Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: LzSbA8WdJ0jNjNYS7clEh8A2XIpoa2U4qsTS30blsDI=
Subject key identifier: AF:58:F4:29:52:5D:0A:B9:A9:CD:5F:8A:6B:7B:48:7E:70:F3:6E:E0
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 01A0EF301DFBB74ABC0AEB8BE4D310B196F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 01ED
Signing time: Tue 29 Sep 2026 22:01:42 +0000
Manifest this update: Tue 29 Sep 2026 22:01:42 +0000
Manifest next update: Wed 30 Sep 2026 22:01:42 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: exsqc2i4EywxPoT7HfT+GFjEqJjTETIocc2LBgxejOk=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:30:1d:fb:b7:4a:bc:0a:eb:8b:e4:d3:10:b1:96:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Sep 29 22:01:42 2026 GMT
Not After : Sep 30 22:01:42 2026 GMT
Subject: CN=af58f429525d0ab9a9cd5f8a6b7b487e70f36ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:3c:69:ef:65:7b:e5:c3:da:f7:39:3e:bc:
d1:07:11:43:63:53:c2:00:4e:44:98:e4:24:e6:fb:
27:b0:10:4c:76:f1:57:56:27:83:9d:fe:94:4b:bd:
56:49:32:52:61:2d:1c:95:18:b1:2d:66:8f:d9:12:
8c:6c:bc:34:5c:3d:c8:72:77:76:f6:e0:6d:d9:d9:
5e:5c:d3:5a:bb:fa:d9:ad:81:92:00:1e:a9:3b:74:
6e:1a:91:42:ab:d8:88:7f:bf:cb:49:ea:72:fd:64:
02:e9:b8:1a:a4:63:91:31:e7:9c:3d:47:83:31:27:
ea:66:66:43:68:0f:45:05:72:b2:c3:f1:3a:fc:99:
84:b0:63:16:ba:8c:ad:61:de:b8:48:26:e1:3c:d6:
cf:4f:8b:a8:ac:f9:1e:04:58:a9:97:b6:09:83:26:
47:36:bc:28:ca:a1:ce:60:51:31:9c:d9:44:e8:74:
d7:02:52:8c:ec:ac:95:7e:df:9b:25:5f:dd:15:67:
c9:f0:31:6a:7f:43:17:77:b4:d3:44:4c:e8:c6:8b:
86:5d:18:8d:d5:7e:73:ea:22:41:5a:b3:d8:fc:6b:
dc:22:90:9a:91:70:a2:b2:6b:aa:5a:12:c7:24:3d:
f5:5d:47:ef:1d:c2:6b:c6:8e:c8:76:3e:06:10:f4:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:F4:29:52:5D:0A:B9:A9:CD:5F:8A:6B:7B:48:7E:70:F3:6E:E0
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5f:a0:ad:1a:cf:59:dd:ec:1d:08:1e:ca:e1:70:a7:b3:16:
2a:84:0b:ad:55:c8:ee:74:2c:56:ef:e3:d5:5a:14:79:fa:27:
26:06:01:0e:2a:e8:61:17:e6:7a:d7:18:50:81:a3:27:95:fc:
46:12:1e:2f:0e:cc:f7:d3:be:f2:2f:eb:3f:9f:f7:61:83:a4:
1c:5b:2d:36:b1:2c:39:be:dc:7c:5f:ed:e5:d1:17:b7:ba:82:
b2:15:51:3e:44:c3:53:2e:83:c6:bf:07:cf:c0:fa:69:b9:4a:
7d:4c:26:d9:3a:e0:27:65:13:0e:11:4c:56:88:e5:ff:e2:94:
e0:9b:07:6a:5b:72:fd:40:d7:3c:9b:6e:ff:63:30:44:09:66:
25:13:58:7e:6d:4f:55:66:f3:ce:75:71:0c:87:26:04:5c:10:
d2:a3:c9:da:59:a9:50:f8:d1:2b:62:b8:40:88:47:d0:97:5d:
ac:fe:ea:1c:48:ed:b3:5c:9f:ea:82:d9:1a:97:b5:5f:d0:5a:
f1:54:f2:f4:d7:cc:2e:e5:eb:1a:7c:b0:ee:85:6c:13:bf:41:
3e:b2:c2:c6:dc:30:a5:22:e4:91:8c:09:5f:0c:12:d5:11:04:
5f:48:bc:9d:c3:25:32:6a:3f:6b:0f:0f:ae:a1:53:21:9b:37:
5b:b1:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:41 2026 by rpki-client