Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: ZebmSLvS58xm2c+hNdKXNVIKvuO2onIeOvmMLk0Nps4=
Subject key identifier: 3F:8D:60:C8:69:BF:78:00:A4:EE:0D:B4:CD:D3:90:70:5F:57:2C:C7
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 01A0EE8ADF44E2A219DEA041D8A976B79857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 19:01:13 +0000
Manifest this update: Tue 29 Sep 2026 19:01:13 +0000
Manifest next update: Wed 30 Sep 2026 19:01:13 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: KvURFljxIviv9cx7AZdO6IbiYy+8F+YviwNEj/bLlWQ=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:8a:df:44:e2:a2:19:de:a0:41:d8:a9:76:b7:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Sep 29 19:01:13 2026 GMT
Not After : Sep 30 19:01:13 2026 GMT
Subject: CN=3f8d60c869bf7800a4ee0db4cdd390705f572cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:2c:1d:c6:8b:a5:b7:e6:b5:fb:d8:43:0e:
1c:68:34:f6:92:0e:74:64:89:41:9e:e7:29:1f:2a:
6a:3f:84:2a:aa:2f:78:22:23:c5:c2:a5:9c:fa:fc:
74:25:1c:db:bc:a5:39:f8:b8:4c:ac:d6:aa:a6:7b:
1b:cf:14:48:fb:b2:98:b4:1f:e5:0e:09:27:63:7f:
62:6d:05:f4:d4:17:1e:4c:4b:e0:fd:c0:f4:7b:a5:
7f:a5:f4:3c:27:49:50:a5:82:a6:6f:21:c1:8c:66:
5e:c1:2f:af:94:37:88:34:e2:f6:38:7e:34:d5:28:
2f:c3:90:24:a5:1d:f2:e9:7f:83:ec:b5:e6:4a:1b:
eb:f5:b6:de:e4:37:27:07:cd:b0:33:75:31:4b:fb:
59:3f:1d:c2:c5:43:08:79:0f:4e:dd:47:03:5a:18:
b1:13:8e:a8:a1:55:f2:0a:7b:27:d0:b3:04:15:73:
5e:de:38:d7:a1:36:6f:d3:1c:e8:a8:97:3b:7f:68:
fd:88:f3:f1:57:d5:24:8e:a8:47:1d:d6:00:b7:cb:
b2:20:b7:1e:4b:5b:dc:ea:50:a7:7e:af:c3:51:b0:
1f:7f:7a:b0:26:99:e4:1e:cf:72:5e:61:6d:82:ac:
39:92:35:df:cf:3b:f1:73:aa:a5:26:ea:c6:0d:14:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:60:C8:69:BF:78:00:A4:EE:0D:B4:CD:D3:90:70:5F:57:2C:C7
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:be:e1:b4:5a:73:17:de:e3:1f:dc:e7:8f:30:4c:c3:09:
11:4c:5c:d8:6f:f1:b1:a5:39:67:bb:18:0b:46:21:f2:ac:0d:
21:02:19:3c:c0:27:17:a7:e7:a8:3a:ef:a2:2f:18:15:0d:56:
50:2e:11:ea:24:28:e9:c6:95:67:4a:8d:ae:c4:a1:78:17:fd:
66:1a:09:ee:20:97:96:25:6e:60:d3:85:c5:fb:12:dc:88:c9:
3d:cb:73:33:77:5e:0f:c8:4e:51:7d:d5:97:ea:32:d1:86:9c:
f3:8a:bf:52:67:23:8e:a4:e4:67:11:fc:85:0a:3c:31:16:47:
b9:6a:d0:73:11:c8:3a:28:73:17:89:7b:e9:f3:57:9d:62:8a:
9d:01:f1:e3:fd:a6:8e:5a:3d:e6:83:a1:6a:fe:79:70:c7:fe:
3b:ff:58:04:28:68:2c:3c:8c:fc:be:54:79:13:3b:b4:48:db:
5c:c0:11:4b:3f:5b:79:c3:f6:b9:96:5b:48:0f:2d:1e:e9:a8:
0a:85:62:ee:f5:64:f3:a0:a5:7a:92:44:ea:93:bf:c0:3e:26:
51:2b:7c:24:5b:c7:ca:23:4b:32:f7:3a:e2:39:60:40:12:57:
2c:09:b6:7f:22:9d:73:57:72:6b:b6:c4:eb:66:a7:6d:c2:39:
e2:54:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:01:58 2026 by rpki-client