Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: xrwA3wdetONv37NnHEFwr+Y/0Cb94qVMtsjTpr4kFiY=
Subject key identifier: FE:5E:8E:35:10:1F:2A:10:83:40:B2:D1:8E:00:5D:F7:DB:D9:C4:6A
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01A0D94C667327165A5BC90070BC111B29F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0894
Signing time: Fri 25 Sep 2026 16:00:57 +0000
Manifest this update: Fri 25 Sep 2026 16:00:57 +0000
Manifest next update: Sat 26 Sep 2026 16:00:57 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: qOXT74MZyib/zC2oMdQM3HdyCwbVUYeGuqdce0i7u3U=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:66:73:27:16:5a:5b:c9:00:70:bc:11:1b:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Sep 25 16:00:57 2026 GMT
Not After : Sep 26 16:00:57 2026 GMT
Subject: CN=fe5e8e35101f2a108340b2d18e005df7dbd9c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:4d:a3:02:66:d0:5a:95:25:42:7d:0c:01:
ff:46:e7:9d:63:2c:8b:62:50:9a:90:14:cc:c3:99:
17:dd:2f:d4:a4:50:c8:a4:a5:e7:6e:31:90:d9:ee:
74:17:cc:4b:a7:ae:98:07:2f:90:f0:7a:a9:05:32:
bf:e1:0d:91:c8:5d:f2:b3:3f:56:2f:24:5f:e8:0e:
27:3c:7a:03:7b:61:d5:2f:f1:ec:1a:8d:6c:56:67:
8f:14:5f:7e:d4:71:7a:ba:2c:f0:cb:d5:0a:64:35:
08:b3:ad:9a:75:b6:d3:77:76:fe:54:d7:ea:ba:50:
22:ff:09:a9:65:4b:00:5b:39:b2:68:45:93:a5:27:
28:c8:6d:22:20:50:0a:54:b9:23:cc:cb:7a:95:48:
39:a0:82:1f:c7:e5:fd:74:12:9f:0d:bf:7b:f5:13:
95:36:4e:a8:b8:c6:60:41:83:a7:f3:fd:22:42:bc:
70:89:29:05:34:ff:a1:d9:a4:51:c9:c5:0b:02:30:
50:3a:2a:d3:09:bb:92:e2:bb:28:b5:ad:ac:4a:b6:
3a:a3:90:15:52:30:ce:0b:9a:d9:47:96:b4:35:5f:
87:c9:7f:78:66:d2:e4:3f:d8:e0:43:35:b9:34:c6:
db:d5:b0:aa:d3:50:3f:6b:b8:20:b2:19:ec:55:a1:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:8E:35:10:1F:2A:10:83:40:B2:D1:8E:00:5D:F7:DB:D9:C4:6A
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:a1:8f:75:30:3a:3d:85:8a:dd:08:8d:01:80:69:92:62:
d4:f6:87:3a:ca:7a:5b:dd:e1:14:59:84:ea:b4:a0:e6:bb:52:
85:5e:92:0c:bc:0c:78:10:7c:e3:96:f9:85:12:d1:c1:0d:20:
60:4e:19:30:0a:37:8b:65:5f:94:53:6b:b2:a8:99:6e:8d:3b:
d0:fb:2b:c2:91:3d:f8:de:9d:8d:2c:3c:c6:4a:94:cc:bb:46:
0a:89:d3:34:89:8a:4a:8e:96:10:e5:34:40:ad:1c:eb:e0:a4:
39:5c:af:2b:5c:88:61:85:82:c0:d3:b9:c6:5b:b1:fd:d6:60:
0c:3a:f8:b3:a5:22:ee:e8:d4:7c:82:53:b7:b1:e0:9d:1f:15:
46:eb:5a:eb:24:2f:a5:a2:8d:c2:7c:ca:8e:a1:c7:59:e7:6a:
08:48:fd:ce:79:3e:b4:1a:85:95:2e:0f:4c:70:3e:10:a6:29:
f2:61:fb:9f:3e:33:c9:c7:92:07:32:98:32:15:e0:c6:2a:a2:
05:6c:7d:00:4e:0f:44:47:9e:7a:b6:59:cd:37:22:2e:ee:15:
37:2f:50:9d:66:2b:65:fe:e3:ed:80:f7:47:c8:2d:01:28:ba:
9d:16:36:55:e0:1c:ac:1b:2c:17:f9:bb:e1:c7:f8:f7:eb:a2:
d0:b6:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:20:11 2026 by rpki-client