Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: WPGko9fS1FhVw7ThfAXXrKcIwymCTX1TbuZjj+faNPI=
Subject key identifier: C1:A4:B8:F1:22:06:35:EC:CB:B0:26:32:CD:9C:20:1B:F2:44:09:7F
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01A108817F98DCAE1F732EBB6897662D5C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 20:01:06 +0000
Manifest this update: Sun 04 Oct 2026 20:01:06 +0000
Manifest next update: Mon 05 Oct 2026 20:01:06 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: q4nTSNnrinwJ5DUe2PZ0edK9GnhWIbDxm0nnem87khk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:7f:98:dc:ae:1f:73:2e:bb:68:97:66:2d:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 4 20:01:06 2026 GMT
Not After : Oct 5 20:01:06 2026 GMT
Subject: CN=c1a4b8f1220635eccbb02632cd9c201bf244097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:c4:49:73:32:3f:02:97:80:ff:c6:8b:71:
dc:4a:07:95:7b:77:9d:83:84:98:f0:10:b9:d3:78:
4a:d5:cd:87:dd:a7:c7:6d:94:8b:83:73:a2:5c:85:
20:25:96:2d:9f:86:f6:6b:a6:98:19:74:ea:8b:98:
61:d1:95:76:c4:16:e6:a8:72:7b:ab:59:dc:4c:83:
24:91:df:bd:a0:03:e2:45:f1:52:96:0e:31:54:41:
8b:a0:b0:bd:05:97:53:63:79:6d:a0:1b:87:9c:17:
f1:09:94:9a:6e:fc:24:31:76:82:b9:b0:84:9a:85:
f5:02:ee:4b:e0:6f:56:dd:b1:a9:32:68:70:2e:21:
33:1a:f2:7a:55:a1:dc:7a:63:b7:ae:13:7d:3e:30:
1a:2f:0f:47:95:b6:9e:3b:63:ed:0d:68:10:c2:e1:
05:35:58:8f:c1:93:e3:f3:ed:65:bd:f1:07:04:72:
52:2d:4b:25:61:16:ff:ea:14:6e:5e:f3:13:cb:55:
96:3e:8b:d5:35:fa:95:6a:4e:fc:d5:8a:26:09:d7:
9f:36:ee:bb:4e:3d:9c:f5:5b:fd:d1:8e:f0:ee:9a:
32:e0:a7:73:d5:6d:e8:c0:de:51:42:77:6c:b2:b1:
96:5f:99:ea:6c:c2:05:01:a4:bd:76:c6:31:36:68:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:B8:F1:22:06:35:EC:CB:B0:26:32:CD:9C:20:1B:F2:44:09:7F
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:8b:5a:c1:42:22:4b:00:5c:cf:37:2b:d1:cb:bf:6a:6d:
1c:a4:89:60:ea:b5:13:27:ad:d1:92:f8:1e:fd:5a:c0:10:97:
fc:8e:50:c9:d3:9c:3e:fe:fc:5d:d7:47:6b:47:9b:7c:5d:35:
f7:89:a4:e9:46:1c:18:4f:54:16:e9:ad:a0:ef:c4:01:b6:30:
bf:11:86:74:11:f4:68:3d:74:ff:c1:1a:8f:69:f3:62:cb:14:
ef:ed:d5:be:c0:a3:99:20:1c:66:1b:a8:bc:47:f1:fa:7f:69:
bc:f9:d0:b2:63:75:f4:a9:c6:c5:cd:ce:93:7f:4f:fb:24:b0:
12:66:f8:9f:46:23:ef:27:fe:a0:4d:e8:ba:04:98:1e:34:c6:
af:3a:12:0c:e3:94:3a:b5:76:ab:df:39:5b:2c:1d:e6:b9:0a:
79:86:44:c1:b0:f1:c2:59:32:15:0d:22:e1:4f:fa:2e:ff:05:
d6:3c:17:57:d6:d5:25:08:71:c6:92:65:95:38:4a:a8:ed:10:
f3:57:9c:04:99:ae:e3:c4:b1:d7:bb:5f:9a:25:97:fe:9d:ec:
93:ad:3a:5a:c7:d9:9f:a7:e3:4f:0b:7a:02:4a:29:c0:e8:95:
e0:03:cf:89:13:eb:12:b8:95:ca:d1:5a:1d:81:39:a0:b2:69:
27:ba:7a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:19:33 2026 by rpki-client