Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: YmMt1E/2kaD6CuB3DCQ/SNbfa0wLeJWN3FDEDlGe4bw=
Subject key identifier: 5D:A0:26:D4:67:BD:F2:9F:6E:09:67:04:7F:41:6F:F9:03:84:B3:98
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 01A0D502048F3064D92F0047CF44B25BE959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1553
Signing time: Thu 24 Sep 2026 20:01:14 +0000
Manifest this update: Thu 24 Sep 2026 20:01:14 +0000
Manifest next update: Fri 25 Sep 2026 20:01:14 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: nazFRto215o+4kMYfddr+zTZfRRndZY0ecEwgvcE30k=)
2: HZKZt3i0tjhRATmGdiaaPS481ik.roa (hash: VGXONJbfgCWkz7Yv9blCEOKW4j+yHw/XZ24zEdm0ahs=)
3: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
4: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
5: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:04:8f:30:64:d9:2f:00:47:cf:44:b2:5b:e9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Sep 24 20:01:14 2026 GMT
Not After : Sep 25 20:01:14 2026 GMT
Subject: CN=5da026d467bdf29f6e0967047f416ff90384b398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:18:f2:29:0a:99:de:3a:9e:8d:1c:75:d0:
d8:4a:77:56:6d:66:9e:47:7a:27:ec:e5:b0:7f:8a:
34:fe:8b:89:c5:0b:23:7d:ce:8d:bf:f1:6d:fa:59:
c0:7a:3a:99:cb:1f:5d:3c:04:83:3f:ff:b2:f0:ed:
08:fd:ff:93:fd:7d:1b:21:3a:7a:b8:f4:d7:c4:3f:
fd:d4:75:2d:56:67:0c:70:02:0c:46:ac:6b:37:6e:
ff:04:db:26:29:1f:93:d5:be:1c:a4:4b:cf:c8:19:
20:c6:2d:e2:1f:56:78:a4:07:5f:d6:42:fb:54:76:
a6:a4:c6:fc:cc:07:d3:72:4a:85:d2:6a:4d:74:ea:
81:85:70:79:51:61:12:63:b1:d5:d4:ef:8d:19:76:
97:20:83:f1:51:bf:d7:91:0c:24:ab:c6:50:48:12:
f3:df:14:76:c9:0b:52:2e:13:26:cd:f9:b7:6d:6e:
a7:90:90:28:f1:7d:d7:91:d6:f9:92:7b:71:7f:d9:
3e:45:15:6b:31:46:ab:65:05:4a:16:c8:63:74:45:
76:1e:fd:b4:5a:a7:54:1d:5f:2c:f0:39:80:fe:de:
5b:0b:8d:31:e0:20:be:30:85:10:db:f7:33:d4:35:
cd:03:2c:90:81:a0:f5:80:f6:17:1c:f5:76:48:bf:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:26:D4:67:BD:F2:9F:6E:09:67:04:7F:41:6F:F9:03:84:B3:98
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:f9:31:e8:5a:11:17:5a:62:b7:4a:b2:91:3c:98:3a:0a:
20:ba:b8:98:cc:9c:eb:f5:ec:84:50:5a:28:e4:62:a1:e8:b6:
ba:db:14:40:d5:b6:16:97:e1:47:0c:15:76:a2:5c:59:bc:79:
89:37:12:81:ae:72:67:ef:28:c2:3a:f5:e5:95:28:1b:47:c9:
f1:18:0d:54:14:70:4a:f0:5c:eb:f2:04:f9:d3:4a:b8:44:ed:
9c:3b:d1:1b:ba:46:7f:63:60:e6:ce:2c:12:2c:3d:7a:6b:09:
47:1c:da:79:f4:1a:9d:b6:5c:99:2d:8a:62:9a:0e:c4:3a:af:
28:e9:80:f5:07:c2:57:ab:78:ce:5b:37:eb:2c:de:42:19:20:
fe:77:3b:f0:ce:22:63:1c:77:4f:4a:f0:e2:55:47:76:d1:e4:
9d:ee:74:21:f8:59:f2:ee:f7:87:f0:d7:06:9b:d3:e0:8e:0f:
6a:32:b0:c0:5f:35:6e:69:f0:0f:da:5e:b6:06:31:b2:bf:7d:
05:b9:d6:52:08:21:30:de:70:27:be:22:dc:51:92:e5:7b:e2:
09:6d:1e:f8:f2:f3:9d:a4:fb:b0:e5:76:1a:b6:82:9b:7b:a0:
e2:fa:9f:2a:1c:49:aa:3d:39:77:f9:f0:f9:64:ba:d2:0e:fb:
32:bf:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:39:56 2026 by rpki-client