Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: oJOHQxPRPmrSFLPO34eEiUzGyrb5uixl1TYmHX6yg0M=
Subject key identifier: 77:8A:E8:D7:B4:11:DE:E2:5A:9B:1A:69:25:87:45:C1:86:8E:31:DD
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 01A1065C9FB526F64BDE3F15D1B6D6DEF489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0BFB
Signing time: Sun 04 Oct 2026 10:01:35 +0000
Manifest this update: Sun 04 Oct 2026 10:01:35 +0000
Manifest next update: Mon 05 Oct 2026 10:01:35 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: n8k+WkUluRSe8sxxr9tVlLJWokfZ8hJYJ/YTn3vtivc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:9f:b5:26:f6:4b:de:3f:15:d1:b6:d6:de:f4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Oct 4 10:01:35 2026 GMT
Not After : Oct 5 10:01:35 2026 GMT
Subject: CN=778ae8d7b411dee25a9b1a69258745c1868e31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:11:c2:44:45:57:ba:b7:96:c8:b0:00:87:
a2:cd:73:33:0a:45:33:49:7f:d8:1b:e1:de:51:7d:
99:ac:73:88:95:e1:f2:28:07:ae:50:71:ef:e3:bc:
8e:ff:70:4c:b1:f6:de:31:1c:dc:d1:4f:d8:a3:27:
d8:b7:1e:4f:7c:22:5f:f3:c0:c5:c3:14:15:15:9f:
e9:84:a3:ed:f2:49:24:27:61:5a:b7:b2:71:82:5f:
09:8d:ce:30:68:88:00:fa:ad:30:53:66:22:93:d3:
d5:5a:bd:0a:af:bf:d5:51:9a:62:04:85:36:bc:49:
af:5c:7b:15:12:6e:ae:c1:45:ad:ba:b4:61:c6:76:
fe:20:cc:c7:c0:9d:0f:38:11:97:c8:c3:56:69:6b:
57:42:43:b0:c9:1a:f0:f8:65:6a:96:48:8b:e7:2a:
11:14:1b:d1:ea:38:4b:b6:05:92:c5:d3:c7:7b:23:
aa:4c:79:56:d8:74:bd:7d:74:f3:9d:9f:67:16:b7:
7a:e2:76:49:4e:a0:b9:c3:90:62:82:e2:89:40:25:
ef:52:01:4c:d6:09:08:dd:53:01:19:d6:a2:7e:cd:
ff:a7:7e:94:2c:69:8e:07:5d:c7:1c:11:da:97:78:
5b:6d:ac:f4:f6:fd:72:91:ad:88:fb:6c:f8:e2:13:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:E8:D7:B4:11:DE:E2:5A:9B:1A:69:25:87:45:C1:86:8E:31:DD
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:17:46:5e:21:55:02:20:34:c9:3a:a5:94:84:9e:7e:d4:
2d:6f:a4:48:8b:76:21:4e:79:7a:0e:73:8c:c4:d0:83:85:fd:
39:49:b8:8a:af:1a:53:45:59:af:e1:52:68:c1:fb:bc:08:ed:
68:c7:6d:92:18:69:08:3f:4a:99:bc:8d:70:49:b3:83:e4:c6:
ab:8c:a3:1d:73:8d:f1:5a:cb:ca:2c:85:73:06:50:5a:29:51:
e3:44:bb:1d:75:12:86:34:8f:1e:75:df:81:69:da:17:96:5a:
a8:14:14:7f:10:eb:5c:80:e1:b9:d1:ab:f6:00:87:cd:a0:98:
9c:de:bd:63:aa:23:94:da:69:d1:4e:81:a3:a2:23:23:2f:69:
d1:92:7d:7a:a3:71:96:fc:6c:54:9d:fe:b1:ed:a0:e6:28:70:
90:44:cb:02:ae:58:9b:8e:eb:da:86:69:25:b5:5c:12:c9:b3:
7d:fd:8b:91:cf:1d:99:d4:df:57:1d:eb:39:7f:ad:41:ed:c8:
89:a6:0e:4a:0a:4d:76:c1:6f:f9:8b:aa:ad:aa:d8:81:77:0f:
4b:53:67:92:7d:40:c5:ea:e3:d1:cc:25:6b:ea:0d:c4:db:03:
f2:50:ca:25:74:b5:24:53:68:37:14:ad:5e:05:0c:9f:b8:d6:
e1:be:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:27 2026 by rpki-client