Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: fc518ftWdToX6Yot8NUI69KBUa/ZQONZJXONCN5G0LE=
Subject key identifier: D2:B1:11:7F:40:98:1D:E5:DC:5C:26:A5:63:52:4A:21:85:8B:B6:AB
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01A0CF6CF1181085CFF2C45DE3CC8A6B942A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 18:00:18 +0000
Manifest this update: Wed 23 Sep 2026 18:00:18 +0000
Manifest next update: Thu 24 Sep 2026 18:00:18 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: bI8+EzST08q5lI1Mm4PpiOSKjheJ2pzLz0co5zWBo/8=)
2: b8fmiRsHfa1HeafrL2c67PcFnCg.roa (hash: LNAixwqyhx4gcnGKNiUYlHjHNINv1hh3kb/KDSTw940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:f1:18:10:85:cf:f2:c4:5d:e3:cc:8a:6b:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Sep 23 18:00:18 2026 GMT
Not After : Sep 24 18:00:18 2026 GMT
Subject: CN=d2b1117f40981de5dc5c26a563524a21858bb6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:f9:dc:86:e3:02:45:81:4c:3c:2c:57:5b:
06:75:a3:48:15:82:59:c4:f6:95:c2:69:53:c6:f1:
d7:ad:89:4f:bb:78:6b:3c:d8:9f:c4:8e:51:1c:24:
4c:00:26:ff:75:12:0a:ce:12:62:17:62:ec:a7:64:
0e:0e:bf:05:a5:db:5c:d2:9e:ef:33:0c:b5:a7:fc:
a0:af:9b:70:b0:62:93:fb:6d:7d:bf:e4:ca:9a:14:
cd:17:04:16:d3:ff:af:0f:46:c9:b7:50:c1:af:24:
2d:1f:04:06:6c:27:64:c4:4e:a9:fc:c4:1a:45:1d:
7b:b3:12:49:b2:4a:df:b7:25:04:6d:0b:62:ce:d2:
d4:10:bf:ad:e4:10:92:2b:5a:b7:ba:b8:4b:62:37:
e3:1c:9f:11:27:a4:90:48:f9:1b:47:42:e4:2f:12:
1e:f2:f0:64:4e:4c:c0:c2:81:5b:52:ec:ed:9d:47:
2b:97:8c:13:5a:a0:a9:35:2f:40:1d:9b:bc:45:02:
15:37:c3:9d:df:97:5d:d6:dc:bd:1e:ee:91:4d:a7:
33:57:fb:75:48:75:35:63:b0:b0:6f:0a:28:e7:06:
ef:d2:0e:cb:67:62:21:41:85:91:29:1c:e5:bd:70:
a4:2b:44:87:5f:b1:7c:26:3f:c3:ac:d7:4e:1d:17:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:11:7F:40:98:1D:E5:DC:5C:26:A5:63:52:4A:21:85:8B:B6:AB
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:39:bd:d2:65:9c:0f:42:2d:d1:35:26:7b:d6:d1:42:5b:c3:
15:bd:c5:16:3e:7e:d8:1f:19:46:f8:10:85:2c:2b:74:55:cb:
05:58:9d:fc:ee:22:6d:f6:41:e5:e7:78:ad:e3:59:24:bd:62:
67:51:6d:3e:82:de:59:20:a3:fb:0d:9b:2a:f5:1c:d0:2d:d4:
d3:6a:41:7f:35:c4:ea:e4:59:b4:1e:ed:88:2d:ba:d4:39:b1:
86:66:21:eb:18:06:07:8b:de:8c:76:cb:af:98:30:fb:11:40:
56:f0:91:b0:4d:8e:65:3d:d7:fb:81:80:ca:e4:a9:a6:e3:7f:
80:bb:ca:44:00:ef:87:46:f3:41:f3:7f:50:e1:83:9f:6b:1f:
9f:4e:cc:2c:db:3f:c2:87:f1:16:34:c2:d1:4c:86:8e:a0:09:
86:d3:8e:b3:2a:13:10:fe:ab:d7:8b:d3:e2:ec:8f:c9:27:ff:
a6:5a:d3:43:05:37:ea:dd:c2:5c:5b:fb:62:87:24:10:53:c6:
c9:4c:c3:48:91:a1:af:6e:5c:b9:2d:62:b5:a3:4a:2c:d5:ec:
a9:0d:d7:72:d0:bc:fb:2f:f3:30:e7:2b:ed:fe:e0:66:77:23:
b4:24:a4:38:93:d6:54:0b:6a:d7:49:f6:59:11:2a:68:1e:0b:
43:ba:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:59 2026 by rpki-client