
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: iloXvi0QXc4fywV8s9oWMsrJHlgaORmclqF40rjMYgk=
Subject key identifier: 30:62:E8:A8:42:06:72:64:29:AF:60:93:68:86:66:44:BD:7E:28:B9
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 01A0CDEC602E094E08FD2A8AB4D6F48FAEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 04C0
Signing time: Wed 23 Sep 2026 11:00:15 +0000
Manifest this update: Wed 23 Sep 2026 11:00:15 +0000
Manifest next update: Thu 24 Sep 2026 11:00:15 +0000
Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: 4gpRnSu74Krs0moa/HN3uyZPDtSt4ja7yB5q3jjNlGg=)
5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:60:2e:09:4e:08:fd:2a:8a:b4:d6:f4:8f:ae:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Sep 23 11:00:15 2026 GMT
Not After : Sep 24 11:00:15 2026 GMT
Subject: CN=3062e8a84206726429af609368866644bd7e28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:a4:bc:59:aa:3f:96:57:5f:43:cb:3f:6a:
1e:d6:38:38:5f:30:4a:8b:4b:6b:d3:fa:4a:b8:b5:
5f:de:66:80:a0:e2:f0:d0:7b:41:e7:14:37:dd:fb:
bb:aa:c9:0c:6b:93:5b:80:78:c6:db:2e:74:d0:3c:
37:1a:2a:ac:5a:94:97:33:cd:e0:cb:8e:2d:10:c6:
46:84:6c:fb:b4:ff:39:79:73:e8:41:6e:23:ea:4d:
34:89:5d:e3:03:e2:f0:75:3a:a8:f8:2a:67:26:aa:
65:04:6b:f8:94:ac:d1:a5:f0:b1:28:e1:73:f2:7e:
98:27:ab:2f:5d:4a:51:0a:f9:a8:3b:1e:18:66:03:
48:e8:58:98:48:6f:35:ac:56:45:04:28:54:10:c5:
b1:f0:9e:c4:56:df:32:da:48:4c:7d:17:41:46:23:
94:32:dd:ae:a3:50:e9:d6:a0:e9:08:62:0a:98:e9:
72:ef:46:69:0d:f5:65:63:60:a3:c6:4e:84:63:55:
77:07:e9:8c:9b:d6:ae:99:5b:62:2d:61:72:0b:34:
3d:15:39:22:d3:19:a4:84:1a:2c:79:d3:06:ea:0b:
43:96:a3:97:0d:7e:94:3f:d9:71:84:41:29:4c:6e:
b1:c0:4f:e6:c4:00:bb:13:5a:f3:fd:da:18:0f:92:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:E8:A8:42:06:72:64:29:AF:60:93:68:86:66:44:BD:7E:28:B9
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:94:52:06:15:73:ce:9d:c4:75:b7:4e:43:02:7c:52:d9:
ee:54:04:f9:82:65:b4:95:c8:fd:2f:91:d4:b0:bd:d7:16:cd:
ab:3d:8f:e3:5c:1e:f3:56:3f:af:95:17:16:8d:a0:69:a8:21:
7d:6b:03:de:4d:36:69:04:3e:64:00:ed:94:9c:10:a3:14:cc:
93:cb:31:ec:5a:7a:b0:71:a3:61:53:da:fa:f2:42:18:83:5d:
ca:3d:2e:21:21:a4:05:66:7f:d8:bc:30:fc:d8:e0:9c:b0:2d:
0f:62:0b:1f:46:44:8a:39:66:c4:7b:7f:6c:92:81:c9:d2:4c:
70:a0:fb:30:5e:7f:8f:e7:31:1e:98:db:2a:36:ea:d0:ee:b0:
c0:24:ba:2c:a1:02:c9:38:e0:7e:e2:63:be:b7:58:b6:ec:3d:
2f:c8:a6:99:95:0e:84:38:fd:61:0a:31:3f:2c:02:3a:56:3c:
e2:ed:7d:ec:d5:cf:b6:b6:2f:d9:14:1e:af:5f:92:b8:20:6a:
cb:15:5f:f2:4c:9e:10:a8:43:12:98:c8:6f:d3:2e:40:2c:f4:
f6:37:4e:38:78:18:f9:e3:0b:b0:cb:fa:cc:fb:4e:11:71:e7:
74:c2:88:ab:ff:a8:bf:3a:f8:2c:67:08:a2:d6:d3:6d:bc:a2:
e0:8c:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:16:34 2026 by rpki-client