Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: LaTSrkJZxjIR5rIHNmh6BPvcrw1ZuQbII6qJME/SDGU=
Subject key identifier: 84:9D:51:BC:26:AC:CB:35:59:D2:72:B9:D8:21:C3:C2:09:39:6A:9D
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01A10B146D55D014B89F9B8CA1FA7FAEEDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 15CE
Signing time: Mon 05 Oct 2026 08:00:50 +0000
Manifest this update: Mon 05 Oct 2026 08:00:50 +0000
Manifest next update: Tue 06 Oct 2026 08:00:50 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: cqeJg2VcSeCVl3IcO5arjvcoLItcDPfzp6qCviMGsxg=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:6d:55:d0:14:b8:9f:9b:8c:a1:fa:7f:ae:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Oct 5 08:00:50 2026 GMT
Not After : Oct 6 08:00:50 2026 GMT
Subject: CN=849d51bc26accb3559d272b9d821c3c209396a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:ea:02:23:5e:88:9c:41:8a:aa:6c:13:fc:
87:a5:68:a2:d3:85:ef:4b:e8:f2:cc:65:37:fd:44:
af:ae:34:d6:83:ad:8f:32:4d:1e:3b:89:9e:98:b3:
11:61:e0:19:4f:83:d4:ae:9c:6d:1d:51:34:b2:68:
97:78:68:a9:32:95:de:d5:e2:ea:00:10:d0:77:b6:
10:c5:42:c9:45:cf:48:58:87:95:cc:33:1f:94:e5:
34:92:7b:00:c9:aa:e1:60:8a:25:d2:12:eb:95:96:
bc:0d:34:41:d8:e5:16:3d:85:ec:23:b6:34:70:02:
83:52:22:c1:dd:cb:5e:a2:a5:17:ce:41:6c:69:c3:
b0:f4:6a:04:0f:d8:9e:fd:88:0e:23:a2:95:ab:93:
15:15:ae:c6:de:82:d7:27:05:75:f0:97:a7:25:ce:
87:6c:20:7c:d7:42:d3:25:3c:48:ae:5d:c4:0b:c3:
a1:4e:37:95:c5:3d:9b:5d:a9:cc:7e:85:ad:68:01:
e3:c5:ed:39:fc:94:67:aa:3c:82:89:04:6b:23:71:
e0:28:8b:53:a5:cd:88:6b:81:cb:b3:6f:43:f6:84:
65:60:aa:41:bf:b4:70:37:76:dc:83:67:e2:89:77:
92:63:a7:df:c4:43:01:34:40:67:88:f1:1a:28:16:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:51:BC:26:AC:CB:35:59:D2:72:B9:D8:21:C3:C2:09:39:6A:9D
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:25:6d:5b:63:ef:4c:80:01:7f:64:3c:ce:44:75:7e:78:
02:33:7d:08:a8:99:8c:d8:9f:3f:11:76:80:12:db:43:08:77:
9b:2c:66:51:34:b0:ec:b4:f9:67:7e:b3:42:a8:8a:d3:08:26:
d2:05:a5:cd:2b:a3:06:1e:a3:dd:5a:e0:4c:9a:a9:db:ff:9a:
96:77:f8:c1:3b:47:d0:7e:66:1c:29:b1:5b:ff:30:91:6a:02:
a7:c1:63:b6:d6:c4:0e:61:68:15:34:87:26:b3:41:f1:4c:28:
a6:88:90:37:f9:15:87:86:a9:fa:d1:5a:58:0b:55:2b:ca:de:
ef:e7:06:d3:ab:5c:67:2d:72:a9:0b:ee:c2:51:17:3c:8d:3f:
c3:31:72:cd:16:ca:97:7e:63:80:81:ae:0d:b5:a3:1e:fe:cd:
8f:08:33:18:74:83:56:a1:a8:63:dc:d9:08:68:a8:3b:1b:70:
23:9b:50:ba:d2:93:81:46:60:49:cb:e8:5d:c0:d1:29:f5:48:
b0:e6:1b:b2:d7:0a:20:fe:cb:49:d0:eb:1c:e3:a6:1c:32:bc:
1d:ca:87:d3:0a:c1:8c:d9:a0:4b:db:65:8e:27:53:94:f7:af:
d6:eb:5b:cc:16:19:55:0a:a0:75:2e:e9:f8:72:4e:17:8f:ea:
ac:36:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:54:24 2026 by rpki-client