
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: BWfh42A7IANMYtK20Q5mubnGWN/+XJfHqeeRst5NAks=
Subject key identifier: 51:28:2A:1C:52:51:B9:A3:40:E7:EB:90:B2:99:A3:AC:60:FD:F3:70
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 01A1287A6E1060EDDB709CD8456EB7BB0C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0B10
Signing time: Sun 11 Oct 2026 01:01:14 +0000
Manifest this update: Sun 11 Oct 2026 01:01:14 +0000
Manifest next update: Mon 12 Oct 2026 01:01:14 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: WEwdwu+9xDAoFHrPTMAGNBY9V5UQV85RaWtIl4GMuZU=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:6e:10:60:ed:db:70:9c:d8:45:6e:b7:bb:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Oct 11 01:01:14 2026 GMT
Not After : Oct 12 01:01:14 2026 GMT
Subject: CN=51282a1c5251b9a340e7eb90b299a3ac60fdf370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:bb:bc:f7:be:a6:0a:70:ec:f3:16:d7:6a:
fa:f9:67:be:17:ea:89:3d:43:13:4b:13:25:af:47:
a0:f8:cd:e8:10:d8:59:16:f2:39:c9:c2:07:96:3b:
c4:db:16:6e:c2:3d:49:18:a1:6f:1c:79:c7:0a:ab:
68:1a:c9:3c:a7:98:ba:b2:67:ef:17:7e:da:cc:e5:
34:99:de:f5:22:86:44:17:08:95:cc:54:30:fa:fa:
25:fb:0b:76:91:9d:7e:a8:9e:88:85:65:d7:74:7f:
ea:3c:71:03:15:43:9e:c2:ec:f4:37:5f:71:bf:78:
25:91:26:de:af:9f:af:61:ba:40:15:5f:8d:0a:19:
01:4e:5c:f3:24:23:23:f8:e8:7d:27:75:b9:08:44:
d3:46:e2:01:0c:32:79:ae:ea:b3:60:99:40:f3:36:
9b:a9:62:3d:1a:5d:23:95:69:a3:34:6e:e1:2c:9c:
33:93:c2:f7:f4:cb:fd:9d:be:06:52:7e:f4:91:4f:
ff:31:8e:aa:8e:05:6d:fa:ea:fb:a5:79:b6:00:6a:
5e:c9:66:44:e8:1e:af:ef:6c:9e:3e:fd:49:6d:a7:
60:72:98:bb:0d:97:56:89:56:02:56:df:2d:7f:63:
b0:c6:06:21:e8:c8:35:11:7e:f3:6f:f9:45:52:8c:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:2A:1C:52:51:B9:A3:40:E7:EB:90:B2:99:A3:AC:60:FD:F3:70
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5e:01:c0:ba:de:22:e8:4d:73:e2:8a:67:49:34:d6:03:1f:
2b:cf:31:da:70:e0:5a:cd:43:0b:69:f6:cf:12:29:45:0f:f7:
fb:78:31:d3:31:d0:40:93:62:58:6c:85:da:5c:a9:72:2b:07:
f7:f2:3a:c4:68:e8:d9:27:77:a0:ad:71:0b:89:7e:23:6b:dc:
33:e7:1c:d4:ca:a4:46:1d:37:cc:1b:03:ae:f7:8f:b3:30:4f:
98:7f:6c:2c:48:a8:f7:e9:28:72:8f:25:ae:ad:c4:5c:55:06:
c7:64:6f:0f:ce:c1:97:79:71:97:a3:31:bf:d4:2f:fe:35:21:
bd:ea:cc:a4:ed:75:76:18:63:38:8c:03:c5:42:98:16:e3:2b:
c3:9c:ea:7d:cc:74:f5:fe:26:c0:c6:3b:5a:59:5a:e6:e1:2f:
c0:7d:a4:5b:90:6d:dc:c2:15:82:ac:4a:e5:66:71:25:8d:0d:
90:ee:d2:d7:75:95:8a:88:44:23:8f:95:61:c2:a1:3a:09:d5:
10:41:67:cf:02:70:ee:bf:eb:15:18:71:01:ec:af:38:ee:57:
a6:a0:a7:69:5f:0e:b1:2a:bd:50:14:39:d8:36:e6:d3:d8:9a:
52:e2:14:80:24:6f:b7:1a:2b:9a:7a:90:ab:07:26:a6:92:75:
e0:02:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:40 2026 by rpki-client