Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: wwXCj+J5w+rbTFdtV6seI6JO2wk2MSr5VlqA3+kSeBI=
Subject key identifier: E7:3B:7E:60:51:EE:9E:F8:80:E9:18:9B:30:0B:2E:36:3B:A2:B8:E7
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 01A0E92D8EE0A794C0D55188C00456FA3BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 0178
Signing time: Mon 28 Sep 2026 18:01:11 +0000
Manifest this update: Mon 28 Sep 2026 18:01:11 +0000
Manifest next update: Tue 29 Sep 2026 18:01:11 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: nKOqQse5LigAWksOY4G/nPUXT3mbfacda2HAMnRv0uA=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:8e:e0:a7:94:c0:d5:51:88:c0:04:56:fa:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Sep 28 18:01:11 2026 GMT
Not After : Sep 29 18:01:11 2026 GMT
Subject: CN=e73b7e6051ee9ef880e9189b300b2e363ba2b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:ce:3c:8d:72:1f:4a:32:c2:e8:20:6e:bc:
44:94:be:4a:e7:24:14:01:5a:88:fd:59:1a:65:33:
94:7b:e4:cb:9b:a6:a7:d9:77:98:41:b9:b4:4d:a8:
d6:a9:40:f5:37:7b:3c:41:62:f1:c7:4f:d2:31:31:
e9:3e:68:60:c5:78:aa:74:e6:5f:4f:40:81:c2:ad:
f4:7c:b1:23:bc:e6:93:33:32:78:da:e5:7e:ea:fa:
a2:cd:68:95:f7:79:17:9c:4a:1c:2f:4c:82:27:c5:
9f:13:76:af:3b:8e:4a:ec:fa:55:ca:ab:d0:8b:ca:
d7:df:33:cf:ce:41:32:f7:b6:ce:a9:d1:37:7e:2e:
8d:54:03:79:a5:15:fd:c8:ac:35:17:33:ae:65:e9:
a1:52:b1:92:20:e3:c9:bc:c6:43:ab:cf:79:5d:06:
09:1b:0e:f2:be:7e:d6:01:68:63:24:87:0d:79:fe:
b9:0f:73:53:2b:a6:ee:a1:eb:da:a8:63:ac:d1:96:
26:9e:a3:57:b8:c6:5e:b0:11:23:c5:54:c2:68:24:
85:64:24:a3:f7:30:61:54:78:b8:8a:2b:b6:12:d1:
22:b3:8a:68:67:bd:71:f1:4e:09:c5:9a:52:4f:f6:
16:9e:a7:b2:95:b9:4d:44:07:66:1e:df:06:e5:8e:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:7E:60:51:EE:9E:F8:80:E9:18:9B:30:0B:2E:36:3B:A2:B8:E7
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:62:14:66:9d:78:cb:45:bf:45:4f:e2:38:30:2e:0f:8a:d9:
29:75:d7:36:1e:f3:90:45:5b:52:b6:7d:ac:b4:87:8b:85:a0:
46:f5:fb:8d:76:82:95:d7:a3:cd:46:0a:e4:5e:27:d8:38:c7:
08:24:e0:64:32:b7:e8:04:17:1f:9b:e7:d0:84:fc:78:2a:9b:
90:e2:6c:a4:a4:65:22:db:e1:d3:32:e1:4f:9c:60:13:13:d1:
ca:f0:14:83:e5:8b:df:50:29:43:8d:74:65:dc:38:a9:49:db:
6f:77:a8:13:21:40:1c:0a:10:98:27:62:4e:27:6e:1f:1b:11:
10:48:75:e3:c7:0f:d9:b3:b9:f2:88:01:d0:c4:60:e3:08:5e:
6c:0d:f7:77:ca:60:c1:c6:21:20:92:ad:47:94:3b:a7:b8:4d:
01:1a:fe:e9:3e:e5:66:0e:40:42:a2:84:88:bd:45:ce:a7:60:
50:67:b8:fe:3e:21:4d:8d:e1:b7:1b:58:e4:5b:d5:e4:e1:8f:
cc:e9:b1:45:07:2e:85:f6:4d:10:ca:b6:82:70:de:9c:bd:52:
38:7f:02:1d:35:7c:e6:f6:4f:e8:6c:90:bc:28:5a:34:5c:06:
88:64:f7:2d:33:cd:f4:1f:af:33:0a:8e:9e:80:64:86:e6:4b:
2e:9e:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:53:16 2026 by rpki-client