Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
File: CMD4JPxpxHv1_teUYxbN_-P6BFs.mft (raw, json)
Hash identifier: y1l/fvgU0ARIZ2dI/nIriEznMStIXrsLpsd+QEVmBAM=
Subject key identifier: 57:0F:01:3E:A3:C9:31:BA:8D:16:24:90:55:8F:EB:AA:B5:0A:21:F5
Authority key identifier: 08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
Certificate issuer: /CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Certificate serial: 01A0E13D9EA5311C26583F4FE05276FAF7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
Manifest number: 0134
Signing time: Sun 27 Sep 2026 05:01:46 +0000
Manifest this update: Sun 27 Sep 2026 05:01:46 +0000
Manifest next update: Mon 28 Sep 2026 05:01:46 +0000
Files and hashes: 1: CMD4JPxpxHv1_teUYxbN_-P6BFs.crl (hash: UV2GLX8dTBeKAPnYOIW3VuJe7IiARlFU0hwofnAITZw=)
2: EcOiKWkfENOhpUFqCuAv__VHhnw.roa (hash: Dg3pxaRe1cEkDH8sGf4s69+1RouBE83t1FQSJNv9iHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:9e:a5:31:1c:26:58:3f:4f:e0:52:76:fa:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Validity
Not Before: Sep 27 05:01:46 2026 GMT
Not After : Sep 28 05:01:46 2026 GMT
Subject: CN=570f013ea3c931ba8d162490558febaab50a21f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:11:f9:91:5f:51:fb:53:9a:46:e3:03:8a:
54:93:5b:94:9e:a2:4c:d5:c4:15:cb:9f:e1:ee:f1:
7b:a2:a4:ec:c8:2e:4c:f6:b2:73:22:ad:c2:1d:89:
74:3f:16:77:4b:c0:1b:63:a3:13:39:f5:81:1d:fd:
9d:51:92:46:e1:b1:e0:3a:31:15:38:b4:ac:28:3d:
8c:12:b1:36:69:e1:13:5a:b3:48:37:ae:c6:da:91:
49:d2:6c:c6:59:df:e2:ec:54:0d:91:83:91:ab:6c:
4d:db:d9:69:e8:2e:d5:ff:69:25:dc:a3:23:d5:5c:
0f:47:0b:73:2f:7c:9c:27:8c:8b:b6:da:97:8e:45:
f0:8b:a9:7e:06:9c:27:e4:ac:cb:63:f4:ab:a8:89:
81:04:55:0d:11:eb:ac:b5:3d:0e:4f:a9:81:86:16:
1c:3c:6a:d8:2c:1b:ed:b0:64:0a:2a:19:a0:30:5c:
50:70:c5:35:e1:cf:56:c9:9f:59:2c:61:06:79:4f:
ee:ab:9b:e4:cc:a8:06:5e:39:8a:ae:ac:a7:4e:bf:
e4:9e:69:09:88:ed:1e:3a:5b:9a:5f:0b:6a:fd:98:
b7:2a:c9:6d:4c:11:0b:13:8f:99:1e:4d:de:65:b3:
23:31:81:56:96:ca:a8:03:da:6c:b0:11:b1:1e:46:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:01:3E:A3:C9:31:BA:8D:16:24:90:55:8F:EB:AA:B5:0A:21:F5
X509v3 Authority Key Identifier:
keyid:08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:31:92:7a:dd:03:18:16:c3:2b:27:3b:dd:3e:14:2a:f2:
73:65:8a:08:c6:44:75:dd:cc:b2:0d:d2:cf:4a:75:b6:4f:ac:
e4:78:fa:60:22:34:cd:61:ee:8e:f9:01:32:c5:98:2b:2c:82:
23:14:c0:10:a8:82:9c:e0:98:63:78:68:58:d9:df:54:10:cf:
35:60:6f:66:b5:64:47:3b:58:ef:5c:9f:17:33:77:e6:98:e1:
1b:2d:3e:a4:57:3b:b3:25:fc:64:0a:f2:17:d2:2b:f8:49:4f:
52:d5:d1:ab:f1:41:c5:f3:46:23:3f:84:cc:5c:2e:56:b9:d5:
41:ae:75:21:e5:c6:49:7d:0b:30:80:37:96:07:75:94:d7:fe:
1d:1e:d7:60:24:b1:97:a9:c9:2e:03:c1:28:15:81:67:49:67:
2e:37:ed:b9:ab:c0:29:05:54:6b:9a:ae:05:20:27:44:12:ee:
37:fc:99:d0:3b:f0:a8:d8:2b:65:e3:2d:c6:14:b0:83:1d:a0:
68:56:32:5c:38:10:49:0d:b5:12:96:19:7d:a9:20:c5:df:67:
ac:17:e6:4a:96:a1:43:da:d9:09:fc:38:03:f6:d8:84:87:72:
ed:58:4f:49:36:24:47:db:e3:a2:83:59:1d:cd:3f:46:12:a7:
26:88:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:28:23 2026 by rpki-client