
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier: ygCC+vFEUGim7kuJgxbbxlNRwLla55cr/4cnGaQRIQI=
Subject key identifier: AE:8F:38:33:38:1E:54:A3:9F:71:2E:4A:EF:A0:50:84:87:B0:7D:3B
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 01A0C40D836607F7F451995BA23AFD297581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number: 1A36
Signing time: Mon 21 Sep 2026 13:00:14 +0000
Manifest this update: Mon 21 Sep 2026 13:00:14 +0000
Manifest next update: Tue 22 Sep 2026 13:00:14 +0000
Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: JPluUWfwSa2OJRHWZEzXm2Bs8Kywvx1QNkwc+pnggfY=)
2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:83:66:07:f7:f4:51:99:5b:a2:3a:fd:29:75:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Sep 21 13:00:14 2026 GMT
Not After : Sep 22 13:00:14 2026 GMT
Subject: CN=ae8f3833381e54a39f712e4aefa0508487b07d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:d3:d8:9b:c3:50:38:74:14:86:d5:78:b9:
57:8f:36:f1:36:57:e9:c5:da:f3:b9:4d:9a:9f:fa:
8c:78:80:cb:b3:ba:f0:5d:02:b1:2e:0c:42:65:ad:
08:9d:b6:19:f1:e3:58:da:a8:a9:41:34:a2:1a:d1:
b6:8c:e4:66:b4:bf:a1:78:cd:09:07:8e:a8:5e:84:
a7:9e:08:e2:be:c3:36:da:21:c2:39:18:df:4c:41:
39:51:f0:e6:86:63:3d:1b:45:a6:56:84:94:06:67:
a4:62:50:9c:7b:d2:cd:62:6d:60:44:f7:0d:43:e0:
af:17:d7:9d:7f:b1:d7:27:00:91:13:b6:20:a6:be:
e7:c8:7e:eb:17:c6:27:44:97:6b:48:13:03:e2:35:
fc:aa:67:ff:bb:b9:2d:3e:58:03:61:75:5b:46:6f:
3a:10:25:a8:78:17:7c:a8:3f:1a:12:57:01:4d:e9:
ec:5b:3e:6b:b9:a7:1b:c2:59:3e:f4:3a:54:55:49:
5a:ed:7f:13:4b:86:d7:ac:07:7d:b5:ca:5b:7d:04:
43:7f:be:fb:9a:98:bb:4d:c9:3f:1c:01:92:96:e8:
b1:99:29:0a:c8:9f:5d:1b:25:ad:c5:d2:3e:09:f1:
4a:65:fe:29:13:59:e7:07:81:54:d6:c3:09:ea:29:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:38:33:38:1E:54:A3:9F:71:2E:4A:EF:A0:50:84:87:B0:7D:3B
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:83:c7:da:51:b6:84:5b:8a:69:27:d4:c8:4a:2f:f9:01:e3:
73:5f:fc:18:0b:ac:2c:17:9a:50:dd:21:99:a6:e5:5b:67:cf:
84:be:61:bc:0f:fa:c5:4c:d7:b5:27:3e:fc:fb:3b:31:53:0b:
49:3b:0f:04:68:78:c7:f5:99:10:3b:c3:ec:79:8d:e7:9b:4e:
1a:06:98:0a:8a:4b:72:ed:f5:fe:55:31:da:f9:38:81:ee:c6:
db:12:5b:a5:45:e7:3a:2d:16:19:50:5d:a6:4a:98:b4:32:8d:
ba:f3:81:d6:f5:a3:06:5f:36:3c:4c:d5:ac:4a:c8:9a:0f:25:
75:24:88:24:19:98:9e:92:d9:97:bd:62:94:2f:55:57:55:ce:
ba:f8:fc:4f:46:28:77:a6:fa:08:e4:2b:73:86:72:48:3a:c9:
9a:cd:fd:10:cf:9d:93:52:8a:be:7d:d5:6d:d6:ff:72:51:84:
fc:d8:6c:5f:9b:89:d6:47:1a:62:95:ed:bf:11:22:20:c2:cd:
f5:cf:65:e3:d2:14:f7:12:86:80:9b:a3:54:65:c9:26:68:8a:
01:91:91:da:f0:f9:58:e2:65:49:75:fd:32:7a:2f:32:a4:20:
44:29:31:95:8d:ad:00:b5:be:de:a1:0d:99:0e:4f:47:73:10:
11:73:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:07 2026 by rpki-client