Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: kyV9q1rvdHZIoCvtsrcDD/JPebL5OwJC42jwYRPk8zc=
Subject key identifier: 56:C7:F9:EB:F2:DC:D5:D7:57:F7:37:13:C4:4A:82:66:45:40:48:2D
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 01A0CE916753729756BB79D6AA3E7560A1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 0A71
Signing time: Wed 23 Sep 2026 14:00:30 +0000
Manifest this update: Wed 23 Sep 2026 14:00:30 +0000
Manifest next update: Thu 24 Sep 2026 14:00:30 +0000
Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: 2rUebKenGKA2/WcSfvwGvolX6Yy1P+9EDCXWkQpWBaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:67:53:72:97:56:bb:79:d6:aa:3e:75:60:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Sep 23 14:00:30 2026 GMT
Not After : Sep 24 14:00:30 2026 GMT
Subject: CN=56c7f9ebf2dcd5d757f73713c44a82664540482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:82:3d:72:2b:d9:f8:42:1b:94:00:1b:89:
a2:e3:fa:56:b9:0a:bc:7f:c2:22:de:b9:1c:33:7b:
02:31:7a:8c:2f:20:02:e1:42:f4:a3:6a:17:0b:fd:
0c:e5:82:66:49:9b:a3:3a:7c:63:5f:a7:3d:da:dd:
de:f1:ce:85:67:17:b9:4c:ab:b2:5b:82:70:71:f2:
cf:1d:cc:9c:98:44:2e:8b:8a:0e:e8:5a:11:74:1c:
a4:6d:4a:aa:b2:df:5a:f2:0f:bc:c9:7a:1f:a3:ae:
a3:49:25:0f:17:62:1b:a9:bb:39:c4:71:61:e7:41:
62:a9:25:8d:34:8c:96:60:87:31:b5:f0:e4:14:d8:
26:9d:f0:c1:9e:62:b5:df:1e:f0:77:b6:1e:ce:d8:
22:e5:c6:bf:a5:81:65:98:ec:3d:38:16:d6:48:a9:
2d:36:ea:89:9d:9a:c4:64:85:26:29:15:0d:aa:49:
d9:8c:01:68:60:f9:a6:2e:ad:18:e5:0e:33:55:b9:
0f:d7:1b:83:07:07:6b:c8:5c:10:ec:4d:17:4a:55:
41:85:29:a1:0b:24:a9:e7:16:5b:7d:6a:f6:36:c3:
e5:34:8e:7b:c0:74:cd:96:89:ad:54:c4:5a:06:ed:
ec:17:77:63:dc:69:9f:9a:db:d9:a4:d4:d5:31:5f:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:F9:EB:F2:DC:D5:D7:57:F7:37:13:C4:4A:82:66:45:40:48:2D
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:38:67:1c:b1:d2:c7:58:9d:cb:7d:fe:4e:04:69:3c:b9:
e9:7a:fe:36:54:43:6a:92:de:45:cd:d9:df:5c:3f:69:da:74:
37:2e:cc:76:d7:12:a8:27:95:e8:95:23:c0:5e:84:dc:97:6f:
b9:9a:ea:bc:6a:83:dd:e3:31:f6:c9:23:41:4d:0a:c1:4b:12:
94:14:28:e6:e2:e2:ad:07:82:c5:08:7f:60:2c:b0:d1:47:6e:
ad:44:23:7b:e2:89:43:5b:4e:df:ce:a4:af:ec:4d:78:bd:7b:
26:56:46:3f:9d:ea:d7:ce:65:ea:15:f5:ca:fd:57:da:e5:d5:
70:23:2b:b3:af:d0:e3:98:d0:cd:2f:46:42:16:99:5a:70:a5:
63:9e:26:f5:af:90:ad:f6:80:6c:90:b6:0a:08:a9:4d:6c:59:
85:c6:17:44:e1:31:ad:8c:57:d7:be:b6:66:31:4b:78:1d:ba:
9c:b6:32:25:24:69:f9:27:77:f8:92:98:5b:5b:86:d8:a5:47:
64:ff:71:a8:e5:02:0b:8a:0b:ed:6b:24:b4:76:61:02:43:9c:
30:04:49:1a:d7:ba:99:6b:d4:04:e4:b2:62:2f:bd:57:98:b2:
cb:b3:a3:20:7a:0b:f6:5a:d5:3f:16:8e:d4:dc:13:58:62:77:
20:4c:42:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkWdTcpdWu3nWqj51YKGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk
Y2VmZTcwHhcNMjYwOTIzMTQwMDMwWhcNMjYwOTI0MTQwMDMwWjAzMTEwLwYDVQQD
Eyg1NmM3ZjllYmYyZGNkNWQ3NTdmNzM3MTNjNDRhODI2NjQ1NDA0ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wuCPXIr2fhCG5QAG4mi4/pWuQq8
f8Ii3rkcM3sCMXqMLyAC4UL0o2oXC/0M5YJmSZujOnxjX6c92t3e8c6FZxe5TKuy
W4JwcfLPHcycmEQui4oO6FoRdBykbUqqst9a8g+8yXofo66jSSUPF2Ibqbs5xHFh
50FiqSWNNIyWYIcxtfDkFNgmnfDBnmK13x7wd7Yeztgi5ca/pYFlmOw9OBbWSKkt
NuqJnZrEZIUmKRUNqknZjAFoYPmmLq0Y5Q4zVbkP1xuDBwdryFwQ7E0XSlVBhSmh
CySp5xZbfWr2NsPlNI57wHTNlomtVMRaBu3sF3dj3GmfmtvZpNTVMV8RIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbH+evy3NXXV/c3E8RKgmZFQEgtMB8GA1UdIwQY
MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt
NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj
LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz44Zxyx
0sdYnct9/k4EaTy56Xr+NlRDapLeRc3Z31w/adp0Ny7MdtcSqCeV6JUjwF6E3Jdv
uZrqvGqD3eMx9skjQU0KwUsSlBQo5uLirQeCxQh/YCyw0UdurUQje+KJQ1tO386k
r+xNeL17JlZGP53q185l6hX1yv1X2uXVcCMrs6/Q45jQzS9GQhaZWnClY54m9a+Q
rfaAbJC2CgipTWxZhcYXROExrYxX1762ZjFLeB26nLYyJSRp+Sd3+JKYW1uG2KVH
ZP9xqOUCC4oL7WsktHZhAkOcMARJGte6mWvUBOSyYi+9V5iyy7OjIHoL9lrVPxaO
1NwTWGJ3IExCKQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:43 2026 by rpki-client