Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File: C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier: la0cNWK7g4AOvqYkNFrtidj4nRTx9SZXKEybQup1wxw=
Subject key identifier: E8:1A:9F:D7:54:C5:67:D1:1A:E6:E1:B7:52:2D:6D:E7:F4:59:9C:2E
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 01A128B0DCFAC7435B5595C58D4973868C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 02:00:41 +0000
Manifest this update: Sun 11 Oct 2026 02:00:41 +0000
Manifest next update: Mon 12 Oct 2026 02:00:41 +0000
Files and hashes: 1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: 90m4CFpOEH1wRiiKA0L80lsDdxYhw+chG7oo+0AVYso=)
2: Pug_p9HITgpm7BJCSDWU0O14f6k.roa (hash: ZRQX3KG8bE/bbw5v9G0xJ8TDZlB8FFTvWWz9Ahu2Og0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:dc:fa:c7:43:5b:55:95:c5:8d:49:73:86:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Oct 11 02:00:41 2026 GMT
Not After : Oct 12 02:00:41 2026 GMT
Subject: CN=e81a9fd754c567d11ae6e1b7522d6de7f4599c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:c9:3e:a5:df:7f:85:27:1b:48:38:82:1e:
82:78:2a:f7:2f:64:da:98:38:07:a2:c3:b1:7d:f4:
ce:bf:cc:eb:69:6b:7e:04:2c:03:1a:74:d5:14:91:
84:d7:b6:52:7c:52:04:9e:14:1d:42:a2:05:d1:eb:
a1:fd:27:64:d6:e2:33:b5:ac:e3:0a:05:ef:3f:fe:
ce:d2:13:49:6f:12:f4:31:a4:60:e7:f8:ec:6b:3b:
4e:cd:e2:72:96:33:ac:76:0e:fe:a1:3f:4c:a8:f6:
6e:47:de:fc:2d:8a:00:5d:c8:7d:ae:fb:ae:74:4c:
c5:ac:11:20:48:7d:f4:d6:ed:a2:44:42:35:fb:72:
43:fc:99:09:11:2e:da:ae:bf:fe:5b:4c:11:19:aa:
3e:a5:d8:dd:c9:f1:c1:d5:cb:3f:7e:44:eb:04:26:
a1:16:82:08:1f:46:a5:87:54:b8:c5:77:9d:fb:a5:
53:98:06:07:92:98:6c:13:81:da:e1:24:f7:1c:b5:
76:07:ca:60:8f:f4:f5:8d:c3:ed:3a:e8:02:d8:04:
8a:ca:b1:95:0f:f6:93:2f:5b:22:73:55:0d:ed:43:
6e:9f:09:d6:65:19:0c:dd:81:62:ca:b1:0b:aa:e6:
b2:77:d3:19:49:3e:c3:9d:c3:37:72:95:78:8b:aa:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:9F:D7:54:C5:67:D1:1A:E6:E1:B7:52:2D:6D:E7:F4:59:9C:2E
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d6:8b:0e:be:50:8a:c1:90:96:9f:e8:93:0d:fe:52:e5:95:
e2:24:70:d9:a9:2f:05:75:43:7b:4f:24:46:d7:d4:92:a2:98:
6b:d5:b8:ae:d1:aa:cb:02:f2:44:4c:71:71:b6:07:55:2c:18:
15:d0:20:d0:21:75:1f:83:61:28:c7:ee:84:94:85:2d:b0:73:
07:cd:0f:28:3f:8c:c3:a3:c7:21:8c:fc:b3:e4:be:a0:7e:41:
02:5e:16:07:6a:ef:40:61:2c:6b:91:b3:78:17:de:b3:7e:58:
1f:88:a0:85:92:36:87:e8:cd:7e:6a:c9:cc:c7:4f:9e:ae:86:
c8:43:1a:76:22:2f:16:0d:9d:5c:14:bf:5f:24:89:1b:ea:04:
41:41:4f:c4:7a:a7:b5:28:ee:2f:0c:79:c2:7e:de:01:fc:af:
0a:cb:2c:62:c2:5a:5b:fc:39:5a:b5:17:26:bd:22:34:8c:bf:
72:98:28:72:e4:8b:95:1e:75:fc:57:80:82:e2:cc:fa:89:53:
d1:71:6b:dc:6e:f1:7b:0a:5f:bb:51:6c:e3:d6:90:80:05:a4:
2d:63:4d:80:62:95:40:b3:40:9e:6c:e7:3d:6b:73:72:fa:86:
c7:09:04:1e:2d:17:c7:c7:d8:b9:d4:99:59:11:7d:6d:80:36:
1e:57:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:30:18 2026 by rpki-client