Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: nfXYPLrFKmCtd91/ydOKaosjk+GBW66avYPbxyOgYco=
Subject key identifier: 0C:16:72:81:67:FF:27:76:36:BB:03:CC:D8:5C:09:18:EF:50:A5:E1
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01A0CB59B82F6E6F19480064EF4E3BDBE359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 23:00:49 +0000
Manifest this update: Tue 22 Sep 2026 23:00:49 +0000
Manifest next update: Wed 23 Sep 2026 23:00:49 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: h+0GjPXZhtBJJsc8xhU6Nnb5A5mCHQqQnpBSKU+agLo=)
2: KKHPIMDT8NiUrfJyp3qumk7jzz0.roa (hash: F9DAPFB3HYHVOGcoMRsEePDFxOqD9/ROl95gQQnRzvU=)
3: OZy02Cq16jIMB_FoJZn64VS22JA.roa (hash: nKj4XdLVyOxWe/dNxJ4EoTYTSII+Va1gBKibKO7YLnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:b8:2f:6e:6f:19:48:00:64:ef:4e:3b:db:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Sep 22 23:00:49 2026 GMT
Not After : Sep 23 23:00:49 2026 GMT
Subject: CN=0c16728167ff277636bb03ccd85c0918ef50a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:0f:aa:ba:a8:be:ef:be:a9:b6:2d:bf:3e:
ef:5e:f3:6a:39:59:86:c0:e5:50:61:19:3c:a2:36:
01:1f:f5:28:d9:d6:15:96:f3:9b:8e:82:9e:8f:24:
ea:29:a8:a7:14:85:e6:b9:66:c3:f1:08:7e:b7:66:
4b:75:d5:59:e8:31:0a:ff:6b:aa:fc:41:84:82:64:
c8:dc:ea:4d:cf:3a:e8:70:0b:90:d4:6d:71:65:f2:
0e:e8:84:63:c1:1a:60:29:a1:51:31:1d:ca:10:bb:
96:a7:c1:1a:55:4f:60:29:f2:56:5b:05:e5:b6:39:
29:f3:2d:bf:16:d6:23:72:19:e0:48:e9:22:fb:2e:
10:b5:c6:71:78:0b:b0:bb:7b:1d:78:c9:e3:0d:95:
64:c9:e8:8f:e6:61:08:e5:79:1c:1f:15:5d:66:52:
9e:fa:15:db:89:69:23:ae:2d:13:6b:0d:f8:a4:e6:
32:0b:38:c4:5b:27:3e:cc:e1:7b:8a:da:82:45:fd:
9f:f0:f1:9a:92:c5:f2:93:af:d6:e6:c8:94:0b:19:
c5:1b:c1:2d:7b:c3:90:a8:1f:11:70:e2:54:73:9d:
98:71:ad:63:b4:d1:07:4f:f6:14:8e:93:1e:5f:9d:
13:61:33:48:6d:c7:9d:2e:f1:8d:ba:76:ae:b1:25:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:72:81:67:FF:27:76:36:BB:03:CC:D8:5C:09:18:EF:50:A5:E1
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:0b:d4:6d:9e:a2:06:e3:21:00:16:38:53:19:44:a0:66:
3a:8d:5e:9e:d0:6f:4e:3f:8d:c6:81:ea:9c:83:66:88:f6:e1:
ea:ca:70:9a:5a:f7:18:fd:0f:9b:b4:d8:fd:99:af:7f:4f:1f:
2a:52:d7:b0:ff:f4:e4:7a:aa:fa:e6:12:c4:d6:67:35:57:aa:
a8:b8:34:d1:80:d5:ff:ec:9c:50:42:44:c0:80:95:ac:77:76:
74:3d:ba:09:ee:42:bb:68:9c:c6:18:6e:6a:22:a0:e8:d6:01:
45:27:b2:6a:61:10:18:40:dd:46:1b:d5:22:6c:e3:06:f0:5b:
5e:bb:74:57:0c:37:29:06:e8:7f:08:b1:6a:86:d9:1e:9f:8b:
ee:55:e6:40:19:52:4d:06:7c:01:54:66:ae:45:0e:41:f3:95:
d5:16:dd:87:7b:e7:78:f7:a1:60:00:e1:69:f8:b4:0c:62:f7:
7e:06:cc:86:20:32:70:e9:58:b4:b1:41:e2:e3:19:31:1a:36:
70:1b:11:8f:97:8c:34:cd:0b:db:60:82:9f:a6:04:33:cf:ca:
20:a3:89:23:db:a3:84:a7:54:0d:43:ba:62:5c:95:a1:40:36:
79:b8:1c:5a:95:8c:4b:91:a1:c4:23:63:fe:b9:16:8d:70:33:
e5:03:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:08 2026 by rpki-client