Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: I6YgyUYfJdbbKE9epMgCpmEaQaf3e1SLF2csrvtGH98=
Subject key identifier: A3:90:D0:B0:5E:E2:E4:76:52:1F:3C:31:1F:9D:E5:B2:CD:FC:A0:4C
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01A0D3B85D6300D2311D3B605F4B38CA8ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 06F4
Signing time: Thu 24 Sep 2026 14:01:10 +0000
Manifest this update: Thu 24 Sep 2026 14:01:10 +0000
Manifest next update: Fri 25 Sep 2026 14:01:10 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: c3dPBNvNQ1hXzMxBF7K4l1y/HKHMZFR/bwwHLjoFx1k=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:5d:63:00:d2:31:1d:3b:60:5f:4b:38:ca:8a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Sep 24 14:01:10 2026 GMT
Not After : Sep 25 14:01:10 2026 GMT
Subject: CN=a390d0b05ee2e476521f3c311f9de5b2cdfca04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:8a:af:3c:9a:c0:2c:3a:96:c2:69:00:b9:
34:ab:d2:16:f9:c5:e3:53:e2:c7:ff:98:fa:a6:35:
05:33:4c:65:2a:28:ff:d7:38:10:89:da:da:3e:3b:
c1:8f:47:74:d0:ab:0a:1e:3d:f1:e9:c7:4e:4f:38:
11:b6:fe:8f:61:62:63:f3:b0:b2:0f:e9:2d:c5:1d:
8e:e2:e5:b5:7a:60:64:14:62:f9:ae:b6:10:24:01:
36:7c:cd:7c:d7:6d:b8:57:a0:de:af:43:08:51:0a:
41:8d:e1:3e:a2:b5:66:25:0e:f8:52:e1:50:34:bb:
2a:5d:e4:43:8e:b5:20:bc:fb:b3:17:c4:6b:8d:71:
f6:bc:a0:51:24:b8:14:19:50:4e:e7:7d:a9:42:d4:
d4:86:94:16:5e:b0:a8:1e:bd:5d:90:0f:ae:be:1a:
a6:72:9a:95:8c:70:10:f8:39:56:26:5d:68:cf:7b:
3c:4d:57:97:da:41:3e:b0:4f:40:51:6a:07:33:9c:
f2:63:29:8d:32:b2:55:30:b0:fe:43:ec:e9:4f:2b:
dc:13:5c:9f:1d:97:b9:48:76:3a:b1:26:73:ff:d3:
4a:30:96:0f:13:96:d0:ea:bb:38:75:a8:71:bd:bd:
6a:7f:33:1b:11:89:5c:45:67:e1:6c:92:91:89:f2:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:D0:B0:5E:E2:E4:76:52:1F:3C:31:1F:9D:E5:B2:CD:FC:A0:4C
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:75:fe:52:ae:f0:41:fe:26:b7:39:79:5f:bb:f1:c5:51:8f:
08:7e:0d:42:53:04:a4:72:7c:68:69:94:bc:05:14:d2:86:e6:
3e:16:e8:f9:af:f0:00:f6:2f:15:0f:c9:86:34:8b:84:43:bf:
30:15:3e:0e:fb:40:b7:00:d3:35:1e:34:33:96:91:16:13:f4:
50:f8:7c:6e:fb:b0:2d:47:63:43:3d:b2:e6:7c:6e:ec:0b:6b:
a6:da:77:8a:96:c2:05:35:ce:a0:72:ae:84:4a:f6:13:f6:c2:
ce:b5:55:76:50:ef:98:0e:ec:a3:f9:bb:30:a0:2e:39:78:58:
08:10:1b:0b:1e:03:ab:80:0a:c4:34:fd:8d:6f:29:a2:6b:12:
3a:bb:d2:ee:91:7b:85:85:84:f4:10:59:ea:d3:12:20:87:51:
b8:68:71:7f:d5:a4:a2:34:97:d9:fa:41:f2:f7:15:19:0b:a3:
57:aa:d4:e8:e6:e0:62:ec:78:ec:6a:5e:34:31:7a:91:59:fa:
13:64:b5:15:7f:f9:2c:ef:77:a7:4a:70:47:bc:67:94:0e:93:
d3:8a:33:26:50:ec:b7:aa:73:55:4c:c9:1c:6a:fa:d7:00:04:
32:bb:17:58:3f:21:85:2d:f1:27:8c:bf:25:6c:39:21:78:a5:
e7:e1:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:33:24 2026 by rpki-client