Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: Y3QxPKYV+VOkuNXQENHbL5sESwL3RerwJEPVpSN/FJ4=
Subject key identifier: FD:07:D6:35:79:05:6E:AB:66:FF:53:CA:1B:04:06:E9:DE:5C:2F:4E
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 01A0DD97AF31E49601C1806DAF54048336D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 12:01:40 +0000
Manifest this update: Sat 26 Sep 2026 12:01:40 +0000
Manifest next update: Sun 27 Sep 2026 12:01:40 +0000
Files and hashes: 1: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (hash: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=)
2: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (hash: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw=)
3: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: /LCiToDZmu73YX7BgOXqV7i50CXD/wboyIr+c/DofHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:af:31:e4:96:01:c1:80:6d:af:54:04:83:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Sep 26 12:01:40 2026 GMT
Not After : Sep 27 12:01:40 2026 GMT
Subject: CN=fd07d63579056eab66ff53ca1b0406e9de5c2f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:e5:13:3a:40:72:0b:52:40:e4:da:bc:90:
86:93:54:06:36:ac:cc:02:be:7c:57:16:3e:f6:16:
30:0c:97:f4:fd:7a:e8:3e:2c:cd:af:32:b9:52:88:
ee:6f:a6:f4:8b:32:45:ac:42:61:f9:5e:a4:3d:d3:
02:3f:9c:7b:18:0e:14:de:8a:28:25:00:54:86:f7:
b8:d0:fb:35:a1:f3:6e:3c:e3:93:b0:e0:3f:fb:90:
8d:d2:e7:30:39:94:e2:2d:2d:2a:90:74:8a:e9:4b:
a0:9a:18:23:7f:40:16:2a:1c:58:db:98:99:91:c3:
43:5e:61:b6:c1:dc:67:85:d0:84:77:da:50:15:83:
36:72:80:97:0b:0a:0f:07:e5:74:f4:46:a7:3e:9a:
98:a1:1f:dd:e4:10:f0:59:0d:19:66:72:ce:21:ac:
f2:54:c1:d0:a7:30:18:2b:c5:8d:2d:a5:66:74:ed:
e7:2e:3d:67:63:df:a8:32:aa:22:e7:69:b9:34:a0:
8f:9b:3e:2c:b0:b0:e6:e9:33:ab:5b:d0:2e:e3:d3:
ce:04:64:7c:d2:7c:35:71:b3:c6:0b:d9:61:7d:d0:
39:63:9b:fc:85:a9:e1:17:50:83:cf:bf:e4:38:21:
73:a4:06:0e:ef:a1:be:1b:1d:50:b8:87:33:82:be:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:07:D6:35:79:05:6E:AB:66:FF:53:CA:1B:04:06:E9:DE:5C:2F:4E
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bc:94:9e:d9:22:a2:3b:2a:a0:63:c2:34:be:3f:6e:9e:1d:
93:7f:c3:e4:7c:8f:28:c7:b2:0d:e1:50:e1:82:6e:b7:b9:6e:
6a:99:85:5c:f4:ef:78:08:3b:e1:09:ab:11:70:db:8d:f5:87:
8a:dc:71:8a:58:6e:41:32:bb:48:1f:52:fa:a7:6d:46:87:56:
a3:3d:c3:0e:85:b9:2f:e2:1b:59:38:fb:5f:f6:44:31:85:a7:
ca:90:ff:02:a6:a6:6a:dc:d6:dd:b8:08:c7:90:3e:eb:75:8a:
0e:b6:d1:2f:15:c8:55:2c:c9:8b:35:fb:33:fd:04:75:3a:52:
a4:94:5c:28:4a:35:e4:9b:a8:00:1c:a2:75:d5:fd:c8:b6:10:
d2:04:eb:45:c8:21:3f:68:09:21:fa:a8:83:a5:64:55:d6:31:
4d:b2:db:4e:c3:54:da:55:7d:ab:dc:38:1c:e6:dc:a9:ed:82:
9a:53:71:29:50:c4:cd:f0:80:07:38:46:13:f6:e3:e8:7c:9a:
e6:2a:eb:ad:d0:63:c5:2f:b6:c1:a0:83:52:4e:bd:96:92:09:
3e:b9:89:ee:25:98:d2:52:53:42:69:aa:c8:36:fb:d0:b1:54:
0a:84:2a:9e:bb:99:12:ee:18:69:dd:64:a2:9a:97:10:de:92:
ca:90:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:34:31 2026 by rpki-client