Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: lQaCLYMp+y2Uo02CVMFnApJdgQOlhpPR5iBcGzjEpAU=
Subject key identifier: D5:37:8B:88:6A:D1:AF:F1:D1:77:6A:51:76:83:6C:E6:28:E1:B0:41
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 01A17C97752CB4AACFFAF23953472243E382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 09:01:02 +0000
Manifest this update: Tue 27 Oct 2026 09:01:02 +0000
Manifest next update: Wed 28 Oct 2026 09:01:02 +0000
Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: cuhx+z6In7xqM0sm8YcgaVIW8orx55xUYxgEARsCk1w=)
2: hA6_YTErxhku_uiY6bcvhY1hUhs.roa (hash: Q6FjJQt1zpguz0aAPZUF4vlr1RqYwbpYRo9ftd9mu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:75:2c:b4:aa:cf:fa:f2:39:53:47:22:43:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Oct 27 09:01:02 2026 GMT
Not After : Oct 28 09:01:02 2026 GMT
Subject: CN=d5378b886ad1aff1d1776a5176836ce628e1b041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:e3:ff:f5:dd:5d:4c:44:68:41:59:f8:66:
89:52:7c:7c:2f:4d:02:87:f5:89:e9:e8:ba:8b:7c:
f9:84:72:fe:3d:e3:cc:73:4c:25:e5:ff:d4:b4:03:
ef:2a:18:08:ab:d9:c1:b1:ac:1e:32:82:9c:ef:5e:
ea:39:8a:d6:58:00:47:7d:1b:e2:16:3e:97:10:6f:
ca:05:a6:8b:5f:ab:11:f0:f0:c4:bd:68:bc:2b:a6:
cd:64:d1:dd:30:29:ed:52:99:d1:c3:a6:85:b5:6a:
79:53:37:63:5b:0b:e3:ba:e9:38:94:2c:a3:05:46:
ca:11:bf:8d:c5:24:f3:d0:b9:48:f2:48:54:d9:4a:
21:16:0f:5f:5f:22:d7:84:e5:da:24:28:62:f3:ae:
71:71:f6:d6:be:72:7c:fe:dd:7b:77:64:9f:29:ea:
86:a5:0b:e9:27:db:93:3f:24:bf:2a:60:df:34:b9:
22:c0:ee:45:46:ff:c8:9e:d8:9e:59:ce:eb:a4:8f:
c0:a8:d0:f3:0b:4e:83:ac:44:88:5c:4f:a7:33:f2:
0b:8f:8c:38:e7:76:88:e3:9e:2c:35:a9:55:51:8d:
d7:bb:27:3e:c0:b5:40:11:56:af:f8:10:c7:91:b4:
63:1e:20:d6:d8:d0:83:c9:2c:b4:2c:ae:34:a2:b6:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:8B:88:6A:D1:AF:F1:D1:77:6A:51:76:83:6C:E6:28:E1:B0:41
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c1:1c:00:a3:6e:14:27:65:ed:8b:e9:a7:bd:de:36:1d:85:
bd:f3:45:84:f9:be:d0:d5:7d:6c:8d:d7:75:3f:63:ad:09:b0:
16:0b:7b:68:83:0a:b6:ec:97:9a:ce:92:6f:1f:5a:17:98:a9:
89:b8:48:25:50:7d:0a:a1:24:40:7c:55:35:59:f9:02:7a:30:
af:b2:5e:45:05:46:b5:e6:7c:32:f6:13:4f:fc:49:d3:32:61:
7a:63:34:9a:0f:ab:28:c7:d1:2a:bf:df:58:3a:42:ef:20:5c:
6d:39:80:d0:e0:0e:fd:bb:90:1c:eb:50:07:94:c1:55:8d:7d:
50:e5:c6:69:25:58:58:f6:a8:69:83:bb:a7:f5:ee:6e:33:e0:
af:eb:87:d8:48:42:14:13:ff:e7:59:6e:db:3f:9a:96:0c:79:
66:25:ee:e9:33:14:7e:63:ef:94:f9:f4:fb:27:75:ca:76:3e:
2c:ae:ec:b3:01:0c:af:c7:48:c8:f1:59:55:61:c7:cd:0f:be:
a2:75:66:9a:b2:ed:c3:c4:8f:8c:3b:ea:c4:83:16:45:49:25:
55:28:26:60:85:a9:7f:7c:6c:b9:f6:46:47:9a:df:bf:f9:2e:
9a:f7:6b:1a:50:5b:01:db:f7:2b:b8:4a:d1:bc:ea:4b:58:ca:
2e:0a:b4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l3UstKrP+vI5U0ciQ+OCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjYxMDI3MDkwMTAyWhcNMjYxMDI4MDkwMTAyWjAzMTEwLwYDVQQD
EyhkNTM3OGI4ODZhZDFhZmYxZDE3NzZhNTE3NjgzNmNlNjI4ZTFiMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzinj//XdXUxEaEFZ+GaJUnx8L00C
h/WJ6ei6i3z5hHL+PePMc0wl5f/UtAPvKhgIq9nBsaweMoKc717qOYrWWABHfRvi
Fj6XEG/KBaaLX6sR8PDEvWi8K6bNZNHdMCntUpnRw6aFtWp5UzdjWwvjuuk4lCyj
BUbKEb+NxSTz0LlI8khU2UohFg9fXyLXhOXaJChi865xcfbWvnJ8/t17d2SfKeqG
pQvpJ9uTPyS/KmDfNLkiwO5FRv/IntieWc7rpI/AqNDzC06DrESIXE+nM/ILj4w4
53aI454sNalVUY3Xuyc+wLVAEVav+BDHkbRjHiDW2NCDySy0LK40oraxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU3i4hq0a/x0XdqUXaDbOYo4bBBMB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMEcAKNu
FCdl7Yvpp73eNh2FvfNFhPm+0NV9bI3XdT9jrQmwFgt7aIMKtuyXms6Sbx9aF5ip
ibhIJVB9CqEkQHxVNVn5Anowr7JeRQVGteZ8MvYTT/xJ0zJhemM0mg+rKMfRKr/f
WDpC7yBcbTmA0OAO/buQHOtQB5TBVY19UOXGaSVYWPaoaYO7p/XubjPgr+uH2EhC
FBP/51lu2z+algx5ZiXu6TMUfmPvlPn0+yd1ynY+LK7sswEMr8dIyPFZVWHHzQ++
onVmmrLtw8SPjDvqxIMWRUklVSgmYIWpf3xsufZGR5rfv/kumvdrGlBbAdv3K7hK
0bzqS1jKLgq0ig==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:06 2026 by rpki-client