Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: 3z6g65ozgdFsgjv0zT0EiVQudtoAUkrQdPdEOBn5xXY=
Subject key identifier: C7:66:17:C1:77:9F:75:9C:E7:92:46:1F:31:D3:62:6F:27:26:0F:18
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01A0C669A8D0AC2BDB0F034D266EF026D99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 00:00:08 +0000
Manifest this update: Tue 22 Sep 2026 00:00:08 +0000
Manifest next update: Wed 23 Sep 2026 00:00:08 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: KpoPtM0GMS2Oh8loPImc6ik6/Q/FyPU7/jikrm3ixbk=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:a8:d0:ac:2b:db:0f:03:4d:26:6e:f0:26:d9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Sep 22 00:00:08 2026 GMT
Not After : Sep 23 00:00:08 2026 GMT
Subject: CN=c76617c1779f759ce792461f31d3626f27260f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:89:7f:7a:54:d4:a2:c1:5a:7b:c7:ee:ca:
dd:4a:19:7c:42:cf:34:61:f9:bd:c0:b8:41:c5:60:
67:c9:b2:c2:c2:10:69:80:3f:d8:be:f9:55:69:2c:
b9:42:e9:f4:53:52:81:d2:44:22:27:32:d2:95:01:
c8:8a:8a:18:9b:eb:54:ff:28:ae:7a:65:e9:52:bf:
4c:f3:cf:ce:1d:86:73:45:b5:36:6e:51:9d:92:42:
22:2a:4f:71:2e:96:cf:30:81:24:e8:a3:dd:76:c8:
ac:55:0f:53:10:ae:43:4e:77:58:74:47:c4:35:1f:
05:14:6b:9b:8a:e3:43:4f:07:57:c1:bf:37:8b:7d:
30:d5:38:7b:e6:f5:c2:5a:7a:bf:80:3c:34:0e:db:
65:a4:e1:5b:28:31:67:dd:f4:6e:21:f3:06:cf:3e:
15:c7:ec:de:93:bd:52:e7:86:71:44:94:ec:20:76:
fd:e7:2d:00:77:d6:cf:9e:4c:45:0d:4d:a4:b5:d3:
19:07:18:37:48:ef:a9:07:57:41:fe:b1:9f:78:39:
cc:03:12:b2:9b:60:9f:ea:80:b2:64:9e:b1:41:ab:
bd:6c:26:99:89:13:21:8f:32:02:29:0c:9d:4d:64:
36:80:8f:62:76:c2:e2:49:81:95:29:06:0a:54:28:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:17:C1:77:9F:75:9C:E7:92:46:1F:31:D3:62:6F:27:26:0F:18
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7b:2d:f6:bb:7b:6f:40:fe:0c:bb:7c:c0:26:49:28:d0:47:
9a:49:2a:a2:8c:9b:6a:46:ab:ca:92:38:36:39:86:6f:5e:6c:
86:1e:62:a3:43:d1:fd:bf:67:e7:24:4e:78:35:86:78:63:80:
bd:f0:4a:3f:47:30:6c:a9:00:db:d8:bf:2d:ce:60:4d:c6:62:
04:33:df:be:04:f4:ca:ec:c3:ea:d1:03:a4:0c:ff:02:b5:8c:
77:30:cd:06:49:f9:31:33:f5:d3:c3:03:9f:e1:47:25:69:f0:
a2:7e:5a:d5:2d:c1:bf:0e:62:64:32:8c:f2:16:10:77:b3:f3:
b9:c8:84:a0:89:d0:a0:c3:72:bb:a2:41:4c:b7:8b:92:1c:0d:
78:97:ae:9d:c5:d9:22:f5:72:e3:23:20:45:1d:79:75:f7:ac:
b0:55:e8:32:66:8a:84:f0:ec:29:da:a9:3f:bf:bc:78:83:1b:
9c:84:9a:3d:b5:0f:1d:ab:21:6c:0d:14:5d:c5:12:de:54:d3:
25:26:d6:09:de:13:52:85:f3:5d:6e:10:71:e3:35:5e:c3:42:
f9:0c:6e:1b:df:59:85:bb:03:0e:75:8d:78:b3:16:9f:d0:a3:
e3:01:7a:c2:50:80:33:e5:68:ab:f3:08:ea:20:df:31:9e:1e:
d9:25:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:38:01 2026 by rpki-client