Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: p1VNg2aRCkojIWOEQL+4fu9VBQPwQU2qVROCJfzfHUk=
Subject key identifier: AA:96:B2:5A:47:69:9A:9C:D2:CE:5F:5B:81:FF:AE:B9:EB:DF:93:00
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 01A0D7CCA6B9655874A4F1F35BE0A42AABD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0FD3
Signing time: Fri 25 Sep 2026 09:01:48 +0000
Manifest this update: Fri 25 Sep 2026 09:01:48 +0000
Manifest next update: Sat 26 Sep 2026 09:01:48 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: 9jeVav2eeZO/ZD5tHYFmIvdh+fEIo63uj+KYN0dDyeI=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:a6:b9:65:58:74:a4:f1:f3:5b:e0:a4:2a:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Sep 25 09:01:48 2026 GMT
Not After : Sep 26 09:01:48 2026 GMT
Subject: CN=aa96b25a47699a9cd2ce5f5b81ffaeb9ebdf9300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:9a:84:ec:d6:24:e8:5b:eb:1d:c0:63:dc:
97:4a:f4:7e:42:4e:f4:f6:b9:d2:a2:8c:b9:3e:8c:
42:e8:c3:15:94:3c:e3:2e:39:1c:d5:42:17:38:e1:
01:d0:8f:01:37:2c:68:ec:97:2d:a7:fa:80:87:67:
04:b9:e7:05:12:65:84:c7:57:b5:e3:4a:26:67:84:
19:9d:5f:be:4c:e4:9c:ef:0b:a9:0d:99:57:61:88:
04:44:c8:37:7b:e0:6d:6e:69:ea:ca:c3:a0:b3:13:
03:c9:0c:b7:46:65:3e:52:e1:8c:7f:ba:7c:9f:9e:
63:6a:e1:f8:0d:22:cd:9f:50:42:b0:83:ff:2b:80:
5f:09:d0:2f:5f:14:6a:77:e6:55:c9:97:2c:b8:fe:
9f:f9:b1:3e:88:5b:f2:f7:8b:c6:5b:f5:99:48:ce:
2e:0d:5a:d8:3c:fc:51:8c:56:4c:ca:ae:5a:67:39:
e0:c3:ff:bb:fb:90:62:fe:4a:b8:f6:78:a1:6e:17:
e4:9f:3f:45:8d:d8:9e:a8:aa:6a:44:45:3b:b0:cd:
9f:a9:d5:01:7e:d2:8b:2b:34:c1:e5:01:b9:2d:5b:
4a:43:16:49:cd:1d:f8:3a:0f:ad:01:37:2a:9c:64:
f5:97:98:4c:16:d8:ac:54:02:2d:98:90:80:5b:0c:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:B2:5A:47:69:9A:9C:D2:CE:5F:5B:81:FF:AE:B9:EB:DF:93:00
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b3:f2:be:b9:75:38:cc:93:03:65:7f:83:d8:ca:41:7f:0c:
2e:ff:d9:02:25:f9:6d:88:ce:5f:5d:fb:fe:ec:ee:35:c7:58:
cc:5e:c7:76:7e:aa:f4:c7:7c:57:e5:b5:c7:e2:f4:34:7d:49:
b0:d5:fb:d0:f2:85:ff:07:9f:34:37:eb:71:25:a6:34:b9:87:
31:15:ad:05:fb:b0:32:b0:59:6f:a3:b3:73:cb:2c:9e:bd:33:
5b:11:d5:23:88:16:f8:d1:d2:16:52:6e:fe:c8:08:d1:43:3e:
d9:45:fa:e2:04:61:be:6b:da:ac:85:83:e3:b7:24:e3:e8:83:
ca:1b:52:e2:13:a1:f0:1c:c8:32:a6:a0:2c:1a:71:6b:1d:83:
1c:fa:bd:2d:7c:6f:84:65:81:d1:21:87:81:eb:69:32:48:27:
a5:57:a6:8f:b5:43:0c:60:3e:84:63:6e:6c:70:01:4c:a3:8a:
f4:17:00:67:e2:fa:08:f4:e4:1e:b6:e9:51:c3:76:a7:46:c6:
80:50:aa:8c:0e:21:b5:fe:b4:f6:8a:69:0e:14:94:de:b7:63:
d1:e5:ba:e7:17:0f:be:79:04:a6:89:cd:81:e0:7d:6c:9e:6a:
9d:8e:7d:74:07:ba:6f:5d:b6:9d:19:b0:11:17:9a:4a:2f:1c:
f3:20:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:14 2026 by rpki-client