Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: sJajggBl9Lqh94U9g+Rgx07A3OfdvnNYQRyfrDp7SMU=
Subject key identifier: CE:53:81:3D:3E:ED:80:C7:48:2C:D3:C9:FF:EE:6B:C7:92:21:AC:25
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01A13F6FE386638B7068E2405F6E0E41456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 12:00:59 +0000
Manifest this update: Thu 15 Oct 2026 12:00:59 +0000
Manifest next update: Fri 16 Oct 2026 12:00:59 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: ci3YiQ9ao2fdArbxH81wJqxMYIfSblTGqa+9dmibnNA=)
2: b8fmiRsHfa1HeafrL2c67PcFnCg.roa (hash: LNAixwqyhx4gcnGKNiUYlHjHNINv1hh3kb/KDSTw940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:e3:86:63:8b:70:68:e2:40:5f:6e:0e:41:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Oct 15 12:00:59 2026 GMT
Not After : Oct 16 12:00:59 2026 GMT
Subject: CN=ce53813d3eed80c7482cd3c9ffee6bc79221ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:4b:db:4d:6a:ad:77:b4:8c:55:fe:35:43:
0b:fb:17:ef:66:12:56:ff:d1:84:90:23:e4:46:a8:
31:1c:33:fd:a4:57:02:81:8d:d3:3d:92:d8:60:69:
2c:45:53:86:e5:5d:2a:c4:4e:92:08:58:f3:e7:96:
c7:10:d6:15:9d:71:97:18:76:bc:f4:d5:11:36:f8:
0a:d8:fc:be:17:2d:c2:a4:70:37:9d:ea:ee:cd:21:
31:2a:c6:86:01:67:7d:d5:02:7b:43:99:8c:2e:01:
b1:3e:d5:49:53:9d:b9:57:ba:cf:b2:18:7a:c7:12:
74:06:9f:a2:f9:52:11:f9:21:5c:ec:9d:33:0d:d2:
eb:d4:e4:db:54:b5:57:9f:65:36:65:47:71:63:de:
b6:8d:96:1c:3d:ab:33:31:f7:98:7a:60:d6:ed:ff:
62:4c:67:15:26:52:32:a4:ca:0b:42:4b:91:b6:3f:
2d:9c:b2:7a:a8:e0:e9:03:94:78:c9:71:ae:75:e4:
d7:a1:62:fb:2f:b2:c4:2c:d1:d3:e7:72:fe:f3:26:
9c:02:51:f9:d2:a8:71:cb:6e:05:b0:aa:21:6a:b0:
bf:bf:4d:a4:cb:c8:ef:66:78:7d:b7:37:c9:8a:8d:
8d:4c:22:b7:91:7b:51:cf:f1:d3:fa:ae:92:0f:8a:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:81:3D:3E:ED:80:C7:48:2C:D3:C9:FF:EE:6B:C7:92:21:AC:25
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:75:48:43:fa:0d:d1:17:61:20:5a:e2:bf:78:38:ab:21:d2:
14:83:49:3a:d1:90:76:06:a1:bd:c7:4d:93:cd:0a:67:33:7e:
42:57:e8:4a:e4:c2:48:50:ee:ef:89:60:ba:0c:3b:85:0e:e0:
31:bd:f3:c9:c7:54:4e:a2:6c:22:93:44:3c:5d:2c:a8:05:3a:
1b:52:ba:97:c2:b4:56:9d:bc:eb:39:50:76:0f:3d:87:51:aa:
44:88:0b:80:30:2a:ca:ae:5d:74:64:ff:50:bc:5b:ff:8f:ea:
d7:1a:8f:8e:35:f2:d8:a9:c2:87:d7:5f:fa:fb:c5:f5:6f:9b:
39:fc:7f:b9:54:6d:00:69:64:25:7d:56:c8:cc:9e:cf:a1:17:
50:86:c3:ab:90:eb:4c:68:d4:60:70:43:53:40:e9:c8:8c:d6:
4b:26:a0:f6:e3:2f:93:29:a4:0a:e8:57:97:af:c2:2f:fb:42:
19:e0:e1:3d:15:f1:4f:4d:a9:54:92:77:3a:30:18:aa:ed:20:
f1:45:94:4d:92:ba:15:8b:ca:fc:fa:a4:3c:0f:99:41:e2:ee:
c4:de:7c:78:25:2b:79:07:fa:57:89:f7:a4:9d:7a:d2:a1:fd:
f6:47:d7:6d:15:f3:da:8d:cb:2f:14:4e:32:3e:9f:0e:6d:27:
18:35:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:26 2026 by rpki-client