Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: 8GF3cHfsUn9953bl8+qgUYZJSujhq6UvKVKjjFZ/R+k=
Subject key identifier: 6B:4B:8C:25:7D:FC:42:B5:2A:9F:19:06:88:B9:92:6B:32:4B:6A:87
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 01A0E2195809EA86489D3D5D4C4CAAB2E06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 09:01:46 +0000
Manifest this update: Sun 27 Sep 2026 09:01:46 +0000
Manifest next update: Mon 28 Sep 2026 09:01:46 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: OinfM1BdcGec5HOhexb9UJOJ1KARzkJjDEK7z2YlJtE=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:58:09:ea:86:48:9d:3d:5d:4c:4c:aa:b2:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Sep 27 09:01:46 2026 GMT
Not After : Sep 28 09:01:46 2026 GMT
Subject: CN=6b4b8c257dfc42b52a9f190688b9926b324b6a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:4f:05:2a:fa:31:02:da:a4:02:95:8c:b4:
85:aa:92:95:28:6b:d9:2c:82:01:6d:d2:ed:09:d9:
6c:7a:5c:41:20:ba:e3:a8:0f:51:93:92:d9:31:2c:
8d:76:cb:88:c0:7b:9a:cf:12:1c:e9:fd:ff:d8:1e:
c5:cc:04:26:a1:70:05:03:c6:13:0b:93:78:b0:2f:
58:59:3e:5e:ec:3f:06:0e:b0:2c:7e:c7:48:04:1d:
48:b0:97:1e:09:c6:51:b8:d8:9d:0f:da:f0:aa:50:
e2:43:c9:4d:c8:a0:71:8a:bd:8e:53:f4:60:5f:e8:
9d:dc:a0:67:b0:72:54:bf:60:1f:bf:94:79:ca:5e:
0a:45:f2:be:8c:c6:42:64:a7:38:ca:f2:51:fa:14:
85:f9:b3:a5:4c:fc:31:d8:b0:83:30:01:17:79:e6:
06:8c:30:02:6b:ca:2d:59:45:90:c8:c6:8e:76:b0:
c8:9d:42:a6:5f:4e:49:0c:32:9e:89:c3:91:e0:cd:
52:64:9c:f1:d8:9c:1f:04:2b:e4:25:18:44:65:7b:
a3:9a:4a:1d:fb:76:d0:bb:6b:46:3e:15:ca:bf:d0:
f0:5c:a4:f5:d8:74:46:41:40:f0:1b:57:5b:27:16:
3a:f9:e7:2b:cf:74:51:43:e1:bd:bf:34:f8:0c:c5:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:8C:25:7D:FC:42:B5:2A:9F:19:06:88:B9:92:6B:32:4B:6A:87
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:ae:9c:1e:e5:4c:d7:17:c3:c8:38:e0:f8:fb:83:c1:9f:
09:e5:b3:15:c6:0e:22:ef:0b:e7:6f:a1:e3:56:d7:44:c2:31:
1d:9a:14:e8:db:99:18:a6:a2:3f:07:56:46:f4:80:24:c3:1b:
36:c3:0f:9c:e6:23:c2:2c:87:fb:1e:07:31:1f:0a:e9:64:61:
79:dc:da:d2:09:88:12:5c:2e:78:58:52:1b:4d:1e:c0:2d:b1:
24:3e:e5:0c:bf:88:ba:16:08:dd:b7:95:10:7f:3f:4c:d3:b9:
23:a9:5c:7e:87:cd:17:52:e0:8d:13:e1:4e:06:ec:1b:53:a1:
0e:6e:8a:2c:50:04:8c:b2:1d:d5:a2:1c:14:ff:45:47:a0:e5:
1d:cb:9d:2e:9e:9a:60:1e:09:7d:54:53:2d:6b:e0:9d:95:e8:
d1:69:63:7c:6a:34:d7:c3:f3:a6:21:3d:ec:25:f0:f2:75:73:
5c:ca:7d:2d:b4:2f:27:1c:ed:9a:0f:c5:cc:f9:f9:fe:bb:e3:
a2:6e:07:84:9a:0a:3f:7c:a9:25:ea:8e:16:4c:4c:d5:8b:b0:
b6:c0:a4:09:af:c5:2d:e8:cc:7c:13:6e:5f:36:81:fe:2c:5e:
f2:7e:12:10:58:9f:f3:b1:d4:f9:b7:ba:50:38:61:ec:fb:98:
11:f4:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:50:49 2026 by rpki-client