Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: HaiC9EjnYPZfRkEyk8TbT5JwsGRG8ajNHt0pc7LuRWs=
Subject key identifier: D8:A7:7C:B4:CA:7B:24:C0:C3:C5:8B:13:0C:7B:82:33:54:60:6E:84
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 01A0CE91112629AB3BB0C482EE353E98D83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1466
Signing time: Wed 23 Sep 2026 14:00:08 +0000
Manifest this update: Wed 23 Sep 2026 14:00:08 +0000
Manifest next update: Thu 24 Sep 2026 14:00:08 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: vRNYJ4IJe9CQJVIrg/0zK7Ll3VMd4WF1ogcQ6hZj1c0=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:11:26:29:ab:3b:b0:c4:82:ee:35:3e:98:d8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Sep 23 14:00:08 2026 GMT
Not After : Sep 24 14:00:08 2026 GMT
Subject: CN=d8a77cb4ca7b24c0c3c58b130c7b823354606e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:3c:f1:08:41:21:c1:49:b9:7b:f4:86:79:
ea:91:41:18:b9:ec:9c:eb:b3:32:9b:72:7b:95:e6:
1a:c5:cc:1e:60:51:93:07:5c:d2:2c:ef:c1:95:d9:
45:c0:0c:72:9b:ed:6d:3c:a9:b4:1f:6f:55:7a:a3:
a3:17:35:be:79:26:40:b6:02:1f:42:34:2b:a8:61:
fa:af:3c:0c:31:45:a8:fc:15:b9:62:35:48:2f:f0:
8a:a1:a3:9c:3a:89:eb:0f:f6:ea:50:2f:85:ab:df:
b4:0a:2a:a1:e9:35:0c:24:0b:2e:58:9b:1e:60:8f:
75:6d:fc:14:59:53:83:ea:2e:f8:32:44:00:c2:ec:
5d:23:5e:00:21:c0:6a:58:cd:cb:cd:0e:92:90:ff:
67:ab:b9:5c:27:ac:6b:78:d1:68:af:d4:0f:10:28:
ce:63:e9:39:ea:72:56:ef:69:3c:a6:a7:ea:ef:31:
13:9b:d0:b0:44:e7:8a:ca:9e:5a:b8:fa:60:e6:ac:
fb:85:9f:a2:c9:f5:df:38:21:4d:04:be:c8:fc:95:
f8:22:db:bf:ce:40:57:c0:42:34:d9:b6:fe:60:9f:
e8:50:77:b2:e1:17:0b:5d:03:4d:18:b0:79:18:15:
22:97:f9:e6:b5:eb:e1:74:a2:67:72:10:b9:68:fd:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:7C:B4:CA:7B:24:C0:C3:C5:8B:13:0C:7B:82:33:54:60:6E:84
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:bc:a2:b3:b5:83:b7:26:10:9c:6c:26:90:17:64:7d:7a:
08:a3:c3:86:78:83:4c:ad:88:bc:32:9d:4b:07:fc:c3:b1:63:
73:ca:97:07:9a:46:ee:88:e9:10:25:35:5a:e5:60:7d:34:69:
a8:6e:2e:8d:2d:26:30:a1:4a:34:93:f9:1d:39:2c:aa:d0:85:
35:70:65:7e:6e:fa:56:1b:d6:78:39:a9:59:7e:46:d2:4d:77:
b4:c5:2e:f2:1c:87:3d:51:33:84:22:51:a1:db:15:7a:19:1b:
bd:41:3c:12:74:0f:a6:bf:61:a2:19:08:7e:c2:46:09:da:d7:
89:1a:05:4b:48:89:31:04:de:d5:73:01:dd:2a:4c:9c:bb:e5:
70:18:f4:ef:03:76:bf:5f:10:72:d9:6c:dc:b3:dd:c2:4e:10:
d2:8c:2c:bf:31:74:20:21:c8:d5:ad:31:7d:93:a2:fe:a3:7d:
f5:16:a0:fb:65:10:73:3d:5d:d0:c2:90:25:a8:c8:3a:5e:10:
b9:1b:e2:5f:3c:03:a9:c3:2b:59:ab:e1:c4:93:f1:85:8d:6b:
7e:e5:02:8d:82:af:4d:dc:72:82:5a:76:c8:be:96:01:a8:4d:
e5:f0:52:39:93:41:81:25:d6:b8:a5:95:39:d6:4c:54:be:c0:
18:5b:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:00:14 2026 by rpki-client