Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: z7Zl0/fg33KZaPFlsLdDaVPx9G+qRDB1GgBVyNkDP54=
Subject key identifier: 03:70:CD:62:1C:80:00:F4:03:73:08:78:37:45:C6:9F:C8:7C:CC:F2
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01A0CC6BCC31249F3C6445659C4B860B591C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0ED9
Signing time: Wed 23 Sep 2026 04:00:11 +0000
Manifest this update: Wed 23 Sep 2026 04:00:11 +0000
Manifest next update: Thu 24 Sep 2026 04:00:11 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: IblOTvYKkWh55YkUfUOWgCsuq33s/b/FpoeJNVVCgyg=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
3: w5-KHcw5iW2dZ4Gu6lDIZSylhAw.roa (hash: Mh4CtHCCAyOEQHT+0GZL5DrmI0KACaziKJcUGyMXvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:cc:31:24:9f:3c:64:45:65:9c:4b:86:0b:59:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Sep 23 04:00:11 2026 GMT
Not After : Sep 24 04:00:11 2026 GMT
Subject: CN=0370cd621c8000f4037308783745c69fc87cccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:71:9b:e0:c6:7f:86:c4:ed:b5:64:d7:dd:
93:19:74:11:d9:f4:88:f0:22:1f:2a:56:98:5c:f5:
cd:ae:7e:d2:d1:44:a9:94:86:b5:9a:28:e9:32:10:
32:88:65:7d:95:e1:ff:3c:ed:ce:cc:78:43:39:42:
48:a2:d6:b0:61:19:ce:f3:0b:ef:10:f8:68:7e:51:
9d:0d:c5:4f:2f:f3:2d:7a:f1:8e:d5:b0:ef:66:ae:
8c:a1:22:e1:d4:f5:87:ff:d4:e4:c9:41:f2:0b:48:
a1:ce:0a:40:b2:e4:39:21:0e:5b:62:58:89:28:60:
67:c7:b5:37:39:af:32:b3:d7:9f:74:0f:e4:b2:66:
5c:80:97:82:6a:c3:69:88:30:d4:fe:b8:66:6e:74:
d2:a0:13:38:ab:bc:52:b3:c0:cd:14:da:58:13:6e:
89:95:ce:14:81:34:68:b0:1d:e2:db:05:f0:bd:58:
8b:0b:b3:9a:51:13:ba:66:6e:b0:5e:d0:f3:76:bf:
ac:35:5a:ab:da:be:1d:f4:39:20:f1:5b:9e:1d:a8:
0a:fd:8f:31:cc:25:a8:89:47:42:e7:de:5c:48:ee:
f3:d1:88:d3:96:11:a6:3f:52:ab:ed:55:6d:45:4c:
16:88:3f:56:78:75:ef:d5:d6:74:33:05:44:ef:35:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:CD:62:1C:80:00:F4:03:73:08:78:37:45:C6:9F:C8:7C:CC:F2
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:2f:75:91:26:fd:ce:86:c1:40:0b:1d:1d:a6:1f:6d:da:
a1:7a:cb:5f:58:6b:d7:a6:c8:dd:85:9f:4e:ba:53:6c:dd:ea:
a8:72:fa:31:db:33:3c:b8:b1:0f:81:93:de:95:35:06:f7:9b:
22:16:e2:a1:d7:0d:56:5c:2a:d1:e7:a6:b2:89:1c:e0:a6:43:
66:fe:72:70:15:a2:96:44:ac:48:92:b7:f4:21:f5:6c:3d:c1:
48:a3:a3:36:4f:89:5b:c2:57:84:bb:0c:2c:f7:cf:5e:26:ee:
36:4b:b8:8d:23:80:98:86:8b:16:84:4d:9d:05:15:63:f6:91:
c8:3f:ca:c2:b5:d9:10:1c:36:72:f7:d5:be:df:de:38:89:df:
92:fa:77:af:e0:fe:32:e6:d0:68:95:e7:41:10:90:75:a2:e1:
48:f1:c8:8d:b0:05:bb:53:a5:a7:02:bd:f3:f1:05:9b:38:1d:
e0:c9:fd:0d:4e:86:c4:91:26:a8:83:c4:30:dc:5f:05:74:ed:
12:14:18:4f:47:62:77:ab:58:16:c6:67:f0:bc:9f:43:e6:1b:
ca:46:9f:5a:d6:0c:d3:9d:c3:12:29:ae:0a:8f:84:1c:12:87:
8d:c8:8b:eb:3c:2d:61:98:26:ba:8a:f3:d3:fe:06:35:3f:22:
04:fe:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:32:50 2026 by rpki-client