Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: Trec8S3bwrx2q99A7muaW3MUWXfZvfhcLLtgstno0/o=
Subject key identifier: 9F:8D:7D:27:01:23:20:8A:E6:24:B1:F3:7D:58:7E:A0:5A:65:47:08
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 01A102ED60CCA4703F93CEAACDB4791A1686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 18:01:13 +0000
Manifest this update: Sat 03 Oct 2026 18:01:13 +0000
Manifest next update: Sun 04 Oct 2026 18:01:13 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: A0/89vVEn7K46NeYU/Aw4F25zdUqZ/WFlGE6c8lC1CU=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:60:cc:a4:70:3f:93:ce:aa:cd:b4:79:1a:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Oct 3 18:01:13 2026 GMT
Not After : Oct 4 18:01:13 2026 GMT
Subject: CN=9f8d7d270123208ae624b1f37d587ea05a654708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:06:78:96:54:6f:5c:32:f7:52:83:aa:ca:
a4:29:ce:cc:bc:5e:73:4a:9b:98:07:26:7a:eb:b3:
f7:3c:98:ae:0b:f0:a3:a0:d6:b4:98:59:52:1a:58:
67:19:f7:22:f5:dc:d8:8f:82:17:03:a7:85:b3:e5:
f5:8f:e9:aa:9b:f2:9f:54:42:b8:7b:76:7e:84:87:
3e:23:fc:ba:90:1c:fd:74:7a:ec:cd:07:11:67:de:
f9:8b:c1:2a:46:f1:cf:5a:ee:68:0f:fc:b0:a4:b9:
11:8a:9f:20:1b:b6:ba:6d:3a:71:cb:e0:bd:c4:12:
76:21:e6:cf:3a:e9:8b:23:bd:69:6c:cb:7d:cc:a0:
ab:67:2d:6e:f3:38:fa:27:b4:87:8a:77:ce:9c:ea:
96:4a:79:5e:d2:3b:3d:f8:7a:ff:7d:5e:3e:ea:f1:
b6:cc:82:05:bd:75:b3:6b:2e:59:f4:6e:87:45:39:
52:70:34:75:44:26:6c:14:26:8c:17:1e:45:2d:c1:
a2:b6:79:2a:b2:64:a7:bc:36:0c:9c:14:02:7e:e1:
f7:d8:c4:84:05:64:cf:7f:ba:a1:92:74:d8:db:10:
ae:cd:20:0d:86:a0:6c:a0:db:58:72:6a:37:c8:f3:
1f:a7:59:02:8a:25:54:6c:b6:9f:54:59:55:f0:21:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:7D:27:01:23:20:8A:E6:24:B1:F3:7D:58:7E:A0:5A:65:47:08
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:1f:80:8d:af:8f:57:de:3a:d8:97:36:40:6d:c1:5a:05:
76:08:09:46:e7:65:54:de:2b:cb:ee:cf:a8:8f:6f:7f:68:04:
6a:b4:06:d5:c0:b5:9f:91:7d:c2:83:7e:a2:1f:f5:c1:bb:ae:
21:cc:de:c1:db:8f:97:e7:a1:2a:22:41:d7:32:3f:fa:49:1c:
b4:b6:c7:29:1a:1b:db:be:05:6c:b8:ba:f6:8e:7f:10:e7:f8:
99:fe:51:b3:a6:22:4b:e6:56:a3:96:a7:b6:c3:ca:46:00:a6:
dc:cc:79:90:74:02:fd:60:82:a6:b4:e9:43:cf:1f:19:0f:02:
56:a7:58:c6:38:1a:42:17:3c:28:fd:26:87:b1:94:fc:ac:0c:
49:4b:04:d9:f7:b2:23:c1:8d:91:d4:32:14:b0:e5:6e:c8:d0:
67:e7:06:0c:8c:4a:2f:39:21:fb:72:21:44:01:9b:39:6d:4c:
24:39:cb:b9:42:0d:f1:c6:c3:ca:96:09:f3:45:19:53:8a:65:
83:6b:8b:38:4c:8c:fc:57:18:4d:c9:fa:79:a6:8f:53:c5:f5:
04:0b:a5:40:10:d1:d5:f5:cb:a5:9c:9b:a9:25:36:65:89:e7:
0b:88:a7:ff:91:5f:63:28:71:97:25:4f:33:2c:b3:f9:14:4a:
d2:3c:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:05:35 2026 by rpki-client