Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: wWJDXkptgBSIythzItGtKQQqFgMAMscvAQTp5zB97Ew=
Subject key identifier: AF:B7:93:FF:44:4B:62:A7:46:F7:35:F8:F6:18:16:89:80:8F:68:AD
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01A0D8DEDD7895460FB81DE737DCC51DAE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 143A
Signing time: Fri 25 Sep 2026 14:01:19 +0000
Manifest this update: Fri 25 Sep 2026 14:01:19 +0000
Manifest next update: Sat 26 Sep 2026 14:01:19 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: OiqFqvIIsqdP5LMk57y6N9jEApVl7IJHlTqaIBKhxpk=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:dd:78:95:46:0f:b8:1d:e7:37:dc:c5:1d:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Sep 25 14:01:19 2026 GMT
Not After : Sep 26 14:01:19 2026 GMT
Subject: CN=afb793ff444b62a746f735f8f6181689808f68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:27:0b:24:c0:48:c5:e0:fa:71:3e:84:f8:
d9:cd:9c:6b:73:6a:4c:5b:01:b7:0d:25:c9:cf:fd:
e4:ec:34:db:f5:29:70:dd:f8:66:81:a6:c6:22:ab:
15:67:55:a4:f4:c4:2d:49:e4:87:12:65:0e:bd:7b:
4d:24:6f:6e:c2:6d:ad:bc:92:44:2d:2a:c9:72:cb:
f1:2a:d1:e0:e6:2e:96:b8:2a:40:50:5d:86:b3:e7:
13:91:e0:bc:e8:a1:46:d3:46:4d:09:48:e2:14:0f:
91:6b:0e:ef:84:a9:b6:d0:67:7e:ff:10:a4:2c:12:
e6:71:be:f9:b4:43:e7:c3:2d:cc:e2:2b:01:2e:5f:
2e:8a:26:bc:e3:4c:15:a9:23:28:c3:bb:0e:85:7d:
9b:04:d5:30:39:2b:b8:20:15:cd:f2:53:8b:a8:c2:
e3:6e:52:eb:f9:ed:b9:dc:eb:9d:09:ad:c9:7e:ca:
55:bc:e5:bd:df:c5:fc:46:51:80:14:05:88:ea:49:
42:98:fd:7b:78:9a:d3:82:57:8e:3e:0d:85:01:91:
99:26:2d:11:7a:ee:a0:21:93:d6:c5:7a:9f:c1:ea:
9a:f9:2f:64:11:5e:8e:2a:72:72:2b:2c:28:e4:cc:
44:18:01:f0:3e:a6:55:d8:cf:36:5e:1b:1c:d9:be:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:93:FF:44:4B:62:A7:46:F7:35:F8:F6:18:16:89:80:8F:68:AD
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:14:af:2c:4a:f2:86:3d:58:a9:af:be:71:a3:31:0b:e7:
29:be:5c:f3:23:4f:3a:7c:23:3b:0a:81:64:32:e6:46:b0:0f:
38:55:5a:41:9b:c5:f2:88:04:60:c7:11:dd:6a:8e:cb:67:4e:
72:6d:3e:3b:11:df:76:0a:bf:1d:bc:50:c0:8b:ed:b3:b1:34:
dd:76:28:0b:c2:44:7e:0b:a9:bf:bc:d6:f6:ba:b7:62:a1:7e:
7b:5c:0c:de:7e:2b:d8:55:2e:c6:d8:6f:d9:fc:0e:4c:72:b5:
5c:8e:98:c0:be:bc:90:ed:7d:25:eb:7b:1d:f0:7f:a8:1c:c9:
c7:32:69:09:29:97:88:29:d7:4a:58:eb:44:3c:c3:f1:a6:a5:
cb:22:11:b1:f0:77:0c:c7:a2:22:0a:fa:a2:d1:d6:7d:1b:54:
d7:41:57:85:e0:42:85:ed:bf:b8:ab:af:da:bc:c5:e1:9d:fe:
b0:49:c5:e6:39:1b:57:18:64:02:11:10:2b:56:91:77:81:82:
82:fc:1c:cf:40:e0:61:28:fe:5f:23:24:54:79:82:f8:24:4d:
59:7b:09:8a:85:0f:52:86:b0:4c:7e:c1:6d:a0:a7:28:25:16:
58:72:0f:bc:8d:26:df:77:16:17:21:62:58:51:f1:64:ea:22:
60:bb:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:34 2026 by rpki-client