Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: tFDk9h0mHqz52zh3mXhaN7Hq/rsjTyMyUnA3pFMrZ1I=
Subject key identifier: 8D:11:5C:4F:40:81:24:6F:2E:AA:0E:9E:E3:6F:61:B2:9C:8A:2E:A9
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01A0CE5A99E546650F40FD5E965987F5FDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 17B7
Signing time: Wed 23 Sep 2026 13:00:39 +0000
Manifest this update: Wed 23 Sep 2026 13:00:39 +0000
Manifest next update: Thu 24 Sep 2026 13:00:39 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: O8gxLI1ZO+jHWopv/jE5qDHsMfKzZ8QGCj3JC6VQ53M=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:99:e5:46:65:0f:40:fd:5e:96:59:87:f5:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Sep 23 13:00:39 2026 GMT
Not After : Sep 24 13:00:39 2026 GMT
Subject: CN=8d115c4f4081246f2eaa0e9ee36f61b29c8a2ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:53:5a:91:31:08:04:56:22:5b:50:17:49:
4a:8b:aa:b2:2e:6f:7a:e5:34:ed:2d:fd:ed:f5:88:
2d:ec:9e:1d:55:4e:66:84:27:33:3e:18:e8:1b:7d:
d1:bb:fc:f6:b8:1b:02:41:82:8c:78:41:01:c0:d2:
db:50:f7:ec:63:af:e7:97:a8:80:e5:15:46:7b:ff:
4b:b0:ea:21:22:c6:d6:fd:8d:c9:ef:a0:fd:f3:3a:
8c:81:35:30:89:28:2e:2b:8d:ce:68:38:3e:ee:c3:
90:6e:5d:3b:58:0f:ca:82:56:28:f0:7f:48:f5:db:
b3:be:2f:83:15:b0:7e:8f:a7:fa:84:a5:60:32:96:
e6:7d:d9:a9:30:da:11:3b:43:a0:b3:80:64:d7:17:
f1:19:11:8e:ee:16:f2:e8:3b:dd:01:bf:8a:8d:f9:
22:57:bc:3b:bf:7e:63:5a:2c:b4:e1:f6:e8:2a:82:
7d:06:c7:5f:fa:dc:c1:9b:57:ac:79:61:aa:77:6e:
18:27:be:2c:a2:f0:93:dc:c0:b9:ce:4f:60:89:cc:
64:78:b2:7e:1e:d5:8a:32:21:db:c6:41:40:1d:a2:
c1:e1:76:a0:83:0f:a3:32:ab:8c:ca:8a:ca:a7:52:
aa:a3:b7:82:48:2c:81:53:7f:b8:ad:c2:21:77:a6:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:5C:4F:40:81:24:6F:2E:AA:0E:9E:E3:6F:61:B2:9C:8A:2E:A9
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:17:b4:99:ff:da:1f:6b:03:0e:92:77:96:3e:19:c7:0c:b8:
70:44:22:fb:fd:66:39:52:12:11:ee:77:df:ef:55:c4:11:db:
1e:ef:ed:11:09:c0:27:0e:53:6f:60:a7:d7:11:b6:5d:05:d3:
dd:60:ad:48:5a:35:03:a7:f6:e1:59:8d:7d:7d:84:b6:e9:f5:
06:dc:3c:51:ba:73:6a:ae:cb:d6:c0:b5:bd:2c:de:15:b8:ce:
6c:e8:7c:6b:4b:97:8f:76:eb:43:03:bf:0f:13:0b:e6:95:1e:
cd:fd:74:93:c7:c2:9c:00:83:aa:2d:2a:e5:d0:a8:27:60:b8:
b0:94:2a:e2:f1:d8:a2:8c:64:5c:52:52:08:c7:55:3f:61:01:
c5:d3:c5:99:a7:7c:ab:a6:f9:98:82:0e:ed:8b:30:b1:8d:69:
56:c4:6d:b2:2c:e9:dd:b5:b6:74:29:7b:4c:ae:e7:44:18:25:
d7:ac:27:af:a6:45:84:e8:a3:d4:19:ca:d0:e7:59:7b:1a:5b:
60:16:10:d6:b2:71:74:d2:1a:5d:b5:5e:d1:90:22:1e:6a:89:
97:e5:db:0e:89:85:fc:f6:5f:17:e0:ec:06:8e:0f:75:6f:cc:
44:29:c5:b7:05:be:17:7d:60:06:b5:df:cd:f3:cd:4d:48:e7:
c7:25:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:36 2026 by rpki-client