Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: JcBYy9cxsUNyWyblqAHWf8XzLh25owDf7vvkY4TkeQ8=
Subject key identifier: E3:6F:58:63:4E:78:A5:0B:12:76:D0:22:9D:F7:88:68:A6:B3:73:51
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01A0CB59669D76A629DBB0DD66937EF8B8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 23:00:28 +0000
Manifest this update: Tue 22 Sep 2026 23:00:28 +0000
Manifest next update: Wed 23 Sep 2026 23:00:28 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: weZnvkIhQ+l/wubugSGgiPUSoYHSB61bU1UjqYtNazc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:66:9d:76:a6:29:db:b0:dd:66:93:7e:f8:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Sep 22 23:00:28 2026 GMT
Not After : Sep 23 23:00:28 2026 GMT
Subject: CN=e36f58634e78a50b1276d0229df78868a6b37351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:20:c8:f0:8c:cd:5b:0b:d8:7b:08:44:78:
a6:e3:3e:ce:e8:3e:3d:f1:b3:71:5b:d1:ad:31:4a:
9d:7c:c0:97:d6:e7:ac:fa:57:7f:a3:fb:59:d8:c4:
76:91:f7:6e:49:a9:60:e0:62:af:fa:2d:53:e0:19:
1d:9f:0e:2a:70:de:4c:f1:29:21:38:84:c7:07:8b:
af:b5:95:6b:a4:e5:1b:74:c0:08:cf:8d:53:46:89:
00:7e:46:27:ad:31:a5:43:2d:7d:2f:93:31:80:f3:
66:67:ad:9c:81:9d:13:70:28:d0:ac:b9:6d:c5:df:
1c:ab:6b:fc:ca:ce:4e:c7:86:01:84:c9:dd:cf:04:
7b:fa:8a:d8:f0:a7:21:e9:cd:73:82:9f:0d:44:fa:
aa:f4:f3:de:9c:ca:2c:13:f7:c1:98:70:3b:ff:d6:
e5:77:8f:29:28:1a:68:2f:4f:b5:59:30:97:7b:5d:
c0:05:ea:32:a2:31:df:c4:79:a3:ce:f3:63:35:b7:
36:dd:4d:15:36:17:f7:7a:97:9d:bb:7d:98:fe:7d:
9e:e5:13:a2:ed:74:f3:b1:03:83:fc:f8:c7:38:bb:
fe:19:e1:25:26:9d:19:a7:73:52:69:60:75:e6:38:
97:b3:32:91:30:7d:f8:c5:24:ea:3c:2e:da:ec:9f:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:58:63:4E:78:A5:0B:12:76:D0:22:9D:F7:88:68:A6:B3:73:51
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:06:54:f0:26:e7:f8:3f:cf:8a:72:3a:f9:c6:a3:4c:02:
bd:81:24:ca:f3:0a:57:df:8e:a7:1a:1a:a2:f8:5d:74:8e:10:
c7:5c:fe:f0:72:32:fa:01:03:f1:ec:e7:43:32:41:ac:50:ed:
29:cd:a8:79:be:26:9a:c5:99:d1:96:7d:f9:09:5b:0e:ff:80:
b3:8b:d0:3b:86:3b:28:60:81:f0:08:30:32:02:fd:ce:ad:93:
89:47:4f:63:a1:db:9e:14:77:ca:2a:30:fa:bc:48:85:32:3b:
af:af:05:a7:50:8e:f8:1e:31:1e:7b:1c:0c:82:81:a9:c6:b2:
01:a5:16:10:44:da:7b:ff:f2:fa:3a:2a:36:9e:2a:8d:9e:dd:
94:dc:14:b3:d8:c9:57:41:d6:48:4d:ff:29:63:05:40:ba:34:
0c:77:0d:ed:40:59:1f:3b:d2:4c:40:40:31:c1:44:aa:cd:5b:
5c:c0:78:70:3c:c6:08:ad:31:f2:1e:75:af:21:8f:70:8a:22:
e9:5e:1c:a0:98:05:5e:72:79:f7:8b:3f:b8:77:33:4e:5f:63:
6d:c6:c2:60:5a:e2:6a:f6:79:69:46:e1:f1:2c:07:c4:c8:5e:
29:54:a7:8c:5c:88:0f:a2:51:21:93:01:cc:3e:cf:07:96:02:
0d:bd:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:44:26 2026 by rpki-client