Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: bjZMXmp++XbM6XOA5hxqvjLANUzq7pSugopBBjyAX3M=
Subject key identifier: 94:FC:DC:57:B3:92:47:E3:CF:74:BC:2E:F0:8E:DF:20:4D:09:23:E7
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 01A0DACD7D7D89071EA170AAB9926B17284D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 13FD
Signing time: Fri 25 Sep 2026 23:01:34 +0000
Manifest this update: Fri 25 Sep 2026 23:01:34 +0000
Manifest next update: Sat 26 Sep 2026 23:01:34 +0000
Files and hashes: 1: Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa (hash: E2cO6SXyK9HZAexFchG/a5DBbHwX9fgWeihBGqBK40o=)
2: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
3: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: egezQJfzuYwkGlrXegdE9yGzlWofISfUBM51zwNj7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:7d:7d:89:07:1e:a1:70:aa:b9:92:6b:17:28:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Sep 25 23:01:34 2026 GMT
Not After : Sep 26 23:01:34 2026 GMT
Subject: CN=94fcdc57b39247e3cf74bc2ef08edf204d0923e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:ef:c2:9b:cb:fa:34:80:ff:be:44:8c:86:
38:7a:88:d6:7d:e9:0f:e3:69:af:8b:5b:9a:fd:2f:
e1:40:fd:58:2b:61:cb:2d:a3:5b:a5:7d:b7:db:69:
40:d6:30:84:a8:19:c4:00:c4:09:fc:2b:ec:5e:a3:
aa:cc:75:5d:85:78:98:ed:0c:47:bd:8c:ea:d6:1b:
b1:80:8a:85:35:f5:97:9a:8e:bc:69:a3:f7:74:ec:
7f:d5:59:d8:61:a9:be:9a:48:ea:99:ee:70:08:1e:
fd:e4:6a:7b:31:54:3b:f2:ba:8d:29:e8:66:12:ec:
35:ef:c1:39:3e:ff:4f:37:67:05:47:80:91:68:24:
7f:88:44:61:70:3e:5f:d9:d2:06:b4:9f:de:91:d2:
be:89:38:a8:a5:23:ad:46:63:e2:b6:49:b9:28:1e:
83:c7:d1:f0:84:6b:12:87:71:7e:3f:8c:88:73:5a:
c8:ae:a1:8f:28:d6:8e:93:10:27:3d:2c:08:d5:56:
e5:74:0b:e4:6b:0a:37:86:5c:a4:ea:99:d8:f1:10:
e7:67:c7:42:04:78:a0:32:b0:20:ff:32:0e:b2:19:
3f:38:59:12:31:39:14:29:67:dd:b3:e3:e0:d8:41:
19:2b:8e:80:2f:0a:1e:61:e3:dc:51:4d:f3:40:17:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:DC:57:B3:92:47:E3:CF:74:BC:2E:F0:8E:DF:20:4D:09:23:E7
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:60:5e:ca:91:63:e2:ac:0a:68:25:fd:d0:19:3e:4d:c5:
ed:77:58:f7:09:32:f7:cc:cc:20:5d:ad:93:4c:17:26:3e:15:
2a:6e:c2:fa:ed:66:63:98:95:d8:4f:20:23:57:04:5f:68:79:
6b:40:63:9b:b8:b6:0f:02:f4:58:78:a6:b5:cb:de:65:97:48:
ac:c2:5b:bf:d5:b0:62:46:0f:f5:1a:9a:4d:e9:ee:9a:70:37:
ee:9a:bf:49:65:52:6d:17:9c:43:c2:5d:ee:56:52:ae:25:57:
99:60:b1:0f:43:b8:73:fb:d5:1d:7c:3f:a6:f3:0f:06:1c:13:
0b:73:ae:fe:ac:43:13:4e:aa:45:8b:4e:bc:2d:ca:8e:ff:25:
99:ee:78:77:66:e3:ed:f1:25:ad:de:2a:d9:63:12:ad:00:a9:
68:94:ef:fb:6c:11:21:3d:da:3a:cc:4f:db:f3:23:5c:ae:18:
a6:ab:11:04:ca:98:fa:f3:9e:59:12:40:ef:f7:32:de:df:e3:
24:8a:77:2f:a3:a8:18:de:14:b9:7c:f9:46:dc:a0:82:3a:dc:
11:3c:21:ec:89:8d:96:82:54:85:f8:f3:59:1e:58:c8:7b:f1:
81:71:2e:43:01:63:9c:6a:33:95:4c:a7:f0:24:06:de:e4:78:
39:a3:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:05:36 2026 by rpki-client