Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: 2mB9tjLKIxyM+8l77RFlNqAwdienenW4QG55H365faM=
Subject key identifier: 9C:76:7B:EB:65:94:6B:65:47:CF:FA:1E:9D:CF:24:25:97:9E:0C:9F
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 01A0C85832AF9F5314E836445758B9BBDDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 09:00:18 +0000
Manifest this update: Tue 22 Sep 2026 09:00:18 +0000
Manifest next update: Wed 23 Sep 2026 09:00:18 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: D7NRN3JI27gRSHawT8UiUp08mOAUzT9e6otpcVZ95BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:32:af:9f:53:14:e8:36:44:57:58:b9:bb:dd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Sep 22 09:00:18 2026 GMT
Not After : Sep 23 09:00:18 2026 GMT
Subject: CN=9c767beb65946b6547cffa1e9dcf2425979e0c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:9b:f8:95:f2:18:ef:fd:58:0d:9f:c2:e7:
73:18:bf:a8:f9:e7:4e:75:8e:56:ec:4b:cf:25:dc:
10:cb:06:32:52:c8:9d:25:93:9d:83:44:06:b7:1b:
54:d2:b8:90:d1:7c:5a:e8:0e:0c:e0:3d:8a:81:1a:
fd:ba:cb:fb:ee:ea:d8:0a:c3:37:d2:e6:33:30:c2:
6a:16:1b:eb:58:c1:4a:57:11:2a:54:12:70:37:05:
40:13:f9:8f:a3:0a:bc:66:37:6e:26:6b:36:80:53:
62:26:75:8d:46:71:b2:e7:c8:db:9c:7b:81:ac:9c:
c4:c2:20:b3:c9:27:89:62:bd:e5:54:33:71:3e:17:
33:9f:8c:c9:75:90:d1:f3:24:72:a5:46:97:a7:0a:
b6:4a:55:c1:f6:b8:c5:7a:29:b6:18:af:09:eb:e2:
aa:22:10:7f:fa:8a:a3:8e:74:bb:5f:2f:d5:7f:72:
39:ce:05:6d:e9:d9:25:c7:60:f6:2b:0b:6e:fb:22:
05:91:37:50:5d:c1:19:60:f6:71:d9:2c:8f:01:c7:
34:24:42:ba:59:68:74:e8:99:44:42:9b:71:04:82:
a4:e6:24:24:70:77:99:ac:c5:02:0c:21:3b:b1:fd:
ba:23:73:f6:8b:15:5f:dc:99:15:62:35:99:5b:a3:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:7B:EB:65:94:6B:65:47:CF:FA:1E:9D:CF:24:25:97:9E:0C:9F
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:d4:55:28:68:ca:ba:46:ac:fe:9d:1a:37:90:df:f5:16:
5b:94:cc:f0:f2:e5:d9:d8:d1:b8:04:a9:de:74:a1:a7:e2:46:
91:e6:13:a8:18:15:30:33:dc:e0:94:20:45:a5:4f:a1:bb:5e:
4e:48:ca:cf:3e:26:3c:28:93:4d:06:78:f6:c3:01:38:aa:70:
65:8b:de:f2:6c:80:82:b2:a4:a9:41:51:f6:6b:f3:37:b4:54:
88:12:2e:ed:b7:78:e9:68:3f:c2:5f:83:1c:38:60:05:6a:df:
3e:10:18:5d:ff:ec:3b:89:63:78:fa:98:aa:1b:37:bf:b2:17:
73:b2:f3:6b:e4:0c:bd:be:b3:11:cb:db:a7:be:ee:cc:54:cb:
ff:4a:a9:1a:c5:58:35:cc:46:f9:03:f3:b8:e7:fc:16:0e:df:
71:44:66:d5:67:4d:a2:48:10:e2:92:dc:eb:4e:d5:6b:0b:98:
7c:3d:2e:67:b2:66:16:dc:5b:b8:14:43:4a:64:3b:49:f4:45:
a3:68:c7:0f:42:96:a3:43:ec:6b:67:36:31:ed:ad:98:f9:24:
e8:46:fe:43:9e:93:a8:1d:21:73:22:67:89:85:99:91:c1:38:
c8:5b:d9:46:af:a9:5e:a1:2a:81:f5:bc:57:3b:96:0c:1e:36:
5a:2c:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:04 2026 by rpki-client