Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: /+rJGgiGv/gNZ1+AGBalDLP+nYX/NGkL7P2MBo/UOXY=
Subject key identifier: 63:37:78:AF:82:9F:F0:0E:4F:86:0E:74:ED:C8:DE:BB:37:70:E3:1D
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 01A12956407D1813E9FA104B34263F0572C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0AB1
Signing time: Sun 11 Oct 2026 05:01:20 +0000
Manifest this update: Sun 11 Oct 2026 05:01:20 +0000
Manifest next update: Mon 12 Oct 2026 05:01:20 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: q4kKBULH22EcAxi8G8PLb41CU2D0j4+vpxKjC4Et+RQ=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:40:7d:18:13:e9:fa:10:4b:34:26:3f:05:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Oct 11 05:01:20 2026 GMT
Not After : Oct 12 05:01:20 2026 GMT
Subject: CN=633778af829ff00e4f860e74edc8debb3770e31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:00:d9:70:c7:89:bc:29:39:ec:11:dc:e7:
75:09:2a:01:11:80:58:df:d4:c0:b7:3e:d0:8d:83:
75:f2:25:87:91:83:33:21:1e:7e:9f:58:f1:6b:6c:
bc:44:d7:5a:d5:07:db:15:92:76:96:c0:e8:d9:15:
be:53:1e:56:dc:1a:d2:6a:b8:97:8a:62:54:84:62:
03:b5:19:40:d0:71:b3:c9:16:e5:c5:4e:cf:59:0f:
f2:03:7e:02:ab:d4:d2:88:0f:21:fe:e0:56:3e:33:
86:76:40:99:83:1c:b9:48:bc:99:07:7a:0b:3a:f0:
eb:14:c3:40:a8:83:c6:9d:79:04:d2:58:0f:a3:b4:
d5:a9:9e:6f:13:5f:f6:31:ff:a8:64:ea:0a:a0:c5:
1b:d0:65:a9:a0:13:24:98:4e:2e:de:cf:0a:74:e6:
63:a7:bb:ae:07:78:50:c2:af:d1:42:f3:6b:c5:91:
d4:b6:ee:b2:eb:ed:c9:0b:9e:b1:31:d9:af:b3:59:
f8:27:83:e7:be:4d:6b:21:b5:62:3f:2f:41:11:d7:
17:c3:1d:e4:1d:71:af:42:f2:0d:39:3f:c8:8a:ae:
8b:9f:2c:ea:cc:c3:26:ad:84:b4:d6:81:a0:cc:45:
75:3b:f4:2a:67:89:77:e1:5a:93:ab:f3:c1:8b:87:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:78:AF:82:9F:F0:0E:4F:86:0E:74:ED:C8:DE:BB:37:70:E3:1D
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:40:53:8e:11:98:71:87:90:9c:b1:52:84:4b:9d:ed:8c:
73:81:df:8b:ea:52:bb:17:17:b2:be:47:c1:c1:1d:83:bf:1e:
fd:a0:f8:4c:96:26:38:8b:7b:fd:77:ef:b2:74:af:f5:1c:ef:
14:ce:73:57:20:e0:37:34:0f:5c:b0:db:21:f0:0f:64:8e:f4:
a3:98:12:b3:f9:b6:4b:9d:83:29:df:f4:72:cf:56:87:1a:6b:
cd:ee:a6:e4:36:65:49:83:f4:c8:15:28:37:d3:29:90:bc:1e:
b2:0a:a5:08:25:2a:8d:e6:d3:3b:7a:4a:99:f2:f9:43:ec:8c:
16:fc:c7:48:14:a5:3e:84:7c:ec:4e:ac:62:2c:69:3b:3a:ad:
13:44:e7:c6:a2:a2:8c:c2:e7:38:43:6a:77:8b:15:16:af:0a:
e8:4e:06:be:c6:63:ff:53:35:83:c4:a6:6b:2a:57:ef:be:98:
6e:01:15:26:23:fb:1f:9b:8c:55:9c:5d:10:b7:d7:f0:ce:66:
e8:99:94:39:f0:00:84:a0:a3:f2:d9:eb:83:32:a0:92:1b:41:
7a:e5:1d:7a:06:6a:98:bf:be:8c:c3:ac:4f:b2:df:0d:d5:de:
9b:28:aa:4d:8b:60:4e:45:66:0b:ea:97:fb:1f:5c:5a:2d:2d:
e6:1f:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:02:29 2026 by rpki-client