Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: JcQ19wsIbkON9RscPnjQGGA3IS2ou+NIws65KbCT3vk=
Subject key identifier: A9:03:DC:48:39:3E:DF:F3:23:76:7D:67:F5:52:6C:81:D5:F2:32:4A
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 01A0D6824962E584EA18FDE1248170E47F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 1839
Signing time: Fri 25 Sep 2026 03:00:57 +0000
Manifest this update: Fri 25 Sep 2026 03:00:57 +0000
Manifest next update: Sat 26 Sep 2026 03:00:57 +0000
Files and hashes: 1: B4wp10Y_OEoAGIhud1FmzSKVNw8.roa (hash: ju3vXvQ0WetT2UBij+oQFWcTFWG7kepUg6hRZtzRnOA=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: GF7G91gDGrgIVo+/tA4mw/3lXJsehSEIa5iGiXhfVK0=)
3: O4B_-Tpkvi-Vzod09Q2QLPcHoqI.asa (hash: B7ori9YQuZcWPkCjw+CIP639dSEN0EcORNjOlG348oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:49:62:e5:84:ea:18:fd:e1:24:81:70:e4:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Sep 25 03:00:57 2026 GMT
Not After : Sep 26 03:00:57 2026 GMT
Subject: CN=a903dc48393edff323767d67f5526c81d5f2324a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:2f:7f:6c:cc:f9:28:c2:f3:a2:02:cf:b6:
7b:62:8d:05:de:06:61:e1:c0:8a:6d:7c:c6:8b:5c:
f0:0a:39:2f:d8:6c:fe:6f:79:6c:a2:9f:95:f3:5b:
be:82:b2:4a:7a:f6:a7:24:16:27:95:ea:27:0d:02:
2b:28:23:dd:17:62:e5:a2:b7:c1:6e:47:7a:86:e7:
f2:18:65:fe:3b:33:01:f8:44:8a:e7:e9:d4:26:48:
0e:8a:74:7f:34:f1:e5:51:72:f3:37:bd:b5:2a:e5:
a1:32:5e:17:4c:e4:59:a2:80:a8:5e:d7:36:c0:ef:
5d:c9:97:da:22:40:6c:d0:5f:c4:a1:cc:91:cc:62:
87:d7:46:c6:d2:95:ce:21:eb:df:75:03:84:a8:80:
cc:4e:4c:25:6d:ba:ef:ac:69:a8:d9:16:63:48:d1:
98:ad:b8:02:a7:b6:4d:09:8b:7a:3f:81:b4:cf:2d:
a5:97:88:b1:19:cb:55:5e:94:71:0b:87:b8:a1:e4:
1f:8b:ab:e8:ce:38:48:b2:67:d3:c4:49:fe:50:21:
72:c0:9e:db:c1:52:69:12:68:38:13:91:b8:03:c2:
df:03:2a:05:c0:fd:09:a9:47:10:db:06:fb:ea:be:
85:b3:bd:4f:de:e4:94:93:94:1a:47:27:ba:af:6c:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:DC:48:39:3E:DF:F3:23:76:7D:67:F5:52:6C:81:D5:F2:32:4A
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3f:e3:c2:c8:85:ec:68:17:1a:6e:df:65:bc:2f:74:28:4b:
8d:fb:b7:7f:8d:ea:45:87:5b:58:d9:2a:0c:fa:27:72:05:d0:
45:a9:e0:ff:e0:a9:26:ea:c7:e3:fb:0a:9d:14:f2:d0:d6:8c:
f9:58:a7:67:31:74:07:96:1d:5c:da:f7:51:cb:79:96:c5:53:
11:4f:8b:09:91:b9:9a:cc:35:cd:87:e3:55:d8:ec:8d:09:e8:
c9:5a:fc:ad:28:c0:28:af:86:1f:3f:7b:44:5a:7a:bd:ec:e1:
50:be:52:42:ac:5b:ab:cf:49:75:84:40:05:30:6e:12:00:d5:
b5:8f:57:27:cb:86:ea:e4:6f:d7:82:a1:5f:ab:a3:98:8b:1e:
6f:39:86:ab:db:86:2a:b9:93:a6:ea:dd:41:66:c8:70:6d:a0:
ac:6a:37:5b:81:b6:57:58:76:2c:24:de:1b:76:c8:e6:d1:5c:
9c:fe:2b:c0:64:3f:c6:d6:48:42:80:63:be:15:c5:cc:19:8e:
77:4c:e6:f8:cf:be:ef:90:21:cf:c1:3f:1e:b0:f8:bb:9a:a1:
2a:97:25:cc:ce:11:ff:fc:9c:9a:81:53:dd:61:56:af:4d:14:
26:1d:bb:d3:58:46:42:0f:8c:e8:cc:02:9d:9c:89:63:b2:b4:
ae:d6:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:04:27 2026 by rpki-client