Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: ep1+Ud06KLCmiTFXztycUiSLZqyv3OzdoewDZe+29og=
Subject key identifier: D3:77:9E:CE:AA:CA:B1:E2:9B:9D:26:B1:02:DE:1A:58:8B:0B:99:76
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 01A0DACD15AAF7E967CEF507AF27798E06E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 15BB
Signing time: Fri 25 Sep 2026 23:01:08 +0000
Manifest this update: Fri 25 Sep 2026 23:01:08 +0000
Manifest next update: Sat 26 Sep 2026 23:01:08 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: tYhWPjzcDqzykxz5EvegbsqQCqptCg5VB4dQyv0SnBg=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:15:aa:f7:e9:67:ce:f5:07:af:27:79:8e:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Sep 25 23:01:08 2026 GMT
Not After : Sep 26 23:01:08 2026 GMT
Subject: CN=d3779eceaacab1e29b9d26b102de1a588b0b9976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:31:da:a7:a5:ef:37:3c:81:74:a0:75:47:
f4:c5:96:4a:ba:7b:60:1e:11:64:4c:70:90:1c:40:
b5:d3:d1:7b:32:52:f9:84:23:80:09:7b:a0:84:bd:
1d:35:f5:d0:d5:05:f2:d4:4d:38:a3:06:2e:82:4a:
96:96:3f:4a:c9:66:98:f5:76:43:bc:8c:a2:1a:ae:
0e:74:e8:b5:f4:04:49:a9:ac:d2:fd:e4:4a:13:36:
1d:9b:ee:2b:bd:d2:df:a2:66:45:37:a7:85:92:b6:
53:e6:1b:ef:2d:07:71:cd:f7:15:34:af:8a:c9:92:
91:84:45:05:6d:c5:9d:9f:f8:77:31:f6:8f:ff:10:
6c:eb:30:e4:45:0b:5f:11:49:33:0c:14:d1:c3:85:
93:fb:2c:74:3e:db:76:85:70:a2:e5:f0:8a:24:e5:
ad:6e:83:03:81:ff:45:96:bd:2a:d0:ad:d1:8b:0a:
14:67:aa:9b:e3:71:ef:08:b6:fa:33:f2:66:58:7b:
e1:68:74:bd:26:c2:53:17:b0:22:90:bb:fe:21:52:
1f:09:ed:0c:53:4d:b8:14:44:19:2f:af:c3:e6:d5:
50:0b:70:4b:70:ce:a6:47:5e:a1:5b:b9:a2:d9:bd:
12:19:fe:b7:4a:be:f2:94:f7:28:ac:d6:d9:54:79:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:9E:CE:AA:CA:B1:E2:9B:9D:26:B1:02:DE:1A:58:8B:0B:99:76
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:bb:62:c9:d8:3b:9a:09:3b:40:10:6d:e8:c3:06:2d:b9:e4:
92:ec:be:5f:45:38:9f:7d:57:b0:70:1a:a0:49:17:d5:8e:c4:
ef:ea:70:da:20:4d:bf:03:81:d0:d7:35:4f:92:25:5e:85:2f:
a6:2d:e9:24:18:99:74:8f:ef:f1:0a:c7:93:40:54:a5:18:22:
a0:d8:9c:89:2c:91:51:b4:f2:d4:a1:a4:ec:d6:26:0f:42:e3:
ae:cf:3a:77:09:f5:f8:f6:6c:d9:9c:e8:c8:1a:ce:bc:1f:fb:
c4:3f:7c:fa:4f:79:9a:7a:89:8f:00:ef:bd:7d:f5:11:5d:40:
e4:10:28:0f:26:21:79:25:b1:b5:1c:41:b2:c6:1e:fd:cc:2b:
a5:db:39:6a:13:3a:27:a1:9a:0f:4d:2f:10:8d:06:85:08:88:
a2:5e:ad:02:45:51:e2:ab:89:a3:b2:7d:4b:14:53:e4:5b:83:
1b:61:32:96:df:f2:53:bd:ef:a6:06:4f:cd:5c:12:a5:af:d6:
7a:ae:0f:c8:e9:bd:9e:db:6a:36:87:c4:63:e4:4f:fd:9d:5f:
67:f8:c5:1c:d6:f2:5a:e1:f8:2b:2e:11:35:5e:84:9b:36:fa:
28:db:3b:b9:9a:62:62:f9:87:7a:c5:e6:77:bf:f4:d1:17:78:
c3:38:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:25 2026 by rpki-client