Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: CXhWtztI+IfLxsNuZkQXgP2smeu1PQ/9le1ChnxHXj4=
Subject key identifier: 38:68:29:B1:C7:13:7F:9C:E7:FC:06:0F:F5:7C:64:B8:B4:0D:8A:62
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 01A102802728C096922B70A41C64A01D06D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0BF9
Signing time: Sat 03 Oct 2026 16:01:55 +0000
Manifest this update: Sat 03 Oct 2026 16:01:55 +0000
Manifest next update: Sun 04 Oct 2026 16:01:55 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: Pk47lJxRBYjVr2OqYSZSkZ/0ovx2h8U89RI5+9b1TGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:80:27:28:c0:96:92:2b:70:a4:1c:64:a0:1d:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Oct 3 16:01:55 2026 GMT
Not After : Oct 4 16:01:55 2026 GMT
Subject: CN=386829b1c7137f9ce7fc060ff57c64b8b40d8a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:e3:47:1c:5e:69:60:94:0b:98:81:88:1d:
c2:93:8b:6d:09:cb:5b:67:b1:50:96:24:5c:26:48:
38:6e:03:81:47:92:82:88:1d:f6:91:c8:ef:b0:26:
ac:8d:65:25:a0:d5:db:8b:00:03:db:6d:0f:6d:32:
bd:7d:c0:12:a1:26:31:b4:05:9b:cc:ec:ec:e7:73:
5e:e4:f4:85:ba:e7:9e:22:14:6c:1a:63:e7:31:51:
e2:cc:7e:77:37:38:cd:3a:b6:76:7b:65:64:e6:be:
ae:94:18:09:37:58:db:b0:46:fc:42:a3:15:0b:71:
73:68:da:e1:52:e7:76:c1:47:43:e6:d4:57:ce:43:
c0:30:38:c3:04:ed:a3:1f:9b:7f:d5:8b:7c:a0:66:
cb:1e:c9:26:21:88:5e:19:2e:69:99:ae:91:63:49:
c9:4a:e5:82:f9:bd:30:bf:57:76:e9:7c:37:78:f0:
2f:7f:82:5f:8b:a4:63:c8:f7:f7:51:1e:79:fc:92:
6e:bd:47:61:e2:0b:78:a0:f5:e1:16:67:be:ea:fa:
86:2b:30:a2:81:14:db:e9:8f:bb:c8:62:fc:06:a9:
42:90:de:18:eb:2c:b2:d9:fd:f2:fa:43:0d:aa:3f:
be:7a:ae:35:a3:05:5b:bf:c7:1c:16:9a:dc:24:15:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:29:B1:C7:13:7F:9C:E7:FC:06:0F:F5:7C:64:B8:B4:0D:8A:62
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3a:38:57:43:b7:63:5b:3d:d5:ca:f5:08:11:29:54:65:d6:
8b:9f:01:1c:ed:2d:a1:11:c2:bb:43:f3:eb:c7:0b:d4:17:7b:
83:2f:27:37:cb:fe:5a:09:56:15:09:50:a3:b7:5f:01:b0:30:
fd:30:a0:a8:43:2e:c0:e0:27:18:b8:d7:24:95:05:ef:49:b3:
d4:ad:38:15:dd:14:99:b1:f7:15:fe:db:1f:0f:11:32:e6:f7:
c0:be:ed:de:1c:a5:c0:6a:6b:9b:7d:85:38:b7:14:60:81:c0:
16:39:ff:5d:11:8b:61:a8:f1:dc:7c:f4:ea:5d:7c:11:79:0b:
4a:1b:b0:b3:5e:f4:2c:bc:4f:b0:59:9a:6a:1f:5c:7c:5c:a6:
28:b9:6a:eb:46:2b:4b:72:59:2a:89:c6:eb:9e:ab:d1:90:65:
b3:7b:1f:ee:90:48:2b:ff:59:1f:f9:21:e0:64:97:3c:33:15:
3b:75:e8:a6:2d:ad:ba:e7:1b:78:9b:17:62:b3:1e:80:95:d1:
fc:e1:5a:ef:9c:57:44:79:55:be:bf:00:9e:46:5d:e3:f6:2c:
98:9b:ee:f0:8f:8f:1d:20:d7:e2:bc:e8:8f:57:71:0d:ff:76:
b2:56:fb:0e:31:e6:0c:97:5d:69:42:4b:ce:5a:50:16:36:7a:
ac:cb:1a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECgCcowJaSK3CkHGSgHQbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw
M2JhMDYwHhcNMjYxMDAzMTYwMTU1WhcNMjYxMDA0MTYwMTU1WjAzMTEwLwYDVQQD
EygzODY4MjliMWM3MTM3ZjljZTdmYzA2MGZmNTdjNjRiOGI0MGQ4YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BfjRxxeaWCUC5iBiB3Ck4ttCctb
Z7FQliRcJkg4bgOBR5KCiB32kcjvsCasjWUloNXbiwAD220PbTK9fcASoSYxtAWb
zOzs53Ne5PSFuueeIhRsGmPnMVHizH53NzjNOrZ2e2Vk5r6ulBgJN1jbsEb8QqMV
C3FzaNrhUud2wUdD5tRXzkPAMDjDBO2jH5t/1Yt8oGbLHskmIYheGS5pma6RY0nJ
SuWC+b0wv1d26Xw3ePAvf4Jfi6RjyPf3UR55/JJuvUdh4gt4oPXhFme+6vqGKzCi
gRTb6Y+7yGL8BqlCkN4Y6yyy2f3y+kMNqj++eq41owVbv8ccFprcJBX3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhoKbHHE3+c5/wGD/V8ZLi0DYpiMB8GA1UdIwQY
MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt
Y2NkZDA2NTYzYTVmLzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm
LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDo4V0O3
Y1s91cr1CBEpVGXWi58BHO0toRHCu0Pz68cL1Bd7gy8nN8v+WglWFQlQo7dfAbAw
/TCgqEMuwOAnGLjXJJUF70mz1K04Fd0UmbH3Ff7bHw8RMub3wL7t3hylwGprm32F
OLcUYIHAFjn/XRGLYajx3Hz06l18EXkLShuws170LLxPsFmaah9cfFymKLlq60Yr
S3JZKonG656r0ZBls3sf7pBIK/9ZH/kh4GSXPDMVO3Xopi2tuucbeJsXYrMegJXR
/OFa75xXRHlVvr8AnkZd4/YsmJvu8I+PHSDX4rzoj1dxDf92slb7DjHmDJddaUJL
zlpQFjZ6rMsagQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:00:09 2026 by rpki-client