Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.mft (raw, json)
Hash identifier: Sz17+6URSr/vfrNw5PUoFVwT/1cX6JBToR+nx0muiA8=
Subject key identifier: A8:BF:1F:2C:10:2D:38:01:72:38:62:A2:C9:B2:AF:5E:75:16:2A:9B
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 01A0D5DECA56769D6C6419E3C38D5716BBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:22 +0000
Manifest this update: Fri 25 Sep 2026 00:02:22 +0000
Manifest next update: Sat 26 Sep 2026 00:02:22 +0000
Files and hashes: 1: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (hash: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=)
2: CmhbcVcgw2L0zL11CmEz0z6pzUg.crl (hash: Y+l1ncXmI4bqXf5wUBWmUJ20xrrC+qVYuou/XIPZfPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:ca:56:76:9d:6c:64:19:e3:c3:8d:57:16:bb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Sep 25 00:02:22 2026 GMT
Not After : Sep 26 00:02:22 2026 GMT
Subject: CN=a8bf1f2c102d3801723862a2c9b2af5e75162a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:e4:d1:ec:f1:cc:03:f6:e8:2e:8b:f8:9f:
0c:70:9e:44:16:c6:85:e4:32:75:55:11:78:ef:e3:
50:c0:d2:43:09:39:53:90:b7:c9:05:7b:f3:f1:4f:
a5:02:04:b9:49:98:d8:2d:57:19:53:00:5e:51:33:
f8:ac:0d:9f:92:0b:4c:58:ef:93:36:8d:60:0f:65:
fa:20:06:70:b6:74:8a:2e:34:ca:e4:86:39:c1:03:
d6:87:8d:a6:fe:13:57:42:e8:88:66:4e:cb:ec:5a:
09:72:db:a1:df:bc:fb:83:5d:fc:4f:8b:0d:a5:da:
81:b2:ce:16:fd:82:aa:31:b2:32:ae:b9:05:0f:6b:
fb:9e:ce:2e:66:8d:b3:32:11:e1:67:62:41:c7:f1:
87:7d:6a:a5:01:6f:6f:6b:72:e4:20:f4:0c:60:ec:
2c:f1:d1:a2:83:98:de:8c:5c:d8:d0:a2:84:27:46:
c9:58:44:ef:5d:ba:6d:13:54:85:55:14:99:d1:b7:
c6:60:1a:b4:dc:d2:83:b2:f1:e0:e1:79:a9:b1:26:
4c:c6:18:44:8c:06:14:a3:d7:54:29:14:b3:26:9f:
eb:7b:c9:4c:f7:60:ee:74:7f:93:1b:a2:62:8c:1f:
85:52:db:a9:9f:0e:1d:80:55:51:ad:d5:5b:08:a1:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:1F:2C:10:2D:38:01:72:38:62:A2:C9:B2:AF:5E:75:16:2A:9B
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:ce:30:9a:5e:27:d7:13:b8:3f:13:d8:5d:bc:3f:c4:45:
08:e7:b3:3b:99:33:c3:8e:26:b4:74:ac:03:7b:ae:2a:fb:b6:
0a:88:0f:8c:66:ee:a6:3a:2a:82:0b:23:fa:13:62:36:8a:e3:
63:c9:b1:85:90:74:7f:4b:bf:22:be:06:0a:e0:93:b4:b1:a9:
05:f6:53:3e:46:6b:bb:fe:4b:06:64:51:9b:02:83:cd:f6:a3:
9d:7b:69:33:48:f5:0d:35:a2:fc:84:27:ba:8d:98:67:8d:e6:
8c:17:a1:2e:83:ac:c7:d7:f0:b6:f1:b7:0d:fe:b0:e6:ab:54:
53:9f:45:ce:34:e0:da:ab:c8:5a:0a:4e:4a:4a:03:6e:0b:a5:
39:49:47:5a:4c:f8:c8:62:85:7b:b8:c1:09:f5:6c:14:7b:00:
0e:e4:2a:98:d0:9a:64:fe:fd:a2:d8:7f:85:8a:5f:d4:5c:eb:
b9:81:15:a8:74:09:e7:64:bb:f2:7c:49:8e:c2:d9:d8:57:15:
80:8b:d9:e5:4d:54:4f:68:17:88:26:4e:31:de:99:cd:33:54:
5d:ea:91:07:85:a0:52:41:b3:9b:bc:aa:a2:02:a3:51:8c:ed:
2e:3c:af:37:b4:86:b0:76:ae:b0:7e:90:d5:63:67:c8:52:d9:
57:0b:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:41:02 2026 by rpki-client