Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
File: ca0Clb70axWYk68wgc7WgZG3bJI.mft (raw, json)
Hash identifier: TVqHUMBxQcAUsEmJnas2LOGAzfrZJP6zAjeWwLetzlk=
Subject key identifier: F0:5D:EB:B6:DA:BE:F3:17:A2:87:74:E7:BE:17:91:DA:1D:28:AA:97
Authority key identifier: 71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
Certificate issuer: /CN=71ad0295bef46b159893af3081ced68191b76c92
Certificate serial: 01A0C858CFC8C9936D81DA2CB64F7A552808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:58 +0000
Manifest this update: Tue 22 Sep 2026 09:00:58 +0000
Manifest next update: Wed 23 Sep 2026 09:00:58 +0000
Files and hashes: 1: 9vxud7StOxsVGpJ4u8HWgLt1evM.roa (hash: geRuwSQcxs/ntg9jtSwo/JgbYczfuqf3BwONRGwXIlo=)
2: ca0Clb70axWYk68wgc7WgZG3bJI.crl (hash: QMwT6oTdSyAwzVf0ptGG5zT37u5mfqvD6o5RoTYStJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:cf:c8:c9:93:6d:81:da:2c:b6:4f:7a:55:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ad0295bef46b159893af3081ced68191b76c92
Validity
Not Before: Sep 22 09:00:58 2026 GMT
Not After : Sep 23 09:00:58 2026 GMT
Subject: CN=f05debb6dabef317a28774e7be1791da1d28aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:6d:44:52:22:95:d1:36:e3:41:4b:6f:36:
b8:33:f6:e8:f3:d6:d8:54:b8:e2:42:46:05:61:25:
90:aa:bd:69:d5:00:34:21:6f:34:90:9f:e8:e9:49:
ff:f0:85:5f:4b:11:df:bf:c6:f4:af:8b:95:1f:04:
74:55:4b:e4:8d:ae:4f:00:32:fc:e5:d4:77:60:f7:
25:9f:22:23:8d:e3:09:e1:d8:2f:28:6a:af:21:1c:
ae:57:8f:69:f5:74:c4:d9:d0:5f:ea:74:d5:51:a0:
c0:4d:c7:da:ce:ba:03:84:66:d0:de:7a:68:8f:c3:
d7:1a:1a:48:d4:7a:e1:e2:50:09:ad:b5:7e:6c:78:
65:a4:88:b7:54:43:11:61:d4:6e:ae:10:41:4d:f8:
4a:4b:45:7e:07:8d:0d:a8:22:d8:3b:57:ff:06:8c:
1e:92:b2:fa:e5:37:8d:db:ec:66:a3:87:af:f9:c5:
d0:e7:c1:35:95:94:1f:c9:ef:62:f8:d0:ed:b0:b5:
e0:4b:1a:e2:2e:cf:9a:8f:50:b6:b6:bb:7b:df:87:
4f:c5:c5:92:61:53:7c:dc:ae:c7:49:3a:6c:f4:ee:
23:10:33:0e:82:19:8e:91:b8:a0:89:54:21:94:2a:
c0:45:c4:9a:91:1d:d2:42:61:1a:3c:3b:a5:ae:bf:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:EB:B6:DA:BE:F3:17:A2:87:74:E7:BE:17:91:DA:1D:28:AA:97
X509v3 Authority Key Identifier:
keyid:71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fa:db:8e:ba:89:5e:98:1c:00:0f:43:b5:bf:40:7b:3e:44:
9e:fa:f1:91:f7:76:bd:64:16:1e:09:32:df:52:77:2b:e7:b0:
bf:e2:0f:37:f4:9a:65:28:01:85:01:5b:9d:8c:48:d9:13:69:
ab:16:75:05:e4:c4:f8:f1:7c:76:53:0e:a8:8f:9f:45:be:35:
de:98:5e:7d:b3:83:68:90:4e:60:db:11:cd:98:a6:68:c9:88:
ce:8e:69:91:0f:ec:a8:05:ff:88:c7:0d:16:bf:f2:4c:c7:81:
5c:63:52:d4:6f:e2:9e:e8:94:49:18:6f:3a:cb:e2:e4:32:6b:
13:33:8f:5d:e2:61:7e:ae:ae:ef:d5:6b:e2:c6:46:bd:17:8e:
b1:b6:ba:fc:08:d9:0b:9d:cc:d0:69:e3:66:d8:2f:ff:3c:68:
f7:3a:61:14:74:08:33:74:4e:71:e4:64:f3:27:54:d9:fa:63:
b3:26:9f:ad:31:55:f5:af:b2:b4:f0:e7:7b:8b:17:b1:e0:d3:
38:e1:45:f3:ec:ec:80:2f:bf:a0:72:de:1e:ab:f9:cc:a7:56:
8a:0f:dd:df:83:78:ed:15:89:48:62:ac:42:47:4a:a7:59:10:
20:c5:d6:64:1c:ab:4d:bd:9d:c3:e0:0d:e4:c3:c8:ca:b2:59:
82:e6:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:43 2026 by rpki-client