Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: gAOmHNyMEzNCindBrvDUsIr8kvzJ0NfhZ3GKA2GICPU=
Subject key identifier: D0:45:0A:73:24:D5:2B:3F:36:D4:FE:87:17:72:75:2C:C9:A3:6B:80
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01A0D7CBDBB5BF5FF0EAA88CF3423EC5D75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 09:00:56 +0000
Manifest this update: Fri 25 Sep 2026 09:00:56 +0000
Manifest next update: Sat 26 Sep 2026 09:00:56 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: OZ5bbaKpqHuJyoYREm51EnyIFFNs2ZJp6C3xPmcGpv8=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:db:b5:bf:5f:f0:ea:a8:8c:f3:42:3e:c5:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Sep 25 09:00:56 2026 GMT
Not After : Sep 26 09:00:56 2026 GMT
Subject: CN=d0450a7324d52b3f36d4fe871772752cc9a36b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:cf:4b:eb:3d:f0:e4:d8:2c:fb:23:7e:5f:
33:cb:d6:37:47:11:e0:73:70:e7:bb:7c:0c:7d:02:
8f:33:ec:2c:f6:a5:2d:5d:6a:39:02:87:f3:ee:c3:
ee:97:b2:c9:60:45:0e:d3:c4:dd:85:ee:00:f7:f0:
58:91:3d:18:1c:9a:ed:dd:73:e6:3c:fd:c7:46:f4:
2c:56:07:05:ce:76:13:a8:15:2e:b8:13:5b:e8:71:
91:21:ab:4e:89:53:9c:e2:cf:f8:4a:35:85:ba:ba:
fd:95:ff:50:25:9d:d0:a5:3a:ac:73:2b:62:b8:43:
a9:3a:87:1d:45:ee:bc:99:2d:96:b6:15:7c:ca:55:
45:f6:5d:10:b6:2c:1b:61:92:6c:98:58:da:ef:77:
ca:54:b4:0b:ce:d4:f5:9d:4d:5d:ed:90:9f:08:0d:
f8:8d:ce:2e:bf:e6:29:57:f6:dd:ad:af:8d:88:f9:
5e:85:81:ef:78:e9:da:72:6d:95:76:3d:80:5c:eb:
22:c3:ec:37:01:b3:4d:41:b7:6a:9a:25:a9:bf:21:
25:ba:0e:8b:cc:9b:d3:a7:c4:7e:6a:c2:82:74:96:
9c:0f:8e:17:5a:48:87:4e:2b:ef:43:5b:f9:3e:b0:
77:f7:ed:d2:cc:53:de:4b:7f:03:75:c8:32:6c:f1:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:0A:73:24:D5:2B:3F:36:D4:FE:87:17:72:75:2C:C9:A3:6B:80
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:37:72:8d:4b:97:71:f5:9c:bc:aa:86:1d:63:f0:9b:c2:1c:
8b:b6:b8:d1:90:9c:0c:32:e1:c6:16:38:fa:99:f0:4d:87:89:
dd:d3:32:72:77:66:21:1b:83:0e:a0:e2:da:77:4d:22:5d:e5:
91:38:03:00:57:f4:c8:cf:d4:e7:c9:77:03:a5:cd:8c:84:71:
c6:e2:70:78:dd:3e:0f:dc:09:8a:51:90:7d:c6:bb:e8:93:eb:
b6:a8:4a:ea:8b:a9:b9:2a:f5:a1:50:ad:69:e9:0a:70:4e:e5:
00:1e:60:49:2b:ac:db:58:6e:f9:88:22:ad:a5:d4:f6:29:35:
36:c7:22:42:30:e1:04:34:62:f8:2c:cf:5a:bd:0f:68:a5:08:
0f:44:89:02:83:e4:3a:fb:c5:ed:a8:d5:2d:f4:3d:0b:37:69:
23:47:b6:f3:bb:94:55:1c:5f:8e:1b:89:60:79:bc:a5:9a:9f:
0e:91:40:4d:b2:72:c5:31:08:8a:7b:76:36:f8:b5:34:46:9c:
aa:e5:f1:e9:60:a9:f0:8d:09:b0:29:0a:92:58:d1:34:48:10:
16:c0:f2:43:d6:99:b1:62:5c:cc:d0:66:3e:e3:10:1b:72:5f:
80:fb:ef:fe:81:55:9a:40:3c:5a:4a:22:0a:8f:80:33:3e:a9:
8c:b8:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:13:30 2026 by rpki-client