Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
File: CxS4GCzVzNQ__YJMLKeSHCThzRs.mft (raw, json)
Hash identifier: NwtIzBoex5PoUH1Uu3DnRnXGZV7h1WZ3BqSePleoyvE=
Subject key identifier: D0:7E:6A:E6:13:01:77:01:3E:F3:AF:CB:35:DA:B0:07:ED:E3:BD:A0
Authority key identifier: 0B:14:B8:18:2C:D5:CC:D4:3F:FD:82:4C:2C:A7:92:1C:24:E1:CD:1B
Certificate issuer: /CN=0b14b8182cd5ccd43ffd824c2ca7921c24e1cd1b
Certificate serial: 01A0D80420C5A08BF88758E8D16AD8958809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
Manifest number: 9C
Signing time: Fri 25 Sep 2026 10:02:24 +0000
Manifest this update: Fri 25 Sep 2026 10:02:24 +0000
Manifest next update: Sat 26 Sep 2026 10:02:24 +0000
Files and hashes: 1: CxS4GCzVzNQ__YJMLKeSHCThzRs.crl (hash: d13Dft0XxGMnIwLPCVluZPciuTcQQW5k4EQoYVJSMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:20:c5:a0:8b:f8:87:58:e8:d1:6a:d8:95:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b14b8182cd5ccd43ffd824c2ca7921c24e1cd1b
Validity
Not Before: Sep 25 10:02:24 2026 GMT
Not After : Sep 26 10:02:24 2026 GMT
Subject: CN=d07e6ae6130177013ef3afcb35dab007ede3bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:a2:6b:69:f8:c8:fa:d0:c3:f8:b3:3d:c2:
59:f4:ea:47:7e:3f:59:09:d8:3f:eb:fe:ce:18:df:
01:94:df:b7:61:a6:28:b7:96:9f:44:0c:4a:a4:b5:
ba:b9:cf:3e:e4:18:5b:4b:cf:f2:ec:59:df:b5:83:
65:2a:de:1c:3a:c6:7c:82:df:c8:fe:28:1e:b7:71:
90:df:3d:b3:cd:da:68:9f:bd:54:4f:47:24:66:09:
62:65:86:3f:46:56:32:37:17:65:b4:00:38:ff:ea:
bc:ce:99:b7:db:1c:3e:5f:70:1f:21:8b:c4:7b:a0:
77:71:c1:98:9e:d6:0f:55:0c:31:8d:ef:c5:bb:41:
f3:31:3a:59:db:40:06:1a:1e:1b:65:e1:bc:84:07:
84:a7:26:8f:0f:c8:76:89:d9:56:19:04:da:0d:ed:
3f:fb:c4:8e:cf:58:36:be:e3:76:83:dc:d1:80:91:
52:33:2b:8f:f0:8a:ed:2e:49:c7:3d:98:ce:83:4e:
de:9f:2b:a1:86:81:23:b4:2a:8c:2f:8c:97:66:47:
de:5e:68:81:04:55:92:3e:8f:09:89:60:f8:cf:04:
29:23:73:fe:4c:e8:55:f2:36:9a:96:f4:02:88:15:
41:c0:23:22:41:09:15:30:d3:21:20:28:33:1d:91:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7E:6A:E6:13:01:77:01:3E:F3:AF:CB:35:DA:B0:07:ED:E3:BD:A0
X509v3 Authority Key Identifier:
keyid:0B:14:B8:18:2C:D5:CC:D4:3F:FD:82:4C:2C:A7:92:1C:24:E1:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:c3:6b:a9:66:87:4e:fb:36:5a:74:43:0f:6a:14:f2:b3:
2b:bb:68:00:0f:a4:12:74:e0:ea:2b:2f:d7:d5:5c:c6:b8:7d:
0e:c6:01:20:a7:8a:d6:f3:12:7f:70:7c:bf:fb:c4:52:58:5f:
df:79:93:e0:8a:14:a3:7d:75:99:3f:dd:f5:3b:b0:12:d4:e6:
ee:91:b0:d9:77:0d:31:f7:7a:c0:a9:79:70:37:03:eb:c2:2f:
48:11:19:aa:ee:66:f2:3f:c0:4b:65:36:77:aa:b3:72:98:d1:
fc:5e:61:e8:cb:a7:a5:9f:64:7d:e4:51:11:66:cb:bd:5d:35:
c6:72:00:bd:e6:b4:02:d5:7d:f8:e4:58:22:10:72:f2:a3:b4:
e5:fb:c4:bc:1c:4c:7a:e1:7d:e6:eb:ec:d9:38:4c:3b:ea:a3:
cf:5b:9c:67:b3:c6:f6:d6:56:5a:5b:af:2f:d8:bb:e5:41:6e:
a8:af:5f:6d:83:5c:e6:1c:16:cf:f9:03:b5:56:33:2f:2b:5d:
69:33:7b:18:ec:cf:8a:1d:75:b4:57:76:3c:c3:a6:5b:4d:eb:
48:99:52:6a:96:3a:19:63:85:21:97:20:a3:8f:07:f0:c4:0e:
d1:8d:50:e4:9c:f2:53:63:bc:77:d3:31:84:f5:6b:14:6d:ad:
3e:c5:12:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBCDFoIv4h1jo0WrYlYgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTRiODE4MmNkNWNjZDQzZmZkODI0YzJjYTc5MjFjMjRl
MWNkMWIwHhcNMjYwOTI1MTAwMjI0WhcNMjYwOTI2MTAwMjI0WjAzMTEwLwYDVQQD
EyhkMDdlNmFlNjEzMDE3NzAxM2VmM2FmY2IzNWRhYjAwN2VkZTNiZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Cia2n4yPrQw/izPcJZ9OpHfj9Z
Cdg/6/7OGN8BlN+3YaYot5afRAxKpLW6uc8+5BhbS8/y7FnftYNlKt4cOsZ8gt/I
/iget3GQ3z2zzdpon71UT0ckZgliZYY/RlYyNxdltAA4/+q8zpm32xw+X3AfIYvE
e6B3ccGYntYPVQwxje/Fu0HzMTpZ20AGGh4bZeG8hAeEpyaPD8h2idlWGQTaDe0/
+8SOz1g2vuN2g9zRgJFSMyuP8IrtLknHPZjOg07enyuhhoEjtCqML4yXZkfeXmiB
BFWSPo8JiWD4zwQpI3P+TOhV8jaalvQCiBVBwCMiQQkVMNMhICgzHZGeNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB+auYTAXcBPvOvyzXasAft472gMB8GA1UdIwQY
MBaAFAsUuBgs1czUP/2CTCynkhwk4c0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83NzVkMzgtNjk5MC00MzcxLWE0NWYt
OGU2YjAzNTYxOGEwLzEvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83NzVkMzgtNjk5MC00MzcxLWE0NWYtOGU2YjAzNTYxOGEw
LzEvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqfDa6lm
h077Nlp0Qw9qFPKzK7toAA+kEnTg6isv19Vcxrh9DsYBIKeK1vMSf3B8v/vEUlhf
33mT4IoUo311mT/d9TuwEtTm7pGw2XcNMfd6wKl5cDcD68IvSBEZqu5m8j/AS2U2
d6qzcpjR/F5h6MunpZ9kfeRREWbLvV01xnIAvea0AtV9+ORYIhBy8qO05fvEvBxM
euF95uvs2ThMO+qjz1ucZ7PG9tZWWluvL9i75UFuqK9fbYNc5hwWz/kDtVYzLytd
aTN7GOzPih11tFd2PMOmW03rSJlSapY6GWOFIZcgo48H8MQO0Y1Q5JzyU2O8d9Mx
hPVrFG2tPsUSyg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:57 2026 by rpki-client