Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: 2gkER49VsSBE8e5gCkqLUcJzDDUU3jLL0CjzmHxP+xU=
Subject key identifier: 26:58:26:68:19:C5:74:CF:B5:C3:06:E2:2D:F1:8F:A7:7B:F2:35:35
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01A100C83B9E3D0F9399797CF59471C7CE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0628
Signing time: Sat 03 Oct 2026 08:01:24 +0000
Manifest this update: Sat 03 Oct 2026 08:01:24 +0000
Manifest next update: Sun 04 Oct 2026 08:01:24 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: +Pzph7tXZCFQtFL+KKnjGCu3Grz6faEYitGz5kd1xAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:3b:9e:3d:0f:93:99:79:7c:f5:94:71:c7:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Oct 3 08:01:24 2026 GMT
Not After : Oct 4 08:01:24 2026 GMT
Subject: CN=2658266819c574cfb5c306e22df18fa77bf23535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:9b:07:55:3a:e0:b5:d3:62:d6:f1:31:1d:
1a:f6:58:a9:79:ea:6a:c5:47:6b:41:23:15:5f:87:
5b:9f:93:7f:c6:73:33:d0:c5:fb:73:f7:c1:f2:ae:
fb:7c:b5:b8:6e:8d:e2:d1:ac:15:c3:e0:95:6a:bc:
41:db:99:17:39:d7:b1:51:73:41:d4:18:b7:54:a3:
62:d6:10:f6:29:fd:a6:07:23:e8:62:11:9e:8f:ed:
ec:a5:f5:01:86:48:17:de:4e:8f:55:da:b9:49:b4:
af:99:6c:e9:c4:c4:c5:af:ec:c9:f2:6e:41:2f:13:
76:1c:fa:79:d3:92:b9:51:a0:15:0e:27:60:17:4f:
ac:e1:4c:de:39:71:0f:d3:5e:e1:8c:c3:b6:bf:38:
70:99:c6:d1:70:67:79:79:09:3f:79:4d:f8:39:62:
ae:02:35:1f:4e:3c:99:07:79:dc:ad:a2:4d:41:77:
32:f1:5a:5e:d5:af:00:17:fd:d2:20:10:84:bb:74:
76:62:24:54:e3:2c:9a:fc:24:22:86:65:e5:5a:a0:
9f:44:68:83:15:47:05:ba:3b:34:86:08:ea:4f:6b:
f4:0c:05:5e:21:b3:4c:5a:24:eb:3d:d0:fd:e2:33:
46:84:6c:fc:5c:9c:27:29:c7:09:bb:0b:8a:a6:eb:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:26:68:19:C5:74:CF:B5:C3:06:E2:2D:F1:8F:A7:7B:F2:35:35
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c2:38:52:4d:00:c1:db:ec:23:1e:59:5d:98:23:60:6b:b0:
28:a7:6a:26:51:9e:93:ce:56:ee:c7:26:77:73:6b:ce:ab:f1:
43:d1:d4:60:e9:96:50:ac:ad:2c:14:0c:f1:4d:86:cd:b1:3f:
fc:28:7a:06:04:82:19:03:bd:48:ca:6f:ae:8a:10:3a:ec:a9:
71:fe:72:33:47:8b:85:42:a0:b4:d7:46:89:25:e0:f6:40:08:
f6:45:89:ca:f1:ae:7b:ef:00:d7:ba:0c:86:9c:cb:84:0f:b6:
5f:a2:d4:19:fc:a9:21:61:2e:6d:b4:bd:03:36:fd:6b:b4:c6:
57:b8:87:5f:fe:61:b6:a0:36:0e:26:b6:5b:b4:77:b1:2d:a6:
67:fb:df:9a:fe:12:72:4c:c5:0a:f5:65:0e:58:86:0f:57:2c:
b0:17:74:7c:26:5e:43:aa:9a:d7:ff:f8:21:d4:29:d6:0a:cb:
37:3d:85:c2:ab:6b:4d:cd:05:cf:de:3e:d8:24:7f:b6:ac:16:
d7:b3:29:8e:d4:0a:26:c9:ba:0f:3b:de:aa:68:38:de:88:0b:
3a:97:66:74:72:6a:ae:2b:0c:88:1d:2f:15:4c:d9:ff:4a:b7:
64:db:47:76:4e:26:97:08:d3:5e:48:7a:38:64:ec:f9:29:eb:
90:cb:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:44:36 2026 by rpki-client