Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: pfarpfVo9EIgh3fwjrhfpy837J/GsItDWKYUwoGqEYM=
Subject key identifier: D8:84:A3:DD:64:3D:FC:E2:4D:BE:5C:6E:1A:46:F3:03:F1:C0:48:D8
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01A128B16D136256C38BCD5B3787F771C1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 17AB
Signing time: Sun 11 Oct 2026 02:01:18 +0000
Manifest this update: Sun 11 Oct 2026 02:01:18 +0000
Manifest next update: Mon 12 Oct 2026 02:01:18 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: 9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa (hash: YJWL8DLQPhj/nDX+QYjr1+pXanbWsVZjAovQ36i7A/U=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: s3Xsxkhr0t6O+qqYNMlSyQ3ax1dBZp+cDjcixH9Fq1o=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:6d:13:62:56:c3:8b:cd:5b:37:87:f7:71:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Oct 11 02:01:18 2026 GMT
Not After : Oct 12 02:01:18 2026 GMT
Subject: CN=d884a3dd643dfce24dbe5c6e1a46f303f1c048d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:9e:5d:9f:a0:ab:09:25:97:9a:cc:cf:2e:
3a:02:ca:9b:aa:bf:f8:6d:77:88:cc:99:e2:89:0e:
56:2e:61:85:0c:0e:87:ff:ab:0c:d8:b9:97:f9:4e:
28:98:ea:9b:7d:2b:b6:8c:4e:10:25:75:cc:41:b3:
fb:fb:f9:9f:13:02:1b:a9:b8:19:f3:86:3a:99:9e:
63:85:d3:d3:11:e8:32:f8:18:b6:3b:fd:c7:c2:77:
1c:f2:e9:10:ba:e0:15:a3:78:ff:6d:d0:b9:2e:f1:
7a:10:5f:8a:89:f5:f5:9d:5a:5b:dc:a7:0a:28:89:
51:29:6e:2f:5d:71:83:0c:77:d3:0f:ee:7a:12:16:
7f:05:b3:05:d8:d6:11:95:c9:98:5a:7d:e7:22:55:
49:ea:10:a5:fe:6f:20:39:74:97:00:90:da:c6:05:
31:54:cb:0a:03:2b:64:99:08:b9:71:27:a1:a5:8e:
88:c9:08:3b:7f:fe:28:00:8d:01:ee:12:6a:5f:21:
5e:ce:ee:a7:f4:f3:7f:ad:1b:c2:a5:93:74:15:d4:
79:75:99:fb:9b:c6:63:71:fe:1c:90:43:b9:fd:02:
b9:0c:e7:3a:41:84:a2:77:d4:4b:39:d5:0a:8d:22:
0e:04:09:14:0c:bb:fc:87:2d:d4:b1:9d:4b:ae:0d:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:A3:DD:64:3D:FC:E2:4D:BE:5C:6E:1A:46:F3:03:F1:C0:48:D8
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a7:10:c7:06:19:98:dd:22:5a:74:ee:0f:41:8d:83:19:dd:
5b:5e:d0:ac:72:2d:23:ec:c7:63:e0:de:fc:cd:80:22:e9:30:
d2:7a:65:70:eb:72:4f:df:61:87:6d:f8:56:67:50:f7:b0:90:
65:8a:01:34:1b:5f:65:fe:c8:04:cc:d2:23:1d:52:fa:d0:30:
5c:33:46:dc:ce:51:ee:22:3c:c4:a2:52:69:dd:56:2e:0a:23:
85:23:95:2e:00:ad:dc:16:aa:92:ce:44:d9:95:ab:53:3c:f2:
f2:5b:8d:5e:07:c8:3c:86:4f:a3:64:41:0d:94:af:48:76:3f:
80:fc:94:46:1c:2b:9d:29:64:c9:ec:21:83:45:fa:4a:cf:a6:
c4:51:ac:fa:61:c8:c0:ca:5d:fc:46:5b:1b:09:13:0f:67:ee:
e9:59:23:04:a8:65:34:72:f1:9f:48:0d:ed:fb:e7:57:26:bf:
4b:62:55:c4:21:6b:d8:88:28:bb:4a:37:fa:8c:2a:96:d3:e1:
ad:66:7d:e4:b1:a1:08:1d:07:bd:85:e1:bd:32:7c:64:04:66:
19:1d:1c:4f:bc:f8:12:15:2e:0b:98:5e:d1:f9:2b:c5:27:dd:
f6:d2:61:48:74:7f:a0:9c:7f:f6:59:ae:7c:a2:15:c4:38:ad:
7b:2a:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:24:19 2026 by rpki-client