Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: sRBHHq3ZxwR0JWasge83Mn1zNqPHPx45SnNr8dfs1GQ=
Subject key identifier: 5E:E8:1A:D7:FF:B0:D2:84:39:38:81:1C:96:11:14:D9:6B:93:0C:FA
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 01A0D6F037F0E72DDA6A54C122D6C9463CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 0765
Signing time: Fri 25 Sep 2026 05:01:02 +0000
Manifest this update: Fri 25 Sep 2026 05:01:02 +0000
Manifest next update: Sat 26 Sep 2026 05:01:02 +0000
Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: WHR5TtMC4Zc/StnYN4yzDALW210DUWmfP2l84SbXZLY=)
2: MepLmZbt23727bu7i1sZtq5TYHU.roa (hash: CEQGpaoQctPR7fkdzqVk8v2fKY5oxVttH1xe6bXTouQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:37:f0:e7:2d:da:6a:54:c1:22:d6:c9:46:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Sep 25 05:01:02 2026 GMT
Not After : Sep 26 05:01:02 2026 GMT
Subject: CN=5ee81ad7ffb0d2843938811c961114d96b930cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:c9:c8:46:98:8a:1e:b6:69:5a:ed:7a:4d:
0e:40:9b:7b:17:ca:2f:65:bc:aa:15:07:cf:80:7f:
c4:45:09:8f:f5:ae:63:20:4c:1a:14:58:cb:a8:e3:
bb:34:b2:bb:b0:7c:15:40:fe:bd:82:72:dc:ba:55:
98:3e:a5:ef:f2:72:ea:2a:c7:7f:6b:c6:84:28:a3:
c8:8b:32:02:59:fb:63:eb:61:32:0d:f8:97:b4:64:
4e:6d:c8:a4:6b:c9:ef:d5:be:5e:84:48:57:c3:f3:
14:8d:49:91:cb:b6:55:14:53:92:fd:6d:3d:cb:65:
09:f6:f9:20:7e:1e:6b:e0:49:75:57:52:0c:93:18:
9b:96:44:d1:28:a0:81:b9:f7:60:14:27:e9:86:93:
0c:79:d2:21:dc:95:6c:a9:73:bb:8c:b8:f9:21:55:
10:b3:c6:9e:21:8e:60:b5:16:b2:b3:b5:ae:15:10:
68:71:cd:07:83:3b:2e:27:7d:00:91:7f:99:07:b3:
91:60:d6:d7:86:97:73:73:b7:7b:18:3e:50:55:c4:
ea:03:f8:18:e1:c4:5b:7c:8e:2a:72:23:83:cd:35:
46:c9:d2:e0:b5:6a:02:96:5b:3a:42:b5:7f:e3:85:
b7:37:19:d1:b8:24:ee:e2:0a:b5:e9:64:f4:50:9d:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:1A:D7:FF:B0:D2:84:39:38:81:1C:96:11:14:D9:6B:93:0C:FA
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:d7:87:21:80:13:1d:ff:fb:1a:68:f5:07:3a:6b:be:eb:
40:06:a2:08:ef:4f:5b:d8:e1:6b:a3:65:33:01:2c:b4:05:d4:
48:0a:9d:92:1c:7a:b8:5b:0a:cc:62:03:32:11:69:26:aa:95:
83:72:c4:7b:3a:da:08:c3:7e:b4:6b:93:0d:a6:e4:9d:da:8b:
ca:c5:2f:92:3e:4e:e3:4d:88:f2:05:0c:68:53:42:af:0e:f4:
a7:02:b4:8c:3e:62:85:0a:9a:6b:78:36:31:63:fd:7c:91:84:
e9:9c:3d:22:d3:14:18:bb:9b:98:f9:be:fa:2e:7f:a6:e5:f6:
7e:4c:3e:a3:6d:fe:a7:94:52:02:49:e6:3f:a9:56:06:44:03:
43:9e:33:37:94:82:38:46:f3:94:01:90:26:a2:44:23:ac:33:
df:5b:59:98:42:7e:33:68:21:71:5d:a4:8a:ea:1e:76:81:dc:
65:92:b0:07:b7:1b:42:6c:d2:c2:a4:8a:15:95:5a:9d:c6:99:
4b:4c:73:13:3a:9f:e1:20:e7:c5:1c:94:07:37:3f:92:b2:e7:
d7:8f:d9:1d:94:5e:e0:46:74:09:01:2a:50:de:1f:6a:b5:26:
b4:f6:0f:44:6c:c7:82:c3:28:ac:55:3e:0b:b4:8a:df:93:8c:
2a:b3:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:28:26 2026 by rpki-client