Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: oQyClrBGcsAcIyOYA/8Mg1AKNTrycmM7NncWMYrxnX8=
Subject key identifier: AD:8A:B8:19:17:07:50:FC:6D:DE:0E:58:07:AD:42:A1:9F:0A:44:AE
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01A1C58CE59A7ABEE32F73B40428135A8BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1837
Signing time: Tue 10 Nov 2026 13:01:47 +0000
Manifest this update: Tue 10 Nov 2026 13:01:47 +0000
Manifest next update: Wed 11 Nov 2026 13:01:47 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: db6CZxqvi0XwMubjYYaIzIOJJb0vOhtTo9NIInD7eWg=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:e5:9a:7a:be:e3:2f:73:b4:04:28:13:5a:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Nov 10 13:01:47 2026 GMT
Not After : Nov 11 13:01:47 2026 GMT
Subject: CN=ad8ab819170750fc6dde0e5807ad42a19f0a44ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:4e:3a:fb:d1:82:e2:09:50:97:6b:61:55:
b2:05:e1:35:59:38:99:56:7a:b5:ce:d2:e8:f3:df:
cb:fc:65:99:d1:68:f7:68:e5:d4:a6:11:0b:2f:72:
42:ac:62:56:55:9f:7f:46:b0:4a:c4:af:8c:ca:ba:
15:44:79:5d:6a:5d:e3:f2:c5:93:c9:1f:47:2c:99:
9e:a8:8e:61:d4:41:23:2c:13:ff:f8:31:3b:75:28:
a1:ae:8e:28:43:66:16:28:ce:78:2a:95:6f:1f:84:
8e:d1:21:db:70:ac:7e:56:f3:e8:6d:ac:9d:53:c0:
e1:97:c4:b6:41:98:d4:7e:33:a3:9f:e7:77:f5:ef:
36:e4:ad:17:a9:f2:00:70:7b:f0:7a:04:1a:f0:f4:
f0:e0:e0:42:b9:7e:2b:23:4c:07:cb:27:13:cb:9f:
fa:10:05:6c:53:d8:f0:0a:48:c2:64:4e:e2:0d:98:
90:b2:fe:b0:fe:9f:46:c4:97:a1:6b:ed:ba:eb:5b:
8a:a7:ea:5a:ef:d0:37:2c:e4:3d:67:6a:05:88:e6:
b9:c9:6d:94:38:66:87:db:4a:8d:99:55:98:c3:23:
92:6b:6a:13:bf:39:05:7c:bf:bc:1f:63:68:52:10:
9b:27:ba:15:1e:9e:31:c2:d8:a2:96:8e:6c:00:97:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8A:B8:19:17:07:50:FC:6D:DE:0E:58:07:AD:42:A1:9F:0A:44:AE
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ea:73:b0:37:e5:ce:87:67:d4:67:2f:3c:e6:2e:4a:85:a3:
66:e5:a6:d2:94:f8:4a:12:a7:90:31:cf:90:bd:10:c3:4f:5c:
c7:d9:d6:5d:ac:a2:ba:6c:27:69:3c:ca:b0:69:3a:d2:46:ae:
f7:e0:48:53:f7:d2:d9:8e:11:85:21:01:8d:1a:b2:14:f2:bf:
85:70:29:ea:18:cc:ba:6c:38:4c:7d:7e:db:fe:fd:c1:6f:af:
3d:5b:74:dd:3f:bf:3e:ae:91:aa:78:64:fd:b0:e7:66:89:91:
9b:84:44:b3:dd:05:fd:f5:1b:0e:ac:47:36:47:db:18:02:73:
aa:d2:e8:f2:99:86:1b:25:53:05:d2:a3:86:cb:25:d5:db:4f:
9f:a6:fd:13:02:95:0d:78:d4:9b:c6:1c:c2:b8:4c:7a:04:dc:
e2:0b:e9:07:f7:3f:50:4f:e0:f8:59:c8:0e:b0:fe:a4:f8:db:
63:1c:1f:31:48:6c:8a:d9:0b:23:a2:26:2b:cb:2c:90:51:64:
d3:88:42:2c:f0:db:60:c5:d5:17:2e:74:e0:2f:c4:20:c4:54:
e8:09:25:5f:53:0e:df:23:cf:4c:70:3a:73:a3:cd:56:53:a1:
2b:97:ca:ae:83:bd:79:64:e0:18:06:af:6a:bf:6b:59:7c:15:
79:d1:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:39:13 2026 by rpki-client