Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: DnH6LrBKUaE/T+T9OPR375evvRC0s1HXxLJlHkjKfjo=
Subject key identifier: AE:E2:A7:34:52:02:B2:ED:6D:F7:FB:D3:E5:3D:76:9D:E2:27:6B:69
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 01A12DD7A9F7B389A64D6EC3D589A55B3650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1581
Signing time: Mon 12 Oct 2026 02:01:10 +0000
Manifest this update: Mon 12 Oct 2026 02:01:10 +0000
Manifest next update: Tue 13 Oct 2026 02:01:10 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: QCubLZUOa/XMPYTmkLIhOCVsjqsfL+OxSrmUvKkDNwA=)
2: HZKZt3i0tjhRATmGdiaaPS481ik.roa (hash: VGXONJbfgCWkz7Yv9blCEOKW4j+yHw/XZ24zEdm0ahs=)
3: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
4: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
5: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:a9:f7:b3:89:a6:4d:6e:c3:d5:89:a5:5b:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Oct 12 02:01:10 2026 GMT
Not After : Oct 13 02:01:10 2026 GMT
Subject: CN=aee2a7345202b2ed6df7fbd3e53d769de2276b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:54:74:82:63:91:65:66:93:f5:9a:4b:e5:
d7:a3:65:f8:da:b7:02:66:81:bb:29:cf:37:0d:73:
99:81:f5:3f:4d:79:b2:03:0d:ad:a2:4b:5b:57:98:
47:a8:b1:d4:72:c5:34:3d:32:38:93:78:ab:f7:dc:
bb:22:8a:25:68:35:6a:99:db:ed:85:eb:57:ad:33:
f6:27:8b:8c:af:5a:f0:2a:d8:45:c7:3b:da:12:3c:
a6:02:8a:f2:43:1f:bf:cb:78:b6:03:a0:c9:f9:d9:
73:50:ad:3f:fc:07:60:db:05:0f:58:f9:ff:c9:97:
81:3d:6f:50:10:48:4a:16:cb:bf:ec:de:69:37:b3:
54:bd:55:88:61:9c:ac:50:c4:2c:cf:ab:26:bd:8b:
c9:cc:68:d6:a3:e4:a2:96:4e:7c:67:fd:5f:af:5f:
69:5d:27:2f:92:ab:50:ab:ba:9d:41:37:4d:c1:b6:
ad:b3:6d:ac:5b:53:e8:f0:ab:9b:b8:a3:28:b6:c6:
91:81:57:89:72:85:2a:cb:e3:5e:5b:04:09:b0:80:
cc:9f:55:e8:a5:24:c7:14:fe:29:52:5d:c0:7b:06:
41:02:b1:99:f6:3d:f3:e7:46:48:3b:3f:65:cc:24:
6f:70:0b:e9:c1:e2:33:af:59:42:6b:3e:d2:09:61:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:A7:34:52:02:B2:ED:6D:F7:FB:D3:E5:3D:76:9D:E2:27:6B:69
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:14:4b:9f:90:64:04:34:f1:54:f5:27:d5:aa:d7:d4:d1:4d:
92:23:f3:23:73:46:1f:ad:72:41:f1:58:a1:98:1a:82:b2:14:
f8:43:d8:15:12:eb:20:3f:6e:78:a3:35:c2:d4:c8:d3:75:0f:
3b:89:1d:06:f9:2a:68:80:b5:19:41:15:cc:f5:14:c7:5a:7d:
24:c3:39:49:cf:96:5c:fa:4e:17:ed:bb:26:25:ca:f6:9f:80:
2c:96:10:b3:d8:18:07:f1:20:12:a5:a4:68:50:db:9c:46:64:
75:a8:a7:a2:b0:08:5b:5f:18:45:8e:b0:6d:a4:82:aa:62:92:
87:8b:93:76:15:ff:12:f5:6f:1d:48:be:70:31:40:66:aa:0a:
79:b6:6d:66:b8:4a:45:5a:84:4b:ea:5c:c5:80:27:b4:6f:b9:
e7:78:01:23:3d:3c:fa:25:7d:d8:3b:e9:5b:1a:d1:42:b9:fa:
25:98:f0:71:9f:e3:37:50:46:36:96:3b:c1:15:00:b8:57:05:
b8:72:b6:5f:fa:f6:64:94:81:84:74:e1:3a:1b:91:c7:36:12:
97:7d:3b:37:14:f1:12:36:a7:38:7e:15:41:46:b6:18:6e:ca:
2f:8c:89:25:51:0f:1f:8b:d5:18:d6:76:82:5f:48:4e:95:21:
c6:6f:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:31:33 2026 by rpki-client