Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: IuM7z5sABDJsZY5xhSa5Gye+I88tI9XrrGmRx3iQFYw=
Subject key identifier: 99:F3:21:51:1A:37:97:6F:37:EA:08:09:A1:49:6E:4E:5F:26:12:3F
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 01A13E9465ABFB822D3BCA6F720C2E51D6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 08:01:14 +0000
Manifest this update: Thu 15 Oct 2026 08:01:14 +0000
Manifest next update: Fri 16 Oct 2026 08:01:14 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: wTpuMwZuFXpvCpkvMl7vUeoygzlSbY0Xi8bfulUdm3M=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:65:ab:fb:82:2d:3b:ca:6f:72:0c:2e:51:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Oct 15 08:01:14 2026 GMT
Not After : Oct 16 08:01:14 2026 GMT
Subject: CN=99f321511a37976f37ea0809a1496e4e5f26123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:ce:2f:d4:02:d4:5b:9e:ca:b2:f9:49:39:
11:d0:0d:e9:96:20:d0:99:5b:0f:7e:1e:c0:8e:bb:
f8:85:ab:17:a5:52:e8:0c:95:69:6b:30:c0:e3:c3:
ea:1f:39:b3:3a:89:a5:17:d3:3d:5e:05:c1:14:c2:
dc:7a:d8:7a:22:55:cd:94:25:bc:f0:6c:4a:61:1e:
ff:0a:f0:83:5d:45:65:89:f0:f2:29:06:a8:70:33:
1b:69:e2:b5:7f:c1:99:e5:d3:52:f5:2b:a9:99:46:
2c:17:e8:e2:af:e1:16:93:00:80:58:1a:ac:7a:bf:
0f:62:64:b2:9f:79:5f:6d:44:03:4a:32:aa:48:58:
32:59:6b:bc:04:86:94:38:41:80:12:89:9d:b2:66:
ea:75:80:c2:0c:97:9f:96:37:52:ed:09:f3:73:0d:
96:f1:5c:f5:2e:25:49:f5:c0:0c:1e:55:c7:3c:88:
c6:27:76:9f:25:be:f5:85:88:91:3f:23:f6:65:c7:
80:8b:a0:c2:d4:79:df:05:35:05:44:ab:69:8b:02:
c4:c0:b9:7d:c4:f5:93:f6:41:f7:a3:0b:e0:26:18:
78:da:7f:24:bf:05:ab:b1:91:6e:d9:af:d9:fe:0a:
cd:f5:f3:b7:11:ab:fc:f0:03:33:4a:67:56:d8:35:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:21:51:1A:37:97:6F:37:EA:08:09:A1:49:6E:4E:5F:26:12:3F
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:fa:09:19:90:54:7c:73:f2:0f:07:5a:76:73:a6:b6:1b:
53:8d:00:c0:60:f1:be:9e:68:6a:e5:84:f6:e9:2b:68:13:a1:
df:9b:8a:4e:bd:09:62:c5:f8:29:ec:77:b9:2f:ac:86:e3:69:
b8:2a:41:63:d8:80:bd:2c:cc:98:65:8e:c7:04:b6:cc:7f:c9:
b8:e1:d6:0e:6b:0b:a3:1d:cd:8a:83:32:16:e1:4e:bc:d8:a6:
94:15:49:18:e5:4e:2e:49:46:66:64:fb:78:a4:ad:16:75:4e:
ff:41:7b:c3:57:fd:0a:42:ed:2e:45:8e:43:57:c0:65:ee:40:
4a:f6:d5:ec:e7:af:da:d0:52:d6:b5:6e:ba:de:0a:9b:70:bb:
de:6c:98:9c:89:85:ca:b9:da:e4:76:6a:ea:7d:cc:27:ea:cf:
6a:3b:cd:4e:76:ec:61:8d:39:29:41:b7:c1:96:1f:cc:26:a2:
eb:d8:0c:2d:2e:36:8f:fb:0c:70:8f:33:db:ed:25:18:af:70:
28:b2:9b:e8:4a:96:c6:75:f6:fc:dc:72:20:21:97:7e:d9:ed:
e3:5d:ad:de:0e:ac:27:b0:3b:87:3f:b3:a1:cb:d4:b4:df:f7:
b5:d5:23:48:19:21:a0:33:b0:ea:0b:4e:3e:c2:41:a0:7f:9c:
94:5a:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:07 2026 by rpki-client