Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: QxQYR74x5YOrWHJ29BNkyNzZ2LgajNW46DyXMe6XtNA=
Subject key identifier: 46:72:BF:F0:C4:AA:46:C3:A8:D2:E2:F7:9E:84:A2:BB:71:86:2E:69
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 01A0EEC25D6A6B8D9949CCCB09A0DBBB585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0EBA
Signing time: Tue 29 Sep 2026 20:01:50 +0000
Manifest this update: Tue 29 Sep 2026 20:01:50 +0000
Manifest next update: Wed 30 Sep 2026 20:01:50 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: MEt4/RYJusbs48N0ZDw5NN5EYdBskVlL0ukSgTWPQ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c2:5d:6a:6b:8d:99:49:cc:cb:09:a0:db:bb:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Sep 29 20:01:50 2026 GMT
Not After : Sep 30 20:01:50 2026 GMT
Subject: CN=4672bff0c4aa46c3a8d2e2f79e84a2bb71862e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:ad:7a:12:68:8e:bd:7d:0d:bf:b3:7c:16:
14:d6:36:be:24:90:e4:f6:1c:f2:cc:ea:4a:f5:bc:
4d:99:bf:00:5d:8d:36:52:6e:ae:03:45:83:2e:c8:
db:12:84:b4:5c:35:81:b5:af:0d:0c:fe:1e:d2:7c:
42:12:fe:f5:19:4d:09:5e:01:e8:a1:13:5a:7c:fc:
6e:fc:42:4d:56:f5:db:65:b1:f7:67:9a:b3:8a:c8:
72:1e:3d:a1:39:ce:52:e1:8a:7a:36:e5:c4:18:1c:
6a:bf:60:de:97:45:a8:cd:80:98:d4:0f:6f:6f:67:
7c:4f:3d:1e:5c:f1:76:7a:f2:bd:10:c4:ad:d9:c9:
59:25:b6:cb:99:12:69:80:8d:66:43:27:9c:a1:3f:
2e:7f:cf:2a:71:b0:ef:c3:84:fd:93:39:44:a4:15:
15:69:0c:52:f2:37:1f:05:35:d6:a8:d4:80:bc:bc:
11:19:db:bb:00:61:37:4b:58:16:7d:db:a4:4e:d5:
a9:31:5f:16:32:89:91:57:df:3b:07:4f:ef:2e:5c:
52:3e:cb:b2:66:80:4e:3c:9b:31:e5:a0:1a:7d:cf:
c4:3c:5a:42:94:b2:2e:e8:15:7a:09:c2:25:e3:80:
86:f2:b3:3a:3e:bb:b1:15:d6:be:fd:3d:d8:42:9e:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:BF:F0:C4:AA:46:C3:A8:D2:E2:F7:9E:84:A2:BB:71:86:2E:69
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:8b:1f:55:95:85:f8:e6:3b:00:28:53:0e:e1:75:89:66:
f5:68:d5:8f:c1:d1:d0:8d:17:c8:4c:00:7b:a3:bf:7e:5c:34:
76:16:3e:4c:3e:55:71:9e:3c:7b:85:d7:18:c7:0b:77:e9:53:
c5:e4:25:f1:b8:eb:1d:95:17:d1:4a:8b:75:69:d4:da:19:9e:
43:86:cd:a8:5c:7f:d5:09:46:22:c6:8d:9a:72:47:db:95:58:
fc:51:9e:2b:5a:98:b8:ba:04:ad:e5:79:66:bd:45:5e:76:4e:
09:0c:f2:0d:3c:04:e0:c7:70:66:ad:60:b9:1a:f8:6b:6f:0c:
67:ad:74:4e:da:20:34:a1:95:40:f0:37:c5:e0:df:bf:88:aa:
15:2b:63:97:1e:36:3d:7b:63:eb:a4:96:10:eb:39:c4:a4:4c:
6a:6f:ae:a8:39:dd:b5:85:eb:41:70:50:35:05:ec:85:d2:96:
35:cb:15:a8:ba:7b:48:f8:1e:23:0a:e0:48:36:f5:db:9d:1c:
c6:ee:1d:04:90:5a:d8:02:1c:38:1f:0e:1a:8f:a7:46:5d:48:
49:35:30:34:30:67:5c:6c:27:20:e8:5a:ab:e9:f9:72:b2:93:
7f:5b:60:b9:d9:cb:e8:7f:13:0f:87:40:4d:8d:6a:ee:94:0c:
1e:dc:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:54:36 2026 by rpki-client