Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: NzXUcVX+uGyWFUHo3KVYs1if8E69GJnKEKH3shVL8jA=
Subject key identifier: 8F:77:15:37:7F:EE:BE:E3:09:53:BF:5E:C4:D1:63:05:83:76:14:9D
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01A1DFF11F327631577915BCF69888BFEC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 091C
Signing time: Sun 15 Nov 2026 16:01:23 +0000
Manifest this update: Sun 15 Nov 2026 16:01:23 +0000
Manifest next update: Mon 16 Nov 2026 16:01:23 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: AA1Ci/LumrtrHMSTgNoVZHIjQHb+jm0u/4we0hINKB8=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:1f:32:76:31:57:79:15:bc:f6:98:88:bf:ec:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Nov 15 16:01:23 2026 GMT
Not After : Nov 16 16:01:23 2026 GMT
Subject: CN=8f7715377feebee30953bf5ec4d163058376149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:82:b1:0a:a2:9e:63:60:73:f4:1d:b1:d7:
2d:c8:db:19:be:04:9a:41:d3:e0:56:de:6a:78:c2:
c0:64:26:35:ed:1b:0a:46:52:d9:7a:48:70:8a:bd:
af:73:4f:71:9d:e6:26:e2:ae:ac:5b:0a:79:4b:f4:
e3:27:2b:6f:39:49:9d:ae:67:4f:a3:43:e3:08:aa:
98:c3:05:ea:1a:b8:3f:c1:5b:2b:21:b7:c7:2e:ae:
2a:60:54:56:7c:3a:f8:cc:b5:e6:e2:a4:c7:35:d8:
26:a4:b3:d4:10:ba:2f:74:38:cd:6c:25:02:4c:49:
60:cd:12:2a:c9:b5:b3:72:e1:4b:3d:83:bd:e6:34:
60:e0:8c:b0:4a:bf:a4:88:c6:85:99:83:65:b9:fa:
26:23:17:ae:e3:81:0b:60:4c:ef:fa:be:ff:2a:0a:
74:79:54:59:a8:ad:1b:a0:78:48:1b:62:a0:d5:d7:
40:3e:3b:f2:26:fd:cf:7b:d1:cb:9d:80:d2:b7:03:
91:45:10:6c:f9:7a:b0:1b:4e:8a:1e:10:cf:8a:9a:
05:0c:60:76:ad:e3:f8:d2:d8:a1:4f:8c:ab:ae:c5:
00:dd:78:5e:2b:38:f7:f1:18:7f:26:b5:60:11:d2:
3d:b3:dc:15:04:51:09:15:5f:8c:29:70:0d:e8:e0:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:15:37:7F:EE:BE:E3:09:53:BF:5E:C4:D1:63:05:83:76:14:9D
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:28:90:0c:60:39:ed:aa:e2:ad:f6:bd:64:9e:52:92:fb:
b8:4b:a0:8d:ae:dd:b9:ec:b9:e9:ff:22:4a:2f:18:ca:ab:1c:
5c:f4:3e:53:0e:2e:20:92:a7:9f:b3:e3:f3:34:cc:d6:6a:95:
6f:85:81:11:da:eb:80:e4:34:09:ac:50:9c:8f:a9:3a:d3:f7:
8a:60:96:1e:3e:d5:aa:f1:16:39:8c:6a:b2:13:40:ee:63:f3:
a9:90:a5:f9:11:3d:ca:56:7a:cf:aa:ed:b0:b2:90:b4:87:55:
96:55:2d:c4:ef:08:1b:32:dd:b2:c7:d4:da:4d:11:c6:a1:5f:
9c:f9:ea:7f:3c:86:c4:d0:70:f8:96:16:e3:46:8d:9b:14:bc:
7e:32:d0:5d:e4:7b:8c:59:d3:f0:10:6b:18:53:a6:c1:cb:10:
a3:12:a9:6d:53:21:3f:49:50:64:0f:d1:d2:ef:10:04:22:a5:
06:51:0f:6e:53:8f:32:18:3e:5e:1c:43:c7:a4:3e:06:0e:4c:
6a:29:75:d2:cc:95:12:aa:34:4c:63:2a:79:b8:1d:ec:23:b8:
89:32:1c:ba:7e:f4:5d:0f:8a:9a:0f:a8:a7:36:af:22:75:13:
f4:18:f3:9c:65:19:3e:47:a2:37:b5:a6:a2:a9:cc:24:2c:5a:
13:48:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:58:01 2026 by rpki-client