Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: owPWKxz9uUinGJ+C03TTu5JenPAWknqmPu5tDGI97Cg=
Subject key identifier: 55:9E:63:53:0D:89:55:E7:EE:3C:87:B9:63:2B:3F:D7:1F:F9:37:1A
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 01A0DCBB6CC256EB96EFD822F819A9DD6043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 08:01:05 +0000
Manifest this update: Sat 26 Sep 2026 08:01:05 +0000
Manifest next update: Sun 27 Sep 2026 08:01:05 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: nfHrvWqP+R2oSHa556ahAfmSJbMWh2sZ6lmzZvakHMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:6c:c2:56:eb:96:ef:d8:22:f8:19:a9:dd:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Sep 26 08:01:05 2026 GMT
Not After : Sep 27 08:01:05 2026 GMT
Subject: CN=559e63530d8955e7ee3c87b9632b3fd71ff9371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:15:be:39:0f:1f:17:18:02:a2:fc:fe:ea:
82:64:6f:66:a1:07:6c:3c:0a:0c:08:78:e7:7d:f5:
ec:e7:7b:72:04:0c:7c:e9:42:e9:20:5c:7d:cd:a4:
c5:de:af:6a:00:55:54:74:29:a1:a7:7f:5f:32:cc:
b1:33:99:44:79:00:ae:4c:04:be:7f:c7:69:e0:d0:
3f:ff:e8:9f:e3:c4:b9:f0:2e:47:46:59:3f:df:ee:
5a:1a:29:20:7d:6b:3c:7f:bd:a5:3d:1f:92:28:fc:
79:16:82:3f:d7:ee:f6:e6:3d:3a:4c:a7:db:ac:8f:
ae:89:a9:5c:1d:0c:73:a8:6c:07:e4:0b:a6:ea:43:
7a:c6:87:5c:ac:00:46:ce:21:cb:f2:a6:46:4e:a3:
86:30:67:fc:c6:92:a0:fb:40:ca:04:0a:20:a8:a5:
a5:62:ed:d4:ae:97:cc:50:55:be:0c:0d:55:55:5b:
ad:6a:a3:50:25:bb:77:0c:30:a4:59:7e:fa:14:6c:
32:4a:e9:c5:4f:e0:0f:56:22:a2:99:23:9d:27:25:
e7:2e:2f:39:a6:e2:69:7a:b8:5e:6d:4a:05:91:ed:
e6:0a:1a:52:51:64:33:1e:4e:22:37:f6:28:7f:c2:
15:2e:23:89:1a:1b:2b:2e:e7:4e:d1:e3:86:70:f3:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:63:53:0D:89:55:E7:EE:3C:87:B9:63:2B:3F:D7:1F:F9:37:1A
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:87:73:48:c5:c4:e5:e6:9e:cf:24:9c:2e:01:1c:67:c4:16:
3a:52:8b:ec:3e:7d:80:92:13:8c:93:3c:5b:7e:18:0a:f1:e2:
fc:f7:a7:bd:2e:2f:31:9a:3d:3d:ae:ab:53:2e:7f:3d:e5:d0:
57:b5:17:42:f2:43:81:9c:9d:95:b0:56:00:67:4f:bd:90:16:
9f:93:21:7a:2c:c8:b6:90:69:e6:00:61:18:44:aa:45:c7:3e:
71:81:48:e5:0c:94:b0:1c:14:a5:50:17:dc:8c:47:c4:b7:89:
9c:ae:02:9d:50:0e:04:db:21:ec:f2:8c:1c:9f:a7:cd:0b:83:
8f:85:25:07:01:58:f5:41:27:36:e6:d2:cb:23:6f:08:bc:f1:
8c:64:46:9c:3a:9e:2d:3e:f0:70:94:bc:3b:e2:35:dc:06:ab:
2c:54:e9:71:7b:af:cf:a7:33:0f:b9:08:f8:67:1b:03:13:fa:
81:53:ea:8c:d0:2d:69:0a:69:cf:65:7f:58:65:22:e0:04:2b:
12:09:6c:7d:22:31:5b:52:69:88:30:79:84:fe:e5:99:58:3e:
34:ce:f2:e7:ea:cf:13:92:e2:06:a8:59:15:fe:2b:c8:9b:6e:
ce:77:ef:65:ff:45:c8:38:75:6d:b5:e1:fc:47:29:7f:77:5a:
15:34:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:05:54 2026 by rpki-client