Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: IArxZl3eW57thQjCcBCef7noy4vcwN7B8sg8aqGJwSY=
Subject key identifier: C5:AB:70:4A:03:FC:B8:7B:90:CC:68:90:79:FA:16:90:3D:82:BE:92
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 01A0EA40B50ECA4FFAEED6AD8B7003CC6BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 178A
Signing time: Mon 28 Sep 2026 23:01:44 +0000
Manifest this update: Mon 28 Sep 2026 23:01:44 +0000
Manifest next update: Tue 29 Sep 2026 23:01:44 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: 9VxSGEyrivauwT0gjbXkDVQxGtwC7DhK6/bcIH/qPkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:b5:0e:ca:4f:fa:ee:d6:ad:8b:70:03:cc:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Sep 28 23:01:44 2026 GMT
Not After : Sep 29 23:01:44 2026 GMT
Subject: CN=c5ab704a03fcb87b90cc689079fa16903d82be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:be:66:6e:4b:b3:f0:54:4e:65:e5:90:46:
83:0a:71:f0:ad:e1:dc:ca:83:c2:ed:0a:c2:be:86:
e8:8b:0c:fb:c8:c7:3a:b7:28:00:07:19:f4:26:0d:
33:4d:c6:76:4b:48:09:a7:a6:3a:55:83:a0:13:e6:
3c:73:1f:46:6b:85:1a:8f:87:96:c3:1c:2a:fa:a0:
dd:01:99:22:e6:27:9e:e3:d4:15:53:05:82:47:d4:
65:4d:fe:0c:f5:ce:e0:6f:dd:5b:1f:fa:ab:87:65:
a8:9c:7f:5f:97:62:b8:87:f9:33:4d:6a:dd:ab:af:
26:0d:b3:23:49:19:21:b3:e1:8e:e3:1f:af:9f:df:
87:24:ad:a6:24:aa:79:b8:eb:3c:91:d7:44:bd:55:
21:1d:ad:78:cb:dd:72:d9:23:7f:59:6a:18:a7:e8:
fa:b4:56:00:92:3f:8d:70:63:e0:d3:83:86:d3:ba:
77:1c:e6:95:de:ee:aa:d7:c6:4a:44:18:e9:65:a5:
27:14:fc:55:bc:49:e7:bb:dc:7f:b6:73:67:58:34:
57:d4:25:39:1b:31:1b:77:59:da:42:d0:55:63:94:
3f:49:37:e8:c1:9e:a2:c3:10:45:6b:33:8e:c1:15:
aa:74:27:c3:54:27:64:f1:d4:00:b7:ea:76:50:1f:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AB:70:4A:03:FC:B8:7B:90:CC:68:90:79:FA:16:90:3D:82:BE:92
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:3d:d2:2d:9e:de:5f:63:a6:4e:1b:3f:55:f5:7b:81:2b:
e6:63:b7:58:4f:5c:13:09:84:82:e5:96:91:86:a3:64:ff:a0:
80:51:18:f5:16:86:56:e0:b2:68:52:20:5d:d5:35:79:bc:29:
c4:14:1d:55:c8:80:a4:96:bf:bf:28:2f:89:02:f4:0b:25:12:
3f:f8:d1:a8:6e:0a:ca:b2:f5:df:41:ac:87:80:e9:1b:61:07:
11:bd:29:b7:bc:4a:dd:66:f7:32:71:b8:ee:0a:ae:32:82:05:
22:b5:06:ec:da:3c:74:a4:c7:a8:47:eb:f5:cc:b8:46:dc:c0:
a5:3c:12:ee:54:0b:90:d7:12:e2:cb:38:be:f2:fc:c5:7d:66:
7d:d5:00:72:71:bf:81:c1:aa:93:40:b8:ad:93:ae:2e:fd:e3:
07:bd:e6:80:75:0e:7f:32:46:c3:cf:64:67:39:eb:08:cb:83:
97:5c:16:1a:49:23:fe:02:7e:27:92:6c:35:65:ba:01:44:e0:
0d:d1:2a:a9:ff:2d:79:d5:48:14:85:5d:6b:98:2d:35:cc:c8:
57:f2:8f:2a:ce:0f:b2:73:03:3f:ef:5e:ea:dd:60:16:89:40:
d6:4a:ab:7c:c9:85:8d:fb:e3:47:ea:20:b5:e2:21:70:63:d8:
67:98:fa:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQLUOyk/67tati3ADzGu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZGY2Yzc1M2VhMDg1YmVmMzcyYjM5MjYzMGY3NGJhNTc2
OTZlZTUwHhcNMjYwOTI4MjMwMTQ0WhcNMjYwOTI5MjMwMTQ0WjAzMTEwLwYDVQQD
EyhjNWFiNzA0YTAzZmNiODdiOTBjYzY4OTA3OWZhMTY5MDNkODJiZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKq+Zm5Ls/BUTmXlkEaDCnHwreHc
yoPC7QrCvoboiwz7yMc6tygABxn0Jg0zTcZ2S0gJp6Y6VYOgE+Y8cx9Ga4Uaj4eW
wxwq+qDdAZki5iee49QVUwWCR9RlTf4M9c7gb91bH/qrh2WonH9fl2K4h/kzTWrd
q68mDbMjSRkhs+GO4x+vn9+HJK2mJKp5uOs8kddEvVUhHa14y91y2SN/WWoYp+j6
tFYAkj+NcGPg04OG07p3HOaV3u6q18ZKRBjpZaUnFPxVvEnnu9x/tnNnWDRX1CU5
GzEbd1naQtBVY5Q/STfowZ6iwxBFazOOwRWqdCfDVCdk8dQAt+p2UB9PuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWrcEoD/Lh7kMxokHn6FpA9gr6SMB8GA1UdIwQY
MBaAFHHfbHU+oIW+83KzkmMPdLpXaW7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2Qt
YTgzODQ1Y2FhYzIxLzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2QtYTgzODQ1Y2FhYzIx
LzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrM90i2e
3l9jpk4bP1X1e4Er5mO3WE9cEwmEguWWkYajZP+ggFEY9RaGVuCyaFIgXdU1ebwp
xBQdVciApJa/vygviQL0CyUSP/jRqG4KyrL130Gsh4DpG2EHEb0pt7xK3Wb3MnG4
7gquMoIFIrUG7No8dKTHqEfr9cy4RtzApTwS7lQLkNcS4ss4vvL8xX1mfdUAcnG/
gcGqk0C4rZOuLv3jB73mgHUOfzJGw89kZznrCMuDl1wWGkkj/gJ+J5JsNWW6AUTg
DdEqqf8tedVIFIVda5gtNczIV/KPKs4PsnMDP+9e6t1gFolA1kqrfMmFjfvjR+og
teIhcGPYZ5j66w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:52 2026 by rpki-client