Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: oRTrfFH95HBu8XLKzRHYTCowCRi5mOfyRMRJnZD2Fpc=
Subject key identifier: A6:AB:08:B3:12:57:6E:67:0B:42:6F:56:D9:39:1D:29:42:06:D2:6E
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 01A10881684755CD6DB0ECB3593D8D1B1CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 20:01:00 +0000
Manifest this update: Sun 04 Oct 2026 20:01:00 +0000
Manifest next update: Mon 05 Oct 2026 20:01:00 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 1b4n+wShbfxAOZujLvI1M6fvyqvBb7Ijl54o8VORAHk=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:68:47:55:cd:6d:b0:ec:b3:59:3d:8d:1b:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Oct 4 20:01:00 2026 GMT
Not After : Oct 5 20:01:00 2026 GMT
Subject: CN=a6ab08b312576e670b426f56d9391d294206d26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:df:2b:87:da:40:ea:e5:51:86:4e:6c:de:
7a:f8:bc:df:fa:a7:ed:f9:e0:43:9d:d2:41:f6:69:
68:0a:7c:57:04:5e:04:a3:b7:a6:54:58:dd:bd:12:
71:05:3e:f5:e2:49:b5:33:35:9e:1d:2c:8c:36:17:
86:ff:e3:b9:ec:b5:c3:78:57:e9:de:21:b2:e8:65:
a0:a4:f1:4d:9e:37:ec:a7:8a:c4:45:7a:ba:25:c1:
e9:e2:6a:d3:b3:ab:fc:68:72:23:80:20:11:a5:5f:
c0:0a:43:df:6b:b0:65:1f:6a:a8:96:73:2a:55:41:
ca:53:ca:17:d5:2e:7e:0b:5e:12:a8:c1:66:ef:c3:
cd:0e:6b:a1:be:2c:57:69:b6:4b:93:ec:30:9b:53:
89:6e:24:93:72:cd:34:fd:b1:d5:91:fb:08:b0:2f:
d9:aa:ba:39:e1:3f:39:df:21:c9:33:0d:58:21:76:
b5:34:57:bd:c9:92:0a:fb:b2:e0:4e:a9:de:6b:4f:
05:9e:a3:bd:97:02:fd:d3:18:23:92:4d:f5:6f:44:
d9:4e:ae:70:6f:e8:5f:a8:9f:9e:dd:60:f6:2c:e7:
70:77:3d:5b:00:83:fb:5f:5c:06:47:4a:23:5d:24:
18:fc:d1:a4:12:30:d6:8b:b9:9b:70:ce:db:2f:49:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:08:B3:12:57:6E:67:0B:42:6F:56:D9:39:1D:29:42:06:D2:6E
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:73:30:95:ee:b8:23:5c:bb:65:bd:7b:58:9e:39:54:40:bb:
20:fe:fe:70:b9:19:26:41:79:84:d7:80:c8:db:99:8e:fc:ad:
64:ea:6c:2f:9a:67:f3:b0:c7:04:72:87:42:41:d0:bb:d5:d7:
61:fa:4b:3a:ac:f0:f7:8c:4c:cc:b0:34:eb:27:0e:b6:37:1a:
a5:51:53:02:5c:6a:23:c3:1c:75:b7:3d:ed:af:e1:99:de:67:
b2:e4:58:41:0d:44:72:41:44:59:30:cf:39:f7:57:1f:8a:59:
9d:4b:9c:72:ce:41:a4:8b:88:2c:31:98:45:1d:11:3e:d2:5f:
c0:d5:03:21:61:a5:a5:44:5b:57:e0:a9:8f:7b:8d:6e:02:c9:
8d:af:18:78:6b:74:d2:19:eb:6b:ba:5b:1e:78:0b:78:16:26:
ea:30:81:f5:98:9b:89:07:20:59:dd:f6:d3:96:a0:21:4c:74:
c7:17:1a:2e:de:a0:4e:a7:7a:87:18:ac:9d:30:be:c9:17:6d:
eb:4f:11:8c:8f:37:61:f1:26:90:35:3a:d4:c2:34:d7:40:91:
4a:65:eb:e3:81:31:2f:48:db:0a:1f:8b:75:98:cf:0b:14:ba:
ea:ae:85:d8:43:b7:de:bf:38:a6:c5:2e:ce:15:63:14:0c:71:
40:78:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:30:47 2026 by rpki-client