Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: q44SH2XIXwK3FOa77dcUwbdQb3ey6yNfPzzlGCniTwU=
Subject key identifier: D0:62:31:AE:1B:6A:79:35:24:9A:99:E4:32:D6:28:C1:91:F3:EB:EE
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01A0E1E23A23D41CAD9BCA142087D1D65251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0DB8
Signing time: Sun 27 Sep 2026 08:01:34 +0000
Manifest this update: Sun 27 Sep 2026 08:01:34 +0000
Manifest next update: Mon 28 Sep 2026 08:01:34 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: /IkOOA9z+5J/T3oFVxU44DLPByDFkht8KQPkcgn38dw=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:3a:23:d4:1c:ad:9b:ca:14:20:87:d1:d6:52:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Sep 27 08:01:34 2026 GMT
Not After : Sep 28 08:01:34 2026 GMT
Subject: CN=d06231ae1b6a7935249a99e432d628c191f3ebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:bb:cb:f0:32:19:56:ff:a4:7c:35:86:c7:
07:f6:c7:e9:19:e1:60:12:66:0f:e1:0d:26:7f:63:
e8:8a:ba:b0:94:0a:9d:fc:cd:14:e3:d3:4f:e5:2e:
8b:2e:45:6e:e1:5c:9b:4d:d1:6c:74:d6:07:db:ab:
e4:74:a5:82:53:69:c9:e6:3a:3c:0a:85:5c:5d:27:
cc:31:a3:66:50:d8:c1:94:44:bd:13:85:4d:73:93:
73:55:1f:48:d4:4c:e6:7c:ac:32:df:04:cc:81:88:
96:20:a8:d2:71:53:4b:27:28:7a:8e:56:6b:ba:22:
b7:3f:e4:20:06:30:16:d3:ca:9d:b1:67:68:5f:95:
45:81:3a:ff:2a:1a:a6:b1:22:cf:b4:5a:b7:54:7f:
55:16:9e:db:f5:cf:f9:a0:cd:d1:89:fe:a9:89:df:
81:80:c5:7c:51:18:4e:88:7e:16:43:76:a8:60:cc:
06:02:67:46:75:85:4c:45:c5:ee:6e:48:2e:7f:d5:
c1:cb:cd:59:48:78:41:82:10:eb:fe:27:3a:9e:f3:
9e:99:4a:65:43:dd:ea:71:d6:05:4f:cd:27:8c:3f:
f7:3b:a0:99:b7:d5:28:46:63:48:1c:21:b2:7a:f7:
99:34:e5:c1:ab:57:e6:c7:aa:a7:5c:2f:42:9b:cf:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:31:AE:1B:6A:79:35:24:9A:99:E4:32:D6:28:C1:91:F3:EB:EE
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6a:ec:99:23:d7:0e:fb:61:d7:75:cf:fc:2c:a6:b7:e6:d2:
12:b5:48:64:9d:63:bc:f8:8d:f1:31:b4:d5:83:76:57:ba:42:
bf:1a:08:0b:da:88:a2:74:24:24:90:c8:d2:bb:dc:1b:9d:d4:
85:9c:19:74:e4:4d:ae:5b:5b:b2:38:c0:99:c8:f7:bf:07:1d:
6a:23:4a:69:ae:04:bc:08:82:2a:b1:ad:31:d5:93:21:62:ca:
d9:49:65:ce:ce:34:78:33:d9:1b:91:85:05:0a:11:17:a6:16:
10:24:34:31:2b:fc:22:5e:e2:2b:19:c8:8e:e3:01:ac:af:eb:
61:e6:d6:04:f6:6a:84:19:55:31:57:25:aa:c9:82:ed:b6:a9:
f6:ba:1c:dc:be:a2:e0:db:bb:9b:6a:a8:51:c1:65:d7:1c:37:
44:03:3d:5e:6a:ba:9d:07:11:f1:f4:f9:2f:0b:f5:f2:c1:31:
30:f2:f0:78:cb:93:05:e8:00:b3:a3:58:0c:23:20:05:60:f1:
d5:d7:9b:74:ae:1f:fe:ae:42:a2:ba:9f:5f:e3:ba:4e:4f:05:
cf:f1:9c:db:97:e1:0a:d0:8f:4f:6c:92:4c:72:50:1a:71:3f:
2c:5a:7b:bf:fc:86:cc:ab:4b:52:c5:30:a2:3a:72:93:2c:87:
34:d8:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:13:55 2026 by rpki-client