Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: TuDkEq9SQ94D1PxQQeTwnNTSJUFlF8IErvQJfbeBMow=
Subject key identifier: CD:45:BC:31:2D:D5:21:BA:15:32:59:91:EA:21:6B:86:A1:1D:6F:6A
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 01A0DE3C202D850D0252EE0867A6B874BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 1762
Signing time: Sat 26 Sep 2026 15:01:17 +0000
Manifest this update: Sat 26 Sep 2026 15:01:17 +0000
Manifest next update: Sun 27 Sep 2026 15:01:17 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: GSuSfAZ6C4UZfVU0vQVwvsm3QQK7oDbuMKhml+ng11g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:20:2d:85:0d:02:52:ee:08:67:a6:b8:74:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Sep 26 15:01:17 2026 GMT
Not After : Sep 27 15:01:17 2026 GMT
Subject: CN=cd45bc312dd521ba15325991ea216b86a11d6f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:9e:b0:8b:d9:ec:1b:86:d9:cf:24:a7:07:
90:bb:bc:23:a8:d7:3f:ec:26:65:60:03:2e:3f:c7:
a6:13:07:3b:26:eb:ad:b3:84:1f:57:e7:4b:d9:09:
b7:25:da:15:05:8b:fa:ab:e7:92:ed:b2:78:d3:6f:
2d:23:45:20:91:29:d2:a6:92:dd:9f:d0:56:9c:47:
13:e3:64:c9:56:58:33:f9:24:74:5e:63:c6:32:df:
b5:d4:05:44:ca:2d:0b:fa:c4:56:32:2b:33:5a:63:
72:0d:bd:6b:c6:3a:ef:69:94:0a:b1:b1:7b:90:04:
ea:55:a1:e3:4d:be:f5:7b:f9:bc:1a:1d:28:b1:7d:
8a:37:30:dc:20:45:5a:d7:66:c3:76:e2:74:91:20:
0c:e1:fd:3a:91:b3:69:d2:7a:f8:6f:dc:11:2d:e8:
b2:27:db:70:0e:11:fa:22:f8:da:04:db:8d:f0:ed:
83:db:d1:18:62:5f:9a:0f:0d:93:d9:38:9c:36:73:
e0:3c:c3:5b:64:da:06:ed:e4:0b:94:2a:02:a2:3a:
c1:da:ba:64:ce:b5:5f:1f:52:9a:2a:13:83:b9:0a:
1d:c0:4e:0d:21:02:c6:a2:58:90:bb:54:38:35:df:
37:4e:50:94:fd:b5:1f:24:e7:c8:11:b5:2f:27:fa:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:BC:31:2D:D5:21:BA:15:32:59:91:EA:21:6B:86:A1:1D:6F:6A
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:cb:fc:2b:28:a7:cc:c4:5c:7d:d7:05:60:db:b4:68:58:
c1:4e:4a:5c:67:c8:4d:3b:cd:07:2e:9d:b6:e0:fd:fa:6e:bf:
36:45:7f:54:e7:98:f4:d0:39:ce:d0:79:2f:2d:15:ea:1e:a6:
e3:0a:39:4c:5f:e3:ca:49:54:39:6a:6c:99:b2:f9:89:85:5f:
a3:10:e6:09:3b:9f:49:87:0a:7e:17:36:94:89:14:74:1e:90:
9d:38:ba:f9:69:0b:c8:fa:4e:c7:ef:3a:e2:b4:09:58:21:d0:
f8:02:f1:b6:87:9f:6e:92:c5:ca:f1:9d:12:0e:40:8d:bb:b0:
53:a7:74:1b:e3:3c:8f:18:fa:f2:fe:54:37:36:78:ef:6f:d5:
1b:93:e6:3e:0f:e2:8a:39:1e:fd:d0:76:29:36:b8:a8:f7:03:
e7:6e:95:d0:d8:68:57:29:52:27:ec:07:2a:85:e9:af:55:77:
96:46:48:0c:a0:d0:24:70:51:00:34:65:6c:77:26:82:00:39:
97:65:14:cf:d1:67:71:48:75:35:8c:3d:6e:ab:a6:94:a1:d9:
74:95:9c:fe:1b:34:1b:41:a7:46:14:31:8d:8e:d3:dd:32:f4:
6c:e7:59:1f:6a:98:ed:63:2c:d0:5f:53:e5:4c:9d:6b:aa:ab:
3e:7f:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:33:26 2026 by rpki-client