Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: /kglUdzoxJ1PiSvwEceP2IiTjxAAHBtBKFRIihx437I=
Subject key identifier: 40:26:D1:93:B4:0F:E5:A1:4C:41:2B:CB:D3:93:0F:FC:DB:61:F1:EC
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01A186E3A84CDD96B180D10E3245EFD8033F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0AC0
Signing time: Thu 29 Oct 2026 09:00:28 +0000
Manifest this update: Thu 29 Oct 2026 09:00:28 +0000
Manifest next update: Fri 30 Oct 2026 09:00:28 +0000
Files and hashes: 1: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: GAd+rSmMF6QLVMARUcEpt6CLaeHWbRoLaonAv+Wc/SI=)
3: fY0xOILdXQ_CS-iTNJoFmP8blsA.asa (hash: DuVD+XPpR4oHnDDsfTjsOxjeLxWwKH+VHAE/Fl8hWC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:a8:4c:dd:96:b1:80:d1:0e:32:45:ef:d8:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Oct 29 09:00:28 2026 GMT
Not After : Oct 30 09:00:28 2026 GMT
Subject: CN=4026d193b40fe5a14c412bcbd3930ffcdb61f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:f1:61:bd:bd:92:67:41:36:6c:d5:af:35:
07:23:50:0d:18:3c:f9:05:2c:84:66:40:9e:e9:15:
ea:23:9c:7d:06:f1:01:49:dc:5b:49:24:da:81:d3:
9b:ff:48:8c:46:8f:83:10:26:8d:45:ac:32:2c:c0:
22:00:7c:82:4b:2c:3b:f9:fe:ba:71:5e:84:f0:df:
f5:11:ca:e9:57:ae:58:ca:c7:9c:c8:89:9f:c8:50:
37:e2:c9:05:a6:95:81:bf:5a:d2:a6:a9:0c:0e:9c:
1c:a4:c1:b7:2c:32:34:13:73:db:af:61:c1:aa:cb:
09:9b:ed:35:00:29:14:a8:a6:57:f5:24:ff:d8:18:
23:25:8a:cc:77:2b:16:20:76:26:b9:68:72:df:ac:
cf:fd:7d:ac:2d:ff:77:57:d3:bc:8d:9f:2d:19:9c:
a7:02:20:d1:22:20:7f:4e:51:b7:63:00:63:57:5b:
b5:2a:8a:13:f3:01:41:fc:8c:62:b1:ac:31:ec:25:
6a:af:63:7c:73:3b:72:a5:f2:ea:49:b0:42:a4:9c:
c6:37:37:7d:1f:e5:5f:b2:cf:e3:a7:d0:eb:a7:7c:
47:88:35:96:56:9d:41:4d:bb:52:fa:15:03:64:40:
95:cf:0f:b2:32:b5:f3:d9:2f:9e:22:69:f2:95:f8:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:D1:93:B4:0F:E5:A1:4C:41:2B:CB:D3:93:0F:FC:DB:61:F1:EC
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:9d:da:fb:f8:5b:13:9a:6b:a1:38:3e:f7:34:15:20:0e:
30:04:41:b1:bf:20:24:8f:ea:4d:9d:31:49:4d:29:86:7c:82:
dc:11:aa:1e:4f:f8:71:24:04:5f:ae:1a:89:3c:c6:74:d3:93:
57:c1:19:59:61:53:82:97:ab:35:5b:31:11:5a:86:24:cf:90:
9f:78:d4:83:f8:f7:60:9d:44:1c:b8:52:c2:0e:6f:c5:96:c2:
fb:4b:2f:d6:4e:36:be:a6:45:f9:c0:57:22:dc:b7:9a:55:cf:
6e:df:94:6f:03:f8:69:8a:69:3a:05:ad:e6:2a:74:fa:d3:5b:
9b:ad:69:fa:70:46:4f:93:14:24:ed:28:c2:57:3d:b9:b5:5a:
da:b0:98:84:cf:b1:85:44:6f:e8:d9:2e:98:48:9e:2a:b6:53:
b6:6c:8c:d4:1a:c0:24:84:75:8d:94:0e:99:9f:52:cb:21:0d:
27:1a:46:92:e6:f2:ad:ca:33:4c:c9:69:45:de:0f:f4:15:5f:
93:86:03:b4:4d:e0:05:88:12:d5:18:84:2f:ff:d2:1b:5f:6f:
e0:f0:ce:f3:02:d7:4d:f0:1f:3e:2f:68:31:7d:cc:08:57:ae:
c3:0f:12:32:eb:bf:7a:b0:bc:50:78:f7:06:aa:47:10:49:08:
c5:ce:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:46:15 2026 by rpki-client