Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: BpyIFLW9PoqZazjw+bHIhyVcmz1qHwK6tCNFZvroG3s=
Subject key identifier: 8C:B5:11:80:C9:2E:5C:93:E7:F8:27:21:10:DA:E5:2B:1D:59:E8:85
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01A13590E7FBFDF0C9B28E6B38F8B8870605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 14:00:51 +0000
Manifest this update: Tue 13 Oct 2026 14:00:51 +0000
Manifest next update: Wed 14 Oct 2026 14:00:51 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: rkk1ELMeCS5f9nLyh/wuoTxv3mvlVbiyW41bSit3VkE=)
3: kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa (hash: pEw/S9jOxpWQLVzYTg3rhlxmJoczWXUHF2pKiEgawmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:e7:fb:fd:f0:c9:b2:8e:6b:38:f8:b8:87:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Oct 13 14:00:51 2026 GMT
Not After : Oct 14 14:00:51 2026 GMT
Subject: CN=8cb51180c92e5c93e7f8272110dae52b1d59e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:01:6e:26:1e:bf:58:e6:a0:53:7a:95:b3:
b3:84:eb:72:43:9f:19:e7:e9:b1:57:8a:e9:35:8c:
41:69:af:83:bd:f1:86:3d:5b:10:8f:46:9f:a4:fa:
2e:1d:da:76:69:44:ac:c9:e1:09:22:b0:2f:14:ad:
b7:00:76:09:12:0e:f2:fb:d8:30:6d:eb:b2:59:21:
21:15:54:9c:87:f8:81:e2:35:ec:0e:69:65:42:33:
96:69:a6:a1:e8:87:f1:33:f7:1a:7c:54:87:aa:6a:
85:d2:76:dd:d4:84:e2:96:3b:df:2c:51:6d:18:1b:
7e:af:f7:51:aa:8f:e9:d6:9f:e5:1a:27:33:21:78:
9b:ef:6b:d1:77:d1:a0:e8:ad:e0:b7:03:e0:79:46:
07:82:ec:63:39:e2:37:64:e9:68:7c:ac:be:e5:76:
85:9e:e9:11:d3:3b:2d:f8:36:f5:64:cc:a8:af:9a:
3a:c7:07:5c:a3:f2:1b:31:19:fc:3e:7a:e5:3a:d3:
bf:21:59:70:74:06:16:e8:60:63:8b:a3:c0:ea:f5:
87:0c:9a:4f:2c:72:1b:15:ba:84:4b:1c:2a:c9:d0:
6f:ed:f4:b9:f2:5d:5e:78:aa:20:51:f3:74:d1:f7:
68:97:6b:b9:2e:ac:fb:ff:49:46:77:18:4f:f5:ab:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:11:80:C9:2E:5C:93:E7:F8:27:21:10:DA:E5:2B:1D:59:E8:85
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:1c:83:4f:62:9e:0b:dd:40:06:66:eb:7a:35:6b:2e:94:
5a:42:ce:7f:9b:7c:2f:9b:fb:ab:49:a2:85:1b:88:d1:f3:f0:
18:0f:e8:69:28:be:1f:b4:33:75:1b:c4:bb:31:68:a6:01:74:
74:b5:04:f2:7d:5b:a8:7a:2d:6e:af:91:e9:08:65:86:f8:85:
84:ae:a1:cd:3e:63:84:aa:3e:92:41:25:30:8d:95:27:27:f9:
ee:03:90:10:7b:c5:4e:3f:98:2f:40:3d:b2:93:40:1c:a8:fb:
ab:66:30:66:6a:b5:6d:06:e4:67:a1:7f:50:98:79:ad:ca:34:
51:1d:5a:00:62:d6:ff:a9:e4:b1:d3:9c:68:d2:f0:b4:00:e1:
97:43:ac:38:43:4a:ca:de:80:f2:66:ed:e0:f6:94:87:ed:46:
45:ab:25:d8:8a:c4:c6:9f:49:66:e3:05:d2:fb:56:4b:d7:42:
08:95:a6:24:07:72:0e:3b:67:99:d7:f2:fd:44:eb:d1:80:bc:
7e:87:55:c5:55:6d:c9:96:67:54:aa:d0:37:b7:3c:bc:fc:1a:
32:0d:26:f9:30:1d:7c:91:1f:df:55:3c:ca:ed:e8:8d:2a:1e:
96:60:3e:9b:b7:ab:6b:f5:2c:df:11:37:7c:83:65:e3:01:c3:
55:54:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:33:58 2026 by rpki-client