Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: 9uKlP2uhjowpxvjJ8ScNP2S1RoSnp7pRi2bEbV4NxB0=
Subject key identifier: 60:58:84:4F:4E:3F:87:5A:23:80:2D:E2:D9:43:A5:8C:E3:1E:FB:E8
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01A0BEE781A6C339CAAC6E87B2351E2916C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 17AF
Signing time: Sun 20 Sep 2026 13:00:38 +0000
Manifest this update: Sun 20 Sep 2026 13:00:38 +0000
Manifest next update: Mon 21 Sep 2026 13:00:38 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: pNZ7qbFjsqPDbgk2p3tkWS9aMrQFXLpWFY/kccaxGMs=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:81:a6:c3:39:ca:ac:6e:87:b2:35:1e:29:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Sep 20 13:00:38 2026 GMT
Not After : Sep 21 13:00:38 2026 GMT
Subject: CN=6058844f4e3f875a23802de2d943a58ce31efbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:81:6c:7d:9c:91:1d:89:5e:39:49:98:4d:
d2:20:c6:18:05:0b:74:31:34:34:be:7e:b5:7f:b4:
6a:a0:7d:1f:37:ac:d9:a4:1b:69:fe:4b:b9:df:fd:
69:6b:9f:a0:35:c3:1a:92:7b:b6:81:59:cf:37:d6:
7e:4e:3b:48:35:f2:47:e8:94:e8:97:02:c6:9b:24:
f9:c3:9d:56:f1:19:22:4e:91:76:2d:86:86:eb:8d:
3f:2c:5f:49:ae:b2:d4:1e:05:8b:92:2b:5d:79:c6:
c7:43:ce:5f:6e:99:5b:16:65:06:39:82:30:76:58:
c8:75:2c:ba:2f:2b:7c:22:c3:84:65:9d:e5:90:78:
7f:e8:48:1e:f2:0b:2e:cf:ca:06:35:67:a1:78:e2:
1a:be:45:5f:1e:ab:d4:92:7d:d3:30:bc:30:91:53:
94:c8:b7:bc:90:f3:c8:5d:12:c3:e6:bd:f2:40:fd:
7d:52:a1:4e:b0:a5:d3:bb:40:5c:e5:fc:ec:42:97:
2f:9e:a1:07:97:99:74:40:c0:4c:01:8e:4a:df:9f:
7c:e1:2f:91:63:04:6c:f8:18:34:0a:35:a2:8f:d6:
68:ba:37:78:00:92:4d:ab:0e:fa:57:8d:b2:a3:36:
93:39:4c:75:ea:f6:b7:41:c4:c6:4c:2f:04:5d:0c:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:84:4F:4E:3F:87:5A:23:80:2D:E2:D9:43:A5:8C:E3:1E:FB:E8
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:9d:74:b0:ca:97:ac:1e:ff:81:f3:19:8d:d6:89:1e:cb:
9a:04:91:9b:09:11:ea:79:8f:3b:1a:91:48:55:ed:66:62:e0:
f4:88:35:73:ed:12:97:f8:6b:f6:af:62:09:90:17:e7:00:d8:
a5:f9:e2:d1:57:88:1c:8d:e7:9c:ab:80:6e:54:a4:f9:28:50:
fb:a4:6c:1c:dd:5a:a6:50:0c:b8:b9:80:9d:3d:87:4a:de:d8:
94:1a:57:46:f1:b2:06:33:84:c9:1f:97:42:e6:c4:32:d7:cb:
a5:b6:01:c8:3c:1a:6e:a6:cc:52:aa:0e:da:95:e6:a8:c1:43:
7e:29:5e:da:b3:d7:52:52:30:d7:d6:bf:cc:62:1a:04:b3:7e:
89:a8:9e:fa:b4:68:4b:9b:84:5b:2f:b0:bb:69:95:19:87:06:
51:96:01:18:8a:7b:aa:c8:6f:8b:63:30:0e:8a:4f:1d:a3:f2:
c4:97:a1:ae:ef:9d:7c:bc:b4:b9:14:d6:3a:ab:40:39:3b:fc:
d4:98:46:d1:fd:26:80:05:4e:a6:f4:0e:66:10:99:2e:48:ac:
63:4f:0a:7d:a6:a1:5a:17:d3:d2:75:64:bb:9b:e5:20:39:e4:
89:6d:3c:b1:47:03:e0:38:9b:3c:18:59:96:bb:51:7c:ef:d4:
a4:22:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:36 2026 by rpki-client