Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json)
Hash identifier: vCbLBQ64jZic9buyObFrSMzKlRBfyELVnwfJ1qBIEVs=
Subject key identifier: 4E:42:A6:29:02:AD:8A:B3:D7:5B:2C:C7:41:72:26:46:FF:E9:65:64
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 01A1A970A6FCAC6CFA496BC92143A6DB4D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
Manifest number: 03DC
Signing time: Thu 05 Nov 2026 02:01:34 +0000
Manifest this update: Thu 05 Nov 2026 02:01:34 +0000
Manifest next update: Fri 06 Nov 2026 02:01:34 +0000
Files and hashes: 1: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: GsLOKZZBKRcDNrrRUoqHhwfTv49WDBwYx5qFLywKyDU=)
2: eBvOcPc94TyvILGqHKvTDoMdG8c.asa (hash: tkdxw+1V9UvokM8aGYSRDXSz9Kd2tdbJUPMjzayWr5c=)
3: zXbldvcMA8dN_ba2zMyuoEGBz54.roa (hash: NXKCqlTZSC9M+ZHIabHezkycT+ugW1bhgAKQFOCfYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:a6:fc:ac:6c:fa:49:6b:c9:21:43:a6:db:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Nov 5 02:01:34 2026 GMT
Not After : Nov 6 02:01:34 2026 GMT
Subject: CN=4e42a62902ad8ab3d75b2cc741722646ffe96564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:3e:68:95:3c:98:8f:72:2f:a5:c5:31:7e:
08:58:b7:af:d8:b9:9c:e6:47:a0:20:9e:2c:95:c2:
21:84:4f:58:2e:c1:26:33:e2:68:cb:cc:53:e3:a6:
e6:42:be:5d:47:a6:d5:73:ab:a7:3a:05:f4:07:7d:
7a:d1:24:50:c9:e5:7b:6a:a7:1d:29:ac:5a:ee:64:
3f:d8:ab:21:b7:d0:0c:d5:22:0e:8d:eb:37:fb:5e:
77:a9:b6:21:86:b2:c3:97:28:7f:43:10:64:f3:68:
c0:4b:20:78:18:9f:88:67:82:6f:88:4d:68:a9:72:
fd:00:96:2f:73:95:b7:85:c1:09:e5:81:1f:be:82:
82:50:7b:11:0d:60:6d:3b:17:3d:04:1e:fe:56:f0:
d1:35:da:01:33:cb:ef:00:00:e9:98:eb:f5:c2:17:
77:71:02:7f:26:37:98:df:89:fd:d6:c5:8b:89:a1:
ab:09:8d:41:98:b0:c7:27:2c:f5:71:5c:eb:92:58:
7e:30:21:c4:20:a1:49:ca:56:be:c5:6c:64:91:57:
21:32:1d:7e:55:0f:d5:ed:2e:8c:34:f9:f8:e2:28:
36:a3:4c:83:9c:2e:d6:bd:b8:f2:43:b5:f0:c1:05:
01:3c:de:31:ad:85:22:f2:9d:ef:49:95:0b:46:6d:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:A6:29:02:AD:8A:B3:D7:5B:2C:C7:41:72:26:46:FF:E9:65:64
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:a5:df:c4:91:1a:3a:3c:23:68:25:77:ce:a6:7d:42:10:
3f:a0:59:ab:df:3f:93:28:68:28:bb:7f:8d:7f:c9:fc:df:92:
7c:27:7d:f5:7b:32:53:64:0a:ce:9a:13:91:7e:30:69:8e:48:
43:44:56:67:25:a7:98:c5:19:f0:7d:75:a1:cd:bb:c9:9f:56:
35:37:99:00:52:e1:84:71:4a:3c:e6:70:fb:54:4e:96:5b:cd:
17:0a:34:2b:10:be:d3:10:e9:03:14:6b:9f:b1:c0:20:a9:c1:
5b:c6:70:21:a6:36:71:28:d4:50:c3:4c:af:53:ff:e3:42:3a:
61:0f:de:25:b1:2d:02:30:08:e5:cc:89:fc:90:f5:ab:e3:51:
33:77:05:d7:cc:6e:10:dc:86:f1:45:56:85:ee:91:d9:8e:99:
28:46:52:cd:1d:74:0d:24:5f:b4:3b:8a:76:25:c4:0c:90:2e:
5a:12:07:f8:7a:35:c4:ab:12:fb:9a:5f:b6:26:24:ce:1e:1d:
2a:e4:1e:39:8d:d8:07:ca:ec:08:09:e5:35:cc:b5:1b:19:aa:
70:74:29:b4:d0:35:3a:97:4c:50:dd:e2:e3:4b:4d:4f:0e:a1:
5c:eb:17:92:87:81:01:4d:27:16:e8:e0:1b:8c:71:68:f1:40:
ad:17:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:31:01 2026 by rpki-client