Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: ajQoVozkujzqjpYIpvbhMoSlgrlT/9/V1KcSHdPyFW0=
Subject key identifier: FB:93:59:BD:EB:BA:F3:30:A4:95:F0:4D:F4:65:42:93:00:16:54:A4
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01A0C58E56FD22DE92CE3CABF4788C302201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 20:00:34 +0000
Manifest this update: Mon 21 Sep 2026 20:00:34 +0000
Manifest next update: Tue 22 Sep 2026 20:00:34 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 2f3esDUjR98oRaU5xF92gP02Vhis830XC4UeGqYPxdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:56:fd:22:de:92:ce:3c:ab:f4:78:8c:30:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Sep 21 20:00:34 2026 GMT
Not After : Sep 22 20:00:34 2026 GMT
Subject: CN=fb9359bdebbaf330a495f04df4654293001654a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:6b:76:e2:2a:f3:89:98:3f:6e:31:01:68:
aa:b6:69:37:b8:4e:e7:25:d6:27:c6:00:1f:b3:2f:
29:83:11:90:9c:78:94:89:57:f2:76:d9:fe:3f:45:
ea:0d:94:45:83:45:9f:88:23:09:a1:7d:70:94:71:
77:9f:da:fb:65:d9:8e:52:a0:6c:05:3f:8d:ff:02:
2d:a6:af:4a:84:09:f1:ee:9d:d4:de:67:5c:5e:9e:
f5:c5:92:e7:a2:e7:4f:11:0f:94:ef:d4:c7:ea:04:
85:48:9d:90:11:89:a0:4f:eb:df:42:de:46:02:e0:
67:bd:f7:05:3e:f0:c3:4c:10:3d:07:4d:2c:6c:b3:
bd:71:cd:ee:7c:94:b2:22:20:16:9e:25:0e:b2:64:
f0:3f:ae:0c:07:35:47:ef:c9:fb:51:05:66:24:a6:
06:e6:77:2d:a9:a9:fc:b2:45:f6:4f:a8:51:e7:df:
26:67:72:43:e5:62:42:86:c9:62:8d:34:be:4e:8b:
3f:cc:77:f9:2d:99:54:f6:2d:b4:24:89:e5:96:36:
90:7d:6a:bb:4e:ed:36:df:04:83:e7:3b:ff:f9:16:
b1:ae:41:42:52:a1:06:ed:45:67:71:a9:eb:3b:c6:
ff:a6:61:c6:5a:88:b6:d0:d2:36:bf:99:fd:0c:57:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:59:BD:EB:BA:F3:30:A4:95:F0:4D:F4:65:42:93:00:16:54:A4
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:89:aa:47:50:7e:48:27:0d:00:f1:bb:db:c7:7d:04:f2:5b:
34:ef:6d:6d:68:1b:0e:35:7a:64:9d:1a:cc:b9:52:23:4b:2e:
0a:3f:a5:18:5a:1c:2b:18:b9:99:0b:9b:29:38:f0:f2:64:85:
66:15:ba:39:18:18:cd:b9:9a:25:52:82:52:e6:f5:90:5f:40:
5f:a0:e1:9e:a6:50:24:33:58:1c:b4:5b:b6:d6:0d:81:1e:aa:
2b:97:7f:ba:07:a1:f7:9a:73:8a:60:a6:fa:23:4f:5e:a1:e5:
2b:45:08:99:b5:a5:f7:de:1b:89:8e:2c:0a:ee:3a:7c:27:1e:
ee:a1:da:0d:72:af:10:58:0a:47:e4:23:2b:27:7c:f4:5b:26:
11:e3:25:05:eb:db:fe:fe:e6:aa:c8:23:67:c7:53:ab:db:67:
35:30:a4:2a:24:13:97:a6:f5:a5:40:7f:79:6d:f7:8c:8a:43:
f9:eb:66:37:0c:87:2f:5d:ab:ca:75:69:cb:8d:25:b9:e3:ff:
8f:c3:28:2a:71:c7:83:2f:93:b2:27:97:2d:df:db:6b:26:e4:
fd:90:d1:c8:2d:3e:64:e1:04:0d:66:0b:24:6f:3f:fe:79:7b:
a0:07:85:11:bc:f3:0a:28:2c:98:90:6f:c0:73:fd:ea:cf:cc:
54:d1:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:58 2026 by rpki-client