Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: fnrheC/9S/9AedWReAw/u4vpFOHQnCKAf9jUkuKzsKw=
Subject key identifier: 12:92:24:CB:6C:33:65:68:20:34:1A:32:6F:3A:3C:9B:1E:19:C4:62
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 01A0E69AB412254CE61E4D78983A701E1B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 138C
Signing time: Mon 28 Sep 2026 06:01:33 +0000
Manifest this update: Mon 28 Sep 2026 06:01:33 +0000
Manifest next update: Tue 29 Sep 2026 06:01:33 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: LrXAjTvcX41+9Sl7Y0uv+X9yMefQcbq1cMe+ROc0Yq8=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:b4:12:25:4c:e6:1e:4d:78:98:3a:70:1e:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Sep 28 06:01:33 2026 GMT
Not After : Sep 29 06:01:33 2026 GMT
Subject: CN=129224cb6c33656820341a326f3a3c9b1e19c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:d7:e6:2b:c6:41:ef:dd:02:a4:2e:fa:e2:
26:24:05:36:36:19:0a:cc:9c:1f:65:a0:51:d0:a4:
28:a7:5c:49:46:3f:0f:60:b2:11:88:d0:f7:bc:82:
64:b2:e6:48:aa:bd:65:d5:6d:df:a4:d0:9c:b3:80:
cd:75:60:ad:58:e9:4b:94:c0:88:e1:2e:95:fe:ef:
a1:71:c4:1f:4a:37:e7:3c:37:27:f8:f7:c4:b4:53:
0d:2f:dc:e4:9c:9a:fb:3e:7e:ca:00:a4:fe:1c:9b:
e4:d3:6f:21:02:61:6b:e3:d1:dc:11:5c:b0:72:d4:
c0:9c:4a:b6:6f:c8:a7:a4:6d:6b:38:c5:1b:fb:a6:
df:d0:90:3c:e5:a7:a9:a1:94:17:46:19:fe:b5:ae:
bf:28:19:37:db:e6:c2:2b:39:2f:bd:ab:d2:8e:64:
d2:7f:65:b4:10:b5:eb:b9:b7:89:82:ae:a2:30:ab:
88:f9:43:8e:89:2e:58:31:c3:75:4d:54:9e:3e:42:
b2:c7:5c:87:5d:9b:82:82:ba:52:c9:18:53:04:0e:
29:78:5b:57:3b:16:57:06:2e:17:23:a9:cb:98:42:
b0:80:8e:46:37:a0:78:47:05:f4:7c:32:0d:ad:45:
21:7c:e1:b2:e3:87:da:c7:fd:28:90:ec:0d:29:b6:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:24:CB:6C:33:65:68:20:34:1A:32:6F:3A:3C:9B:1E:19:C4:62
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:58:82:e0:8c:03:89:c9:b5:02:09:a7:4c:40:f8:89:65:
5b:53:72:93:99:a9:99:4a:ba:71:25:f5:b1:e4:7a:5f:ce:db:
81:05:2d:20:d6:88:b4:12:88:c8:c4:06:4b:2a:25:82:39:8c:
75:f7:bf:18:67:95:07:65:5f:d3:9b:96:93:b4:31:9a:0a:f0:
0f:15:de:ac:43:cb:30:2f:49:04:ae:eb:f4:61:4a:cf:f4:dc:
86:a1:f3:ef:59:b9:fb:f1:de:6a:3c:95:fa:82:38:16:55:ca:
70:d9:2f:42:4d:c7:9e:16:92:ab:b2:a5:9f:b6:f6:27:67:0a:
c6:47:72:35:a7:6e:e3:f8:69:2b:86:d6:36:bb:27:79:ed:e1:
4b:09:27:bc:3b:cf:4e:e9:87:0b:d5:67:7b:57:72:11:67:e6:
22:14:78:b6:a0:2b:48:91:16:20:fe:25:7f:6b:6e:55:f3:8d:
a5:65:57:28:49:01:15:b5:67:7c:1a:d1:88:de:2c:78:bb:36:
60:f0:c2:2d:8d:59:74:7d:ae:28:71:6f:7c:a3:94:3c:bf:d2:
81:fe:47:b1:75:f6:80:5a:09:91:74:7d:d9:28:2e:4c:7d:c1:
25:5d:24:e7:00:f8:82:46:f7:5a:3a:68:4f:1e:77:68:d4:f1:
40:65:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:12:54 2026 by rpki-client