Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: 165U/ruVIu3tTSK2Xzguexj+71+p8Ny4FCzy02lFjn0=
Subject key identifier: 77:E1:28:21:DE:D9:5E:AC:AD:0F:BC:F7:0F:0E:05:76:A8:13:B1:9D
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 01A1076F27D9F6E1069F881652EB90096FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 15:01:27 +0000
Manifest this update: Sun 04 Oct 2026 15:01:27 +0000
Manifest next update: Mon 05 Oct 2026 15:01:27 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: U69RpHVl4xdWh6UZYgixV8cXqBG9DRkYTNKVFp+A4OQ=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:27:d9:f6:e1:06:9f:88:16:52:eb:90:09:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Oct 4 15:01:27 2026 GMT
Not After : Oct 5 15:01:27 2026 GMT
Subject: CN=77e12821ded95eacad0fbcf70f0e0576a813b19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:3d:3f:44:c7:09:c2:8d:2c:df:8d:29:3c:
aa:c0:b6:c3:05:20:45:9e:ac:ed:8b:c6:8d:2e:fc:
65:f7:45:a8:43:ba:50:7d:7b:4d:e8:9e:be:d2:21:
cc:43:12:6e:bb:63:43:c5:34:2a:ce:18:d9:4b:48:
eb:2e:02:6e:e6:7e:a8:fb:e2:ed:02:32:d6:3e:a3:
d0:4b:f0:fc:8c:cc:23:42:b2:ab:05:2a:61:ff:36:
b9:c1:17:57:59:94:b3:cd:ea:8a:a6:a1:54:83:9a:
40:40:ee:45:09:d3:d5:4a:33:fc:84:b9:98:2c:b4:
c1:d1:2f:8a:8b:e2:1c:66:87:77:20:5a:9f:5b:56:
fc:4a:f2:cd:9a:78:c7:f7:07:0f:d0:c5:38:d7:a9:
2f:59:cd:71:4b:6d:3c:f7:29:74:af:e1:e3:80:95:
a7:93:0b:fd:15:97:0e:19:20:12:8c:1e:15:53:c7:
93:be:40:78:1d:de:8c:d1:42:76:da:06:96:bd:26:
57:18:41:11:b5:03:e4:a2:bd:70:22:f5:6c:0b:af:
d5:c1:68:91:44:8f:3c:c4:1c:85:f5:36:73:05:01:
35:fa:05:ea:04:f9:27:ca:25:f0:d3:69:86:ce:10:
a6:5b:55:c0:39:82:5f:c2:cc:48:14:eb:70:ad:6e:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:28:21:DE:D9:5E:AC:AD:0F:BC:F7:0F:0E:05:76:A8:13:B1:9D
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:44:49:e8:11:56:42:79:ec:57:7e:b2:eb:5b:af:50:79:
31:a8:0e:a8:0d:09:ab:ac:ab:8e:ee:48:0f:bb:f3:ee:7d:68:
e7:c7:a5:36:b6:3e:51:dd:2e:ac:b6:3b:d5:47:b1:1d:87:c2:
24:2e:32:7d:f1:43:5b:0c:61:47:2e:ee:28:e5:b3:6a:47:ce:
04:16:e2:15:94:3b:eb:4d:37:12:86:0a:83:3a:39:f4:b4:40:
b2:42:5d:2a:95:c3:af:fc:42:be:18:42:21:e9:f7:9e:a6:87:
f5:72:f8:60:a2:48:20:f8:c4:c6:42:25:35:b2:5f:56:01:f2:
2e:ef:4b:6f:24:91:39:90:67:df:ef:0b:63:1b:40:cf:f1:10:
1c:87:98:aa:e6:74:05:64:01:24:2a:df:24:ee:3e:ac:24:3a:
c6:71:da:30:06:95:e5:22:51:50:36:64:88:fc:95:ce:7d:40:
d2:88:23:4e:77:0e:ee:8d:4a:30:bd:74:13:80:0b:d5:11:bb:
c3:51:75:99:39:fa:fd:b6:b8:17:33:b7:6a:a2:46:dc:09:e1:
1d:0f:9b:78:d1:b1:06:bc:34:aa:83:10:df:75:db:c8:87:c3:
c5:24:fd:29:5a:87:57:63:37:8f:31:c5:5f:a8:5c:96:92:73:
19:18:41:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbyfZ9uEGn4gWUuuQCW/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDI5MGJjNjgzODg2Mjg1NWUxOWNkYmRjMTA5Y2JiNDhl
MDhjZmYwHhcNMjYxMDA0MTUwMTI3WhcNMjYxMDA1MTUwMTI3WjAzMTEwLwYDVQQD
Eyg3N2UxMjgyMWRlZDk1ZWFjYWQwZmJjZjcwZjBlMDU3NmE4MTNiMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL49P0THCcKNLN+NKTyqwLbDBSBF
nqzti8aNLvxl90WoQ7pQfXtN6J6+0iHMQxJuu2NDxTQqzhjZS0jrLgJu5n6o++Lt
AjLWPqPQS/D8jMwjQrKrBSph/za5wRdXWZSzzeqKpqFUg5pAQO5FCdPVSjP8hLmY
LLTB0S+Ki+IcZod3IFqfW1b8SvLNmnjH9wcP0MU416kvWc1xS2089yl0r+HjgJWn
kwv9FZcOGSASjB4VU8eTvkB4Hd6M0UJ22gaWvSZXGEERtQPkor1wIvVsC6/VwWiR
RI88xByF9TZzBQE1+gXqBPknyiXw02mGzhCmW1XAOYJfwsxIFOtwrW5KNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfhKCHe2V6srQ+89w8OBXaoE7GdMB8GA1UdIwQY
MBaAFAnSkLxoOIYoVeGc29wQnLtI4Iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzIt
YjUxOTUzMDM3OTkzLzEvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzItYjUxOTUzMDM3OTkz
LzEvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhdESegR
VkJ57Fd+sutbr1B5MagOqA0Jq6yrju5ID7vz7n1o58elNrY+Ud0urLY71UexHYfC
JC4yffFDWwxhRy7uKOWzakfOBBbiFZQ76003EoYKgzo59LRAskJdKpXDr/xCvhhC
Ien3nqaH9XL4YKJIIPjExkIlNbJfVgHyLu9LbySROZBn3+8LYxtAz/EQHIeYquZ0
BWQBJCrfJO4+rCQ6xnHaMAaV5SJRUDZkiPyVzn1A0ogjTncO7o1KML10E4AL1RG7
w1F1mTn6/ba4FzO3aqJG3AnhHQ+beNGxBrw0qoMQ33XbyIfDxST9KVqHV2M3jzHF
X6hclpJzGRhBvw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:53:06 2026 by rpki-client