd3ABy0xqWg2Qcm0tsKM7BOld/xqKul0hRc=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:d7:7d:25:59:31:f6:aa:45:ef:41:66:20:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Oct 4 07:01:36 2026 GMT
Not After : Oct 5 07:01:36 2026 GMT
Subject: CN=3a273b664ed50a0f929b2db4e1ec4c019a788088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:69:4e:35:ef:78:6b:ce:41:73:d5:14:ae:
95:6e:78:46:45:f9:69:a8:40:e2:da:bd:d2:3a:95:
54:9f:46:06:1b:18:e5:33:08:14:59:6d:3f:7d:fe:
7d:a2:a6:76:6e:28:d3:91:cc:50:1b:71:ae:c6:11:
eb:d8:c5:e0:df:16:67:3d:00:6e:ba:74:c3:bb:14:
97:b8:68:12:90:f7:e1:f7:ef:ca:ce:30:cc:dd:22:
68:82:2c:e1:90:67:49:2e:36:7c:7c:84:8b:9e:15:
d4:fc:a9:48:b2:0a:d1:34:85:5b:b4:4e:69:77:f9:
76:d9:d9:38:ae:a7:df:e9:3b:e9:28:2c:b3:f9:60:
a3:1d:dc:da:88:67:9b:96:bb:1e:56:b1:8b:9f:7b:
bf:23:2a:62:82:80:dc:99:83:ef:dd:54:30:bc:60:
70:4d:1a:1e:fe:14:11:b6:4e:e1:10:94:30:7f:9e:
c9:a2:55:d5:21:4d:ab:3d:c4:bb:ef:2d:1e:46:63:
84:94:10:60:bd:92:e2:49:ca:3f:ba:9a:c7:14:a0:
18:70:0f:c4:df:cb:4f:31:29:52:e3:30:22:c3:44:
0f:31:05:49:37:70:bc:da:45:25:2b:b1:c2:f8:da:
70:8a:b3:8c:7b:69:06:47:54:f0:e4:ee:58:b9:30:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:3B:66:4E:D5:0A:0F:92:9B:2D:B4:E1:EC:4C:01:9A:78:80:88
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:64:2b:c5:84:41:09:dd:5a:78:9c:37:c9:89:99:b7:e3:b3:
05:ce:7d:e0:a8:5f:9d:d2:43:95:a2:9e:79:ed:da:f9:59:e3:
c2:19:ee:90:13:3e:60:7c:12:59:72:27:39:e9:a0:05:f5:1f:
06:e1:13:83:3c:47:72:e0:36:b9:6b:54:19:0a:fc:5a:bd:2a:
af:89:06:1a:94:c8:e1:bf:6c:29:c5:e3:27:59:e0:21:34:dc:
0a:a9:01:96:b7:8a:b8:e5:6b:54:47:74:84:bd:c7:26:67:56:
3c:c4:f5:95:fd:55:10:f8:1f:b1:22:e4:40:8d:8e:0a:58:7e:
b4:e9:b1:de:88:98:a1:08:33:da:74:ee:4f:fa:3c:b2:55:10:
ac:1c:27:8b:48:21:20:14:e3:4e:30:61:f5:45:4b:cb:12:c6:
20:23:49:6d:38:b3:f3:0a:be:e8:ea:65:47:39:f7:95:f9:02:
15:61:73:b0:b1:90:6b:3f:87:ac:d8:e7:c7:21:0a:e7:aa:9c:
73:2c:91:16:4d:6e:b4:e2:c0:0b:b8:72:33:63:33:46:09:a0:
a2:79:c7:92:ab:07:d4:ce:dd:ea:3c:9f:f9:ef:ef:5b:d4:f6:
f6:76:a8:4c:e5:f7:9a:bd:9a:2a:8c:ae:69:a1:93:b4:c4:d2:
a4:c5:8b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFt9d9JVkx9qpF70FmIIOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjYxMDA0MDcwMTM2WhcNMjYxMDA1MDcwMTM2WjAzMTEwLwYDVQQD
EygzYTI3M2I2NjRlZDUwYTBmOTI5YjJkYjRlMWVjNGMwMTlhNzg4MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM1pTjXveGvOQXPVFK6VbnhGRflp
qEDi2r3SOpVUn0YGGxjlMwgUWW0/ff59oqZ2bijTkcxQG3GuxhHr2MXg3xZnPQBu
unTDuxSXuGgSkPfh9+/KzjDM3SJogizhkGdJLjZ8fISLnhXU/KlIsgrRNIVbtE5p
d/l22dk4rqff6TvpKCyz+WCjHdzaiGeblrseVrGLn3u/IypigoDcmYPv3VQwvGBw
TRoe/hQRtk7hEJQwf57JolXVIU2rPcS77y0eRmOElBBgvZLiSco/uprHFKAYcA/E
38tPMSlS4zAiw0QPMQVJN3C82kUlK7HC+NpwirOMe2kGR1Tw5O5YuTC2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDonO2ZO1QoPkpsttOHsTAGaeICIMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWQrxYRB
Cd1aeJw3yYmZt+OzBc594KhfndJDlaKeee3a+VnjwhnukBM+YHwSWXInOemgBfUf
BuETgzxHcuA2uWtUGQr8Wr0qr4kGGpTI4b9sKcXjJ1ngITTcCqkBlreKuOVrVEd0
hL3HJmdWPMT1lf1VEPgfsSLkQI2OClh+tOmx3oiYoQgz2nTuT/o8slUQrBwni0gh
IBTjTjBh9UVLyxLGICNJbTiz8wq+6OplRzn3lfkCFWFzsLGQaz+HrNjnxyEK56qc
cyyRFk1utOLAC7hyM2MzRgmgonnHkqsH1M7d6jyf+e/vW9T29naoTOX3mr2aKoyu
aaGTtMTSpMWLXQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:30 2026 by rpki-client