Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: u0iCt31QhNihuAd7Lu/yacs3j0ZLgKPKdySTSyvwTBc=
Subject key identifier: 3E:7C:3E:F8:B6:A3:F1:77:9F:3B:6E:BB:D8:BC:8D:F9:FC:0A:FD:EE
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 01A131467EBD67E560F3B637CF5157D6BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0DD6
Signing time: Mon 12 Oct 2026 18:01:05 +0000
Manifest this update: Mon 12 Oct 2026 18:01:05 +0000
Manifest next update: Tue 13 Oct 2026 18:01:05 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: CltD8ampP6TmvqCqMOFJ8Vk11944sKBQqOZDn7wWEjs=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:7e:bd:67:e5:60:f3:b6:37:cf:51:57:d6:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Oct 12 18:01:05 2026 GMT
Not After : Oct 13 18:01:05 2026 GMT
Subject: CN=3e7c3ef8b6a3f1779f3b6ebbd8bc8df9fc0afdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:97:92:64:78:ec:ae:a1:b6:a4:ba:fa:7b:f1:
95:c6:25:65:5c:22:c5:f1:05:4f:d3:4d:4a:ed:e9:
b8:e3:bd:7b:5b:e6:c8:31:37:f4:2d:3e:e1:ee:1e:
b9:b6:89:0c:18:ff:c3:dd:93:ec:f2:07:1c:d9:c8:
51:e0:81:f0:9d:91:9f:be:48:c1:3c:1d:9e:7c:70:
12:d4:d4:1b:02:df:eb:15:9f:59:5f:4b:81:55:32:
cb:6f:06:11:8e:26:06:9a:ed:dc:d2:53:a0:e7:54:
61:fb:b3:ec:3d:29:a7:67:f0:c0:ec:db:45:ab:3b:
cf:55:b4:7c:0b:84:56:d8:37:86:e4:64:a3:c4:f9:
9b:62:64:8f:5f:01:18:7c:94:45:5b:95:b2:18:bb:
40:94:fb:71:74:68:b1:74:3d:4a:48:47:17:31:4b:
b9:a0:b1:1c:87:66:76:bf:1e:c7:d5:81:ae:b6:01:
17:8d:29:55:8f:db:1d:1e:8a:15:ee:b4:6f:d9:06:
8b:e5:af:7f:16:5b:fc:d1:fd:c0:41:07:07:dd:f9:
60:8c:18:cb:86:8b:73:18:70:21:97:0d:b6:9d:8c:
b6:1a:c9:95:5a:26:95:22:f9:66:33:be:95:f2:3c:
34:ae:b0:d5:1e:a3:75:fb:87:ab:24:f0:41:27:8e:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:3E:F8:B6:A3:F1:77:9F:3B:6E:BB:D8:BC:8D:F9:FC:0A:FD:EE
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:cd:c8:ee:fb:92:1b:f7:d7:0b:70:dd:3a:41:dd:6a:f8:
7a:68:e1:1d:29:9b:79:4a:b9:63:b4:c1:bf:24:e6:5d:1b:b4:
51:b6:d4:86:12:13:30:e9:3b:d6:43:1b:a5:b7:97:b0:a5:28:
0d:fa:d1:5e:fb:19:b5:5f:9b:e5:fa:f0:2b:19:d5:8c:c7:c7:
d7:94:f0:7b:12:b2:c9:92:cd:8f:d5:0d:ba:13:c9:7d:3f:c6:
14:3d:5e:81:ca:c7:18:60:55:e2:48:5a:d6:16:5e:1e:64:d9:
7d:82:b0:50:83:47:eb:e7:5f:b6:1f:b8:a9:11:37:87:f1:8d:
77:1c:fb:49:c8:3f:3c:ef:b4:c1:e7:ef:25:bc:6d:ed:03:2f:
50:94:9d:81:f4:b6:b0:27:4c:86:b5:2a:67:42:25:a5:e8:36:
11:d5:2f:26:4b:94:a9:a3:fb:74:51:f2:99:c9:c9:ae:e2:d1:
19:ad:0c:a8:e5:e8:84:68:29:9d:5a:47:fb:e8:53:39:b2:dc:
13:52:7f:ee:8d:5f:4e:99:7a:b9:c6:ce:d9:eb:b0:aa:e3:05:
12:8e:bb:20:62:0d:3e:9a:c9:5d:c7:58:f2:95:63:6e:ef:5a:
8b:7b:91:5c:2c:5f:e2:55:13:e4:f3:c6:cb:cf:cb:76:f6:87:
09:b5:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:46:19 2026 by rpki-client