Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json)
Hash identifier: cz0GNihFtkngDfZMOGb/5JKAF2A70V/nqXUVU1U2zf0=
Subject key identifier: D8:08:C8:0E:B1:3F:9F:AD:02:A3:03:C9:7D:E3:2E:82:40:3F:46:F3
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 01A0BDD4DA0596BC4FA14E21D8CCE3C768CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
Manifest number: 0362
Signing time: Sun 20 Sep 2026 08:00:38 +0000
Manifest this update: Sun 20 Sep 2026 08:00:38 +0000
Manifest next update: Mon 21 Sep 2026 08:00:38 +0000
Files and hashes: 1: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: KyOxfu+Aaj7+VssIG3zrncwl0jjgYVMjQhfDbEbxyj8=)
2: eBvOcPc94TyvILGqHKvTDoMdG8c.asa (hash: tkdxw+1V9UvokM8aGYSRDXSz9Kd2tdbJUPMjzayWr5c=)
3: zXbldvcMA8dN_ba2zMyuoEGBz54.roa (hash: NXKCqlTZSC9M+ZHIabHezkycT+ugW1bhgAKQFOCfYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:da:05:96:bc:4f:a1:4e:21:d8:cc:e3:c7:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Sep 20 08:00:38 2026 GMT
Not After : Sep 21 08:00:38 2026 GMT
Subject: CN=d808c80eb13f9fad02a303c97de32e82403f46f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:27:fb:3b:62:28:72:8c:54:b5:a9:54:79:
c9:e4:9f:76:0b:fc:45:1e:70:7b:ed:69:18:3e:10:
f9:cc:fa:a1:d9:21:8b:be:ac:5a:36:11:53:9c:1c:
1d:ed:30:71:c8:b8:8a:62:da:1f:04:f1:29:88:3f:
19:1a:a1:bb:68:9b:9e:63:53:63:31:a6:23:4a:f3:
85:c5:bb:74:12:a9:2f:10:0b:9c:33:ff:be:9e:2d:
3c:0b:b8:93:12:59:49:0f:f4:ca:f0:24:60:43:19:
a7:8a:6e:6a:30:51:fd:ef:06:2e:bf:9c:70:b3:83:
56:ae:3c:9c:be:c2:8d:51:b4:fa:0d:e7:5f:c4:89:
2d:51:50:83:c7:17:69:c1:27:47:f1:21:e8:1c:c0:
b3:fc:9b:aa:ab:bd:bb:97:1e:03:4f:a9:e5:52:5c:
6f:4c:0c:55:31:69:26:f7:c8:96:53:51:f2:27:93:
59:40:06:1c:96:21:14:37:44:72:2c:ad:44:37:46:
5b:cc:1e:63:93:62:6f:f7:89:0f:9f:aa:e0:68:f7:
61:6a:f2:dd:6a:39:17:df:0c:47:fd:90:88:62:d9:
7d:7e:e6:99:ea:58:00:74:12:99:d3:ee:19:01:f0:
e3:e3:bb:a7:ff:75:95:ed:0b:e4:73:1c:07:82:2e:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:C8:0E:B1:3F:9F:AD:02:A3:03:C9:7D:E3:2E:82:40:3F:46:F3
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:d7:c8:6f:19:cd:9b:22:f3:90:3f:18:07:44:22:bf:25:
f3:5a:a7:62:3c:6e:4b:b6:40:eb:9d:37:0f:fd:74:8e:2d:5b:
c4:43:a5:af:53:41:a2:3f:6c:c7:e9:7d:c4:45:28:83:7d:24:
eb:f2:d1:40:36:f9:cd:c5:82:3f:c8:64:1a:b8:ba:9a:d0:15:
b5:36:14:08:01:65:fb:46:5d:7a:8a:57:18:5e:61:1a:bc:22:
c2:50:22:a9:57:74:d6:de:81:dc:e6:ff:fa:81:65:9c:ff:5f:
19:b0:5d:f2:a7:fa:c3:6c:87:0c:32:39:18:98:f3:dc:6a:f1:
41:b8:03:11:e6:e2:7b:48:1b:67:54:92:55:69:f2:4c:87:9c:
24:e1:dc:ce:86:1f:ba:56:4d:0d:29:08:1b:75:91:87:28:12:
7b:66:8c:3f:df:f4:d9:6c:c0:41:f2:81:21:37:76:f6:77:0e:
c3:4b:95:d9:fb:58:28:82:13:e5:a0:c3:4d:c1:3c:3c:e9:3b:
af:84:98:74:1a:de:2c:b9:e4:66:31:14:1a:42:de:ec:60:1a:
73:0c:29:fe:ee:72:6e:74:3e:6f:ec:48:f3:9c:28:1e:08:00:
0b:4a:28:15:eb:60:9e:75:22:b3:14:41:a5:5a:0d:f9:b8:07:
4f:12:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:11 2026 by rpki-client