Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: N2R8pEefluq7rh1OxQQayILr6DntSTVnKiqmocRi0yg=
Subject key identifier: 71:92:F6:56:DD:45:77:1D:1B:46:5C:75:85:75:81:CC:9B:C9:5B:C3
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01A0CE5A3997827A85773E13A52342B19CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 13:00:14 +0000
Manifest this update: Wed 23 Sep 2026 13:00:14 +0000
Manifest next update: Thu 24 Sep 2026 13:00:14 +0000
Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: afYKNp3DjvQt9NsTRnBuiufaWF5cOWEQlpAdtdKGULw=)
2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:39:97:82:7a:85:77:3e:13:a5:23:42:b1:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Sep 23 13:00:14 2026 GMT
Not After : Sep 24 13:00:14 2026 GMT
Subject: CN=7192f656dd45771d1b465c75857581cc9bc95bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:85:eb:e4:cb:e1:d9:02:37:cc:ab:77:78:
3a:52:af:e4:5c:4f:48:d5:e2:75:50:2f:65:fd:9c:
79:13:7c:4a:a3:02:dd:28:62:70:f4:b5:83:f5:1a:
f8:57:14:e2:21:93:02:c6:99:c2:57:7f:02:53:b4:
5b:e1:16:6a:62:0c:94:0d:81:76:e7:f0:4b:32:cb:
5e:37:a6:b0:ad:7e:3e:97:fe:20:37:3d:3c:b2:cc:
98:55:12:a1:af:70:bd:0d:75:92:5f:37:21:80:6f:
72:fc:3c:9a:59:59:ab:7b:d7:16:c2:d3:6c:72:08:
94:46:a2:cc:59:a8:ce:35:db:eb:6e:d9:1e:59:ba:
73:46:5b:fe:60:76:d3:e1:a2:19:57:15:20:53:06:
04:94:ce:7d:c5:37:f1:7a:8f:e7:9c:2a:cb:a5:f8:
20:75:05:ef:ef:45:eb:e5:fa:8f:e6:b9:49:75:d2:
be:2b:db:89:95:9d:b7:2c:ff:c2:8e:5f:e0:05:b6:
a8:fd:8a:c4:db:f7:4a:b1:f8:65:49:45:49:97:99:
28:b5:2e:98:78:9f:78:c4:e4:06:a8:2f:40:56:fb:
ff:c1:a8:8c:6f:98:f2:6a:06:1d:94:f7:b5:68:df:
66:e3:d6:1b:4e:a3:05:71:88:4a:fd:77:c9:ea:ec:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:F6:56:DD:45:77:1D:1B:46:5C:75:85:75:81:CC:9B:C9:5B:C3
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ef:c5:ad:5e:00:27:84:7b:37:19:0f:5b:87:cc:ba:f1:9b:
18:a7:e7:d2:cf:ff:7a:e0:b4:ab:9c:d9:14:3e:bf:5f:1c:97:
15:fa:30:2d:73:fd:72:f8:59:e1:0a:bc:a0:30:f2:05:2f:43:
57:51:ae:5e:03:2c:06:9c:f0:cf:d3:27:e8:02:60:51:bc:d1:
d1:99:73:95:7a:5e:8a:fc:1a:cf:9b:59:0c:d7:d5:30:89:53:
6b:f0:c3:71:89:d3:55:3a:4a:99:c0:e2:bc:2b:26:fc:e1:19:
05:81:dd:44:c2:8c:92:80:00:f3:e5:40:2e:24:98:5b:74:96:
c6:c3:d5:68:c7:3a:ce:3f:9b:d3:3d:75:a8:0e:d3:5f:fc:a3:
07:b0:25:b6:81:95:0d:0e:48:bf:7c:a2:ac:71:a4:0b:30:24:
2f:7a:84:ad:95:2d:bb:f6:75:5c:21:6d:4f:f9:d7:3f:0f:c3:
fc:a2:a0:d5:6d:34:6a:11:60:8c:42:98:71:2e:f2:50:37:2c:
66:75:cc:9e:1c:1c:aa:2e:56:f2:13:42:ca:5e:d0:4d:5a:24:
95:ee:e2:9e:1e:64:8f:24:49:6f:c4:5e:55:14:dc:f9:8a:b4:
03:cf:6f:39:55:9a:3c:03:03:69:f4:9a:6b:f4:78:1d:3e:e5:
e5:d2:ef:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWjmXgnqFdz4TpSNCsZyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0
NDVmYmUwHhcNMjYwOTIzMTMwMDE0WhcNMjYwOTI0MTMwMDE0WjAzMTEwLwYDVQQD
Eyg3MTkyZjY1NmRkNDU3NzFkMWI0NjVjNzU4NTc1ODFjYzliYzk1YmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYqF6+TL4dkCN8yrd3g6Uq/kXE9I
1eJ1UC9l/Zx5E3xKowLdKGJw9LWD9Rr4VxTiIZMCxpnCV38CU7Rb4RZqYgyUDYF2
5/BLMsteN6awrX4+l/4gNz08ssyYVRKhr3C9DXWSXzchgG9y/DyaWVmre9cWwtNs
cgiURqLMWajONdvrbtkeWbpzRlv+YHbT4aIZVxUgUwYElM59xTfxeo/nnCrLpfgg
dQXv70Xr5fqP5rlJddK+K9uJlZ23LP/Cjl/gBbao/YrE2/dKsfhlSUVJl5kotS6Y
eJ94xOQGqC9AVvv/waiMb5jyagYdlPe1aN9m49YbTqMFcYhK/XfJ6uxPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGS9lbdRXcdG0ZcdYV1gcybyVvDMB8GA1UdIwQY
MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt
MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5
LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO/FrV4A
J4R7NxkPW4fMuvGbGKfn0s//euC0q5zZFD6/XxyXFfowLXP9cvhZ4Qq8oDDyBS9D
V1GuXgMsBpzwz9Mn6AJgUbzR0ZlzlXpeivwaz5tZDNfVMIlTa/DDcYnTVTpKmcDi
vCsm/OEZBYHdRMKMkoAA8+VALiSYW3SWxsPVaMc6zj+b0z11qA7TX/yjB7AltoGV
DQ5Iv3yirHGkCzAkL3qErZUtu/Z1XCFtT/nXPw/D/KKg1W00ahFgjEKYcS7yUDcs
ZnXMnhwcqi5W8hNCyl7QTVokle7inh5kjyRJb8ReVRTc+Yq0A89vOVWaPAMDafSa
a/R4HT7l5dLvIg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:03:14 2026 by rpki-client