Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: cgh2brydnELu8MEmeb843dcJBPdZ4MhGq3JfrmbtdIs=
Subject key identifier: 4D:1F:2C:AD:D7:AA:AB:BC:8E:07:FF:B5:66:A6:46:94:FA:EB:12:B2
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 01A0EEC226E5ECA7C48260FA64A058BEFB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1602
Signing time: Tue 29 Sep 2026 20:01:36 +0000
Manifest this update: Tue 29 Sep 2026 20:01:36 +0000
Manifest next update: Wed 30 Sep 2026 20:01:36 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: TdDMg8+XFGECedcWa0Un4jazlKxVQtmMCxrsQW6PnQc=)
2: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (hash: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q=)
3: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (hash: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c2:26:e5:ec:a7:c4:82:60:fa:64:a0:58:be:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Sep 29 20:01:36 2026 GMT
Not After : Sep 30 20:01:36 2026 GMT
Subject: CN=4d1f2cadd7aaabbc8e07ffb566a64694faeb12b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:be:61:18:69:4b:0a:7e:f2:aa:8d:1d:85:
9a:af:76:78:28:46:96:d6:b6:a6:a1:fa:0e:7e:18:
47:74:14:7c:32:2f:b6:4b:f9:44:d0:73:a2:ac:a9:
56:6e:1b:ea:d6:39:5a:b2:f0:38:ff:11:3e:35:5a:
4d:80:d9:09:71:6a:87:8e:5c:fe:e2:3c:5a:48:cc:
c0:df:f5:4d:ec:7f:93:c4:4a:66:88:14:9a:c3:12:
92:52:fa:4b:b4:e7:ff:00:96:eb:32:b7:7b:3c:93:
94:4a:52:b1:cd:8b:f4:8f:af:f3:b0:61:09:8d:78:
f0:d2:5d:07:27:7f:bd:3c:ee:5f:09:38:ff:74:73:
de:8f:59:06:55:81:76:e0:23:54:1c:3d:f7:18:d1:
c8:91:70:c8:f2:24:fb:5a:51:d4:e3:78:f1:b0:9d:
49:f3:12:e8:55:ef:02:16:8f:47:ff:30:12:28:82:
c5:e7:73:ad:b0:27:18:6b:2a:c8:d1:b7:61:11:23:
90:16:a5:0e:85:3e:20:df:03:7b:22:1e:41:42:10:
15:b6:13:5c:c3:1e:5a:45:02:13:de:91:13:18:39:
8c:e1:e1:04:55:69:31:a4:49:81:0e:84:55:4e:fd:
f6:22:bc:72:44:f0:bd:44:36:2a:22:cc:4d:17:ce:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1F:2C:AD:D7:AA:AB:BC:8E:07:FF:B5:66:A6:46:94:FA:EB:12:B2
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:90:ec:b3:1d:7b:48:23:38:c7:a9:61:47:22:da:30:e9:4a:
b9:83:77:d3:e0:84:80:61:8e:e9:57:0b:47:93:85:21:ff:52:
42:34:be:d5:ba:48:bb:ef:29:4d:b6:c4:50:c5:c8:0a:97:6a:
a9:a6:3b:88:2d:d1:91:8c:d5:bc:0d:47:b0:a5:58:d4:ac:38:
08:67:ba:40:88:a6:65:86:f9:ec:70:1a:38:6a:ab:02:44:d6:
f5:59:95:45:56:44:01:13:cc:59:f4:07:f1:0e:35:b1:96:1f:
57:eb:99:c4:7b:49:5d:51:99:7d:aa:1b:7b:ca:64:7d:4d:c6:
ab:70:c0:65:f2:18:23:2b:95:f7:f1:af:b0:a9:0a:18:ee:6a:
bd:e7:bc:ed:ce:99:22:19:a3:c7:c7:d2:49:76:62:39:ae:8a:
93:ba:37:fc:ca:05:c8:bc:9e:45:52:93:a8:0d:06:d3:46:81:
89:36:22:2f:b6:d4:31:8e:e0:46:9c:52:f4:a4:bd:14:d8:1d:
3a:fb:0d:57:76:75:6c:11:4f:83:b6:b3:2b:77:f6:62:50:b8:
15:27:d2:1a:62:29:d1:5d:26:bf:1c:f3:1f:6a:d9:59:f9:09:
89:5a:d0:dc:42:f0:90:d0:ab:85:50:64:be:70:17:a8:89:e1:
3c:ae:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:46:05 2026 by rpki-client