Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: xIPOK39lsWS7qGaWwRy7bYe+CMnTLOx3ItetIMmqyhs=
Subject key identifier: 32:0E:79:74:6D:3B:29:94:DD:D3:05:2C:5D:8D:B8:2D:CE:23:D3:A9
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01A0D9BB9159E4ABFBC3C760A6FE55016BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 14A7
Signing time: Fri 25 Sep 2026 18:02:23 +0000
Manifest this update: Fri 25 Sep 2026 18:02:23 +0000
Manifest next update: Sat 26 Sep 2026 18:02:23 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: 7w6BObvKV7Cjmfh6KpBp/tMdftaiDERKZ2Pt+1a9H+w=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:91:59:e4:ab:fb:c3:c7:60:a6:fe:55:01:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Sep 25 18:02:23 2026 GMT
Not After : Sep 26 18:02:23 2026 GMT
Subject: CN=320e79746d3b2994ddd3052c5d8db82dce23d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:57:a7:08:eb:ef:e2:34:8a:33:79:84:63:
84:46:ba:15:a5:b2:cf:40:ef:96:40:18:ae:42:56:
62:df:19:d2:9c:6c:be:0a:05:b2:5d:0b:33:8a:51:
0e:9e:e5:be:13:e3:fe:b0:d5:ef:03:c3:1b:be:fd:
be:f4:0d:c0:62:91:89:06:da:0d:a8:07:3d:bb:42:
4e:78:ec:f2:39:85:1a:90:bb:4d:fe:6e:3e:50:c6:
c6:18:a9:ee:00:52:fd:fe:43:f4:29:3d:ed:03:e4:
42:2d:64:53:7a:4d:a5:40:3d:3d:52:39:0c:cf:5a:
cd:c5:ca:19:97:59:c5:4f:03:b4:e8:36:c2:da:6e:
c3:48:5d:ac:04:59:e5:2d:8e:2d:c2:62:b9:3d:b4:
ab:53:c7:cb:6d:68:ea:e7:39:3e:22:d6:27:74:78:
89:6d:81:43:60:6e:ba:a1:65:ed:77:0a:f1:62:a1:
04:6f:ae:77:c1:dd:3a:bf:72:aa:b2:53:4d:11:51:
1c:b1:20:dd:12:90:8c:6d:69:cd:5f:6e:91:18:c1:
40:8f:ff:8b:9c:db:eb:4a:47:a1:c0:41:0e:25:0a:
2c:c4:31:87:4b:20:12:f5:cf:15:94:28:c0:70:40:
84:ba:da:57:29:0f:8b:85:63:52:87:53:46:97:f0:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:79:74:6D:3B:29:94:DD:D3:05:2C:5D:8D:B8:2D:CE:23:D3:A9
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:91:ca:ea:ff:11:12:0e:60:9c:98:01:c6:d4:a4:b7:ce:1e:
e0:3d:5e:77:2e:0e:4a:20:cc:e1:cc:81:3f:f6:98:d7:2f:0d:
40:d6:cd:9d:5a:4b:4f:fe:a6:2f:42:a1:80:dd:0d:f8:6c:63:
29:0b:d8:a3:ad:ea:39:57:c8:1e:5f:b3:82:fe:53:c5:55:6a:
c2:14:07:0f:97:68:bb:fa:17:14:b3:69:65:f4:70:b4:28:3f:
23:c6:b1:06:79:26:0a:91:c9:30:f0:4c:f7:b0:1c:55:0c:5c:
b8:22:df:65:40:4d:62:99:5a:da:5d:b7:40:2b:85:d9:ba:a7:
80:b4:6e:e9:35:da:61:eb:78:44:50:92:0c:0d:35:72:05:fe:
a5:d6:aa:e0:41:65:09:33:54:8e:52:c4:d8:7e:48:b2:ca:4f:
13:55:2d:c4:99:37:89:9d:b6:53:26:8f:63:c9:8e:92:52:f8:
6d:9c:4d:4a:87:35:14:de:4f:8d:3e:b8:00:f1:19:b9:78:62:
40:58:d2:33:7e:5a:73:2f:ba:cc:25:be:6a:7f:9a:d2:36:7f:
c7:81:8b:f8:28:62:f1:f1:3f:36:3b:a3:ea:43:c9:28:37:9d:
d2:ff:0c:af:97:50:17:34:50:e0:e5:44:21:ed:79:11:b6:72:
d3:7c:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:27 2026 by rpki-client