Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
File: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft (raw, json)
Hash identifier: UkBzlsPoWIa8zRGzmeTHDwOOGsY6PW3/lM/lmHNl/9o=
Subject key identifier: 8E:07:79:7C:3A:37:29:EF:DC:0C:EE:D4:E9:58:63:B9:28:E7:10:BE
Authority key identifier: 0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
Certificate issuer: /CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Certificate serial: 01A0D727CA8E65AE2B1A074F880EB93717AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
Manifest number: 01B4
Signing time: Fri 25 Sep 2026 06:01:44 +0000
Manifest this update: Fri 25 Sep 2026 06:01:44 +0000
Manifest next update: Sat 26 Sep 2026 06:01:44 +0000
Files and hashes: 1: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl (hash: vbW17p85YCB5a8NNoWIfn7uMF/j5bW5Sy3PxfeUsUwQ=)
2: VYr2J8PU6qvoHNkXxdUk2poOpeg.roa (hash: qyR8POc6dovbUK8HiGSmXu2L7YbxUwe4Rbtm4a/aTuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:ca:8e:65:ae:2b:1a:07:4f:88:0e:b9:37:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Validity
Not Before: Sep 25 06:01:44 2026 GMT
Not After : Sep 26 06:01:44 2026 GMT
Subject: CN=8e07797c3a3729efdc0ceed4e95863b928e710be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:c8:d3:3c:e6:17:5b:cf:6e:c3:c0:26:12:
57:61:9e:24:7a:c7:07:7b:91:2a:d4:4f:44:b6:5e:
21:f1:b2:da:a5:42:5c:d0:5c:16:a7:ff:10:b7:2c:
77:16:f8:b2:64:62:25:3a:f5:2a:24:e5:b8:c3:8f:
9e:ff:b1:0f:3d:14:cc:a9:af:d3:0f:bf:4f:6b:30:
2b:61:a2:3b:db:07:c5:ef:42:eb:ff:15:e7:fc:c7:
e9:ed:40:86:5d:1f:71:aa:ae:a0:51:c1:6e:e7:cb:
ad:e8:49:3a:a6:ca:60:dd:2a:40:f9:5d:76:ed:3e:
e3:59:d0:63:c5:8a:98:77:ac:ee:97:64:d9:10:cd:
dc:02:c0:a9:8c:9f:08:42:f1:9c:fa:e7:41:eb:97:
7b:22:c3:d6:0a:c6:2d:b5:db:3d:0c:2d:e2:b8:5c:
de:14:49:85:36:22:64:01:12:ca:e1:e1:1f:46:8c:
8f:0e:67:ad:88:4f:93:ae:78:2a:b8:77:b2:59:e5:
da:01:36:30:a0:e9:80:e1:5b:cd:a2:ec:be:0a:78:
7a:9a:73:79:78:1d:9a:ab:77:75:1e:d2:25:3a:c7:
ef:f1:26:4b:3e:f8:62:8d:a0:b9:b5:5f:ca:ec:eb:
c3:f1:66:c7:21:69:9f:ac:e8:fc:37:58:76:21:86:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:79:7C:3A:37:29:EF:DC:0C:EE:D4:E9:58:63:B9:28:E7:10:BE
X509v3 Authority Key Identifier:
keyid:0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b9:46:6c:22:99:2e:15:0d:ab:66:1a:97:a8:1c:f8:d6:47:
44:ed:55:68:c7:d3:56:bb:9d:bb:f2:d3:49:20:5d:d5:c9:49:
a8:67:30:91:18:58:60:6b:90:36:12:3e:d4:d8:af:dc:ec:9a:
ed:7b:49:ec:ab:a3:cc:e1:c4:6e:aa:12:5f:5b:4f:90:4c:81:
89:3c:b7:41:b5:96:e2:fb:b8:84:34:02:60:40:c2:19:2b:4f:
0a:81:f0:3c:bb:f3:7c:c6:3c:fd:f8:28:2c:ac:fa:4a:ca:08:
40:b7:6e:e0:46:36:b8:4b:60:b1:e2:e6:8a:89:80:8c:ba:8f:
b9:de:a9:85:f1:26:52:57:01:ef:b9:68:80:87:1b:8c:6a:bd:
4e:43:78:c1:03:e6:5a:ec:2a:4e:97:18:33:e6:7b:c8:1f:0b:
f9:c8:b8:08:3c:61:b7:93:ce:7a:6c:a0:1a:46:df:ec:22:75:
70:7c:ba:73:58:d5:8c:3f:c7:c4:09:22:bd:1c:20:38:1b:16:
67:b7:b6:17:d1:d1:0d:37:78:29:f3:58:47:ec:90:ea:53:70:
26:26:0a:34:b6:21:27:1a:32:4f:6f:83:87:da:3a:ea:8a:14:
dc:65:c4:2e:a1:7c:f2:5d:33:5c:d9:66:63:76:84:46:fe:c6:
ae:b4:65:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ8qOZa4rGgdPiA65NxevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTFhYTQwYmI2MWRhODQzZDkwNmNiNTY2MjM5NTBjYjM3
ZjU5YjMwHhcNMjYwOTI1MDYwMTQ0WhcNMjYwOTI2MDYwMTQ0WjAzMTEwLwYDVQQD
Eyg4ZTA3Nzk3YzNhMzcyOWVmZGMwY2VlZDRlOTU4NjNiOTI4ZTcxMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx/I0zzmF1vPbsPAJhJXYZ4kescH
e5Eq1E9Etl4h8bLapUJc0FwWp/8Qtyx3FviyZGIlOvUqJOW4w4+e/7EPPRTMqa/T
D79PazArYaI72wfF70Lr/xXn/Mfp7UCGXR9xqq6gUcFu58ut6Ek6pspg3SpA+V12
7T7jWdBjxYqYd6zul2TZEM3cAsCpjJ8IQvGc+udB65d7IsPWCsYttds9DC3iuFze
FEmFNiJkARLK4eEfRoyPDmetiE+TrngquHeyWeXaATYwoOmA4VvNouy+Cnh6mnN5
eB2aq3d1HtIlOsfv8SZLPvhijaC5tV/K7OvD8WbHIWmfrOj8N1h2IYYvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4HeXw6Nynv3Azu1OlYY7ko5xC+MB8GA1UdIwQY
MBaAFAqRqkC7YdqEPZBstWYjlQyzf1mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZTQ4YzItM2RiNy00MjY5LTljZGEt
OGU1OTM4ZGRhZDI0LzEvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zZTQ4YzItM2RiNy00MjY5LTljZGEtOGU1OTM4ZGRhZDI0
LzEvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEblGbCKZ
LhUNq2Yal6gc+NZHRO1VaMfTVrudu/LTSSBd1clJqGcwkRhYYGuQNhI+1Niv3Oya
7XtJ7KujzOHEbqoSX1tPkEyBiTy3QbWW4vu4hDQCYEDCGStPCoHwPLvzfMY8/fgo
LKz6SsoIQLdu4EY2uEtgseLmiomAjLqPud6phfEmUlcB77logIcbjGq9TkN4wQPm
WuwqTpcYM+Z7yB8L+ci4CDxht5POemygGkbf7CJ1cHy6c1jVjD/HxAkivRwgOBsW
Z7e2F9HRDTd4KfNYR+yQ6lNwJiYKNLYhJxoyT2+Dh9o66ooU3GXELqF88l0zXNlm
Y3aERv7GrrRlmA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:32:01 2026 by rpki-client