Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: VTK95sZBQdCvi5SCkq8SzU4EBbkb+1IAMzzdNreuQZY=
Subject key identifier: 19:64:E5:F0:0F:37:3E:20:B3:02:FC:59:09:F4:B2:AC:C6:23:0C:2C
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 01A1DA5C9E7927E0FB37B47EA83D6A321D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 054B
Signing time: Sat 14 Nov 2026 14:01:05 +0000
Manifest this update: Sat 14 Nov 2026 14:01:05 +0000
Manifest next update: Sun 15 Nov 2026 14:01:05 +0000
Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: w/ncQiJzB/B/VNdmqYs/ozD13NjzMsFy5USF6P9Fxp4=)
5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:9e:79:27:e0:fb:37:b4:7e:a8:3d:6a:32:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Nov 14 14:01:05 2026 GMT
Not After : Nov 15 14:01:05 2026 GMT
Subject: CN=1964e5f00f373e20b302fc5909f4b2acc6230c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:2a:b0:92:c2:d5:14:87:61:2a:1d:0f:d9:
b4:38:5b:c1:63:e9:ac:78:b8:a4:f7:d3:df:14:1e:
27:66:a8:35:f4:8e:18:88:5e:93:7b:47:78:0b:29:
9b:ae:c8:74:0a:a0:74:26:6b:f3:79:24:8a:08:e0:
6d:d4:ad:6b:c9:0e:ff:df:0c:15:2c:2c:18:9e:b7:
da:02:60:6b:b0:3d:c9:eb:fe:7c:2a:90:1a:98:56:
9e:41:89:32:45:c9:ca:36:b1:2d:17:2c:e9:eb:65:
50:6c:c9:5c:54:c5:e6:ab:b8:49:94:6b:3b:3a:c0:
08:b2:e4:31:3b:d3:e4:fa:3b:75:59:40:e7:bb:c6:
c4:5c:e1:b4:48:ac:b5:8e:b1:44:f9:c6:16:e2:12:
e9:07:0a:36:a0:a3:b3:ee:ed:02:79:9e:c8:09:37:
ec:d4:9e:c5:c3:39:95:19:5e:97:1b:55:0f:e7:93:
53:3b:5f:b8:9c:64:c9:b3:19:db:1d:49:61:85:13:
ad:2d:43:0d:1f:0e:8b:ab:ca:45:49:cf:b8:12:0a:
38:00:5d:5e:62:3d:f7:c5:f6:ec:7c:c0:c2:3f:2a:
06:a8:50:d5:66:69:e2:7c:86:df:3f:75:97:b1:09:
f0:66:1c:4f:b1:2c:e9:e9:7c:15:b7:c5:68:f3:ae:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:E5:F0:0F:37:3E:20:B3:02:FC:59:09:F4:B2:AC:C6:23:0C:2C
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a6:72:27:0d:c4:9d:89:99:d5:c8:3b:47:46:4c:f0:5f:6d:
f3:9e:78:c0:01:94:22:58:04:ce:03:3f:f5:51:b8:a4:a3:d4:
78:8b:99:45:30:e2:ff:ff:41:15:8c:ce:d6:db:4b:f8:1f:f4:
be:ce:33:48:49:11:ed:8f:07:42:b1:98:9b:25:97:34:41:c1:
fa:f6:34:6e:c5:a6:80:1d:41:47:02:35:04:11:04:dc:b6:9d:
45:8d:c4:ff:b1:dc:9f:2e:86:96:fe:fd:0b:2f:43:48:33:cd:
8c:7c:b4:b0:74:27:0d:0d:20:81:36:c5:b5:d2:27:6d:08:0c:
b7:67:ce:15:c8:89:bf:51:65:f5:47:41:c8:57:28:a8:3f:09:
5a:01:89:45:6d:c2:21:5f:dc:7d:54:88:1d:db:05:b6:71:29:
15:fd:83:a4:5a:97:12:bd:a5:f9:0c:ac:d9:f5:0f:39:49:00:
43:31:05:1e:4b:31:12:f6:cf:ec:d6:dd:7b:30:bf:a8:b1:73:
05:b2:91:b9:4f:cf:2f:3f:3a:e0:eb:e5:41:98:e3:33:da:98:
cb:f4:d2:74:b5:ae:bf:c5:a1:fc:3f:bf:b9:75:96:b9:e6:0b:
89:de:a5:1d:da:38:2b:00:8c:82:fd:3d:fc:c0:d6:71:54:26:
d1:ca:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:12 2026 by rpki-client