Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: +V06DNqPPca1dmOToqsgHcBPcyMyPKoanRZU2KTxlMs=
Subject key identifier: B9:75:FA:49:9C:A7:86:8D:EB:72:B5:DB:7B:9A:4D:48:B5:7B:D1:77
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01A0C40D98C96F98AA63A1C393199A8DD5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0889
Signing time: Mon 21 Sep 2026 13:00:20 +0000
Manifest this update: Mon 21 Sep 2026 13:00:20 +0000
Manifest next update: Tue 22 Sep 2026 13:00:20 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: oDS0H/mOVtC1sax+fwKBzuMCfjmmhU2r3XCSPSVVUNY=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:98:c9:6f:98:aa:63:a1:c3:93:19:9a:8d:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Sep 21 13:00:20 2026 GMT
Not After : Sep 22 13:00:20 2026 GMT
Subject: CN=b975fa499ca7868deb72b5db7b9a4d48b57bd177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:86:b5:0d:1b:6f:f7:40:a5:8f:4b:da:2f:
57:25:03:d5:95:b4:31:01:57:63:2e:75:78:d4:2a:
30:84:a3:4c:a6:87:25:95:d0:4f:5b:40:c2:cc:19:
f3:94:01:a8:36:8b:dc:06:cc:c6:d0:12:ea:ff:59:
64:28:ce:f2:85:c7:17:98:c5:16:05:98:93:79:f7:
d0:34:21:ae:56:bc:ce:63:9b:b0:16:96:8f:76:58:
af:01:a0:e7:b6:64:04:28:ad:08:f2:b2:da:2c:d9:
ce:84:65:cb:41:f7:30:87:5c:45:09:f0:8e:6d:96:
6b:0a:52:43:58:89:47:a4:f9:d3:40:25:27:94:92:
ad:02:6b:33:5d:e0:0a:a6:c7:e5:dd:e6:e7:01:bc:
5d:bb:46:b0:e1:5c:86:f1:07:db:13:e1:84:96:32:
3f:27:30:3a:94:15:e2:fe:d8:b4:5d:0d:a1:67:e9:
07:0b:f6:1a:ec:40:86:ea:9d:df:9d:da:22:cb:01:
d0:62:ce:1d:a7:f2:bb:e9:80:0f:77:23:43:b7:ad:
9d:d0:68:20:5f:98:ae:15:c1:70:41:fd:dc:a6:9e:
54:e3:4c:db:a0:8d:6a:47:a9:b7:ee:e2:3c:12:fa:
fc:80:3b:28:fe:10:c5:e0:0c:2e:93:00:89:cc:db:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:75:FA:49:9C:A7:86:8D:EB:72:B5:DB:7B:9A:4D:48:B5:7B:D1:77
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:e3:4f:a5:23:79:da:54:e9:db:75:7a:76:32:1e:9d:b4:
5d:1e:af:17:8a:18:1c:cd:10:1b:11:43:e5:43:5e:07:df:21:
7d:91:23:1a:6f:f3:54:51:3d:fd:49:68:ff:bd:40:c3:a0:db:
77:ad:84:9e:e2:14:47:35:f2:f4:4e:6c:d2:c3:01:c6:56:4d:
9f:20:79:d9:19:a6:d2:e8:69:99:42:75:ca:67:07:db:db:7a:
98:c2:6f:3a:05:8a:29:cf:2b:67:ac:b0:09:fc:79:86:1f:cd:
dc:fc:79:c8:9f:6d:fa:7a:45:39:2e:31:e6:d3:e1:f9:16:d1:
4a:e5:8c:0f:34:b1:ae:bc:1a:4c:2d:86:ae:f8:a5:d4:a4:37:
02:08:1b:9e:8e:9d:b8:6c:3d:1c:00:26:4a:ef:d3:af:c7:59:
4f:e7:b7:8a:75:16:1e:69:00:c0:cd:7c:d3:cf:62:fd:e2:ee:
9e:1e:c3:09:d9:84:bc:5d:95:c8:43:51:88:f2:d5:fd:da:f9:
2f:7c:07:f9:b9:a3:7a:1b:98:f7:81:81:1a:60:53:0b:86:74:
5e:17:ec:f5:36:c4:f2:56:03:79:14:c6:37:9a:91:d1:bc:f8:
f0:89:35:83:ae:c3:ee:a3:57:8c:ed:1a:74:f8:fb:7c:8f:b5:
99:75:b1:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDZjJb5iqY6HDkxmajdXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw
ZTZjZDgwHhcNMjYwOTIxMTMwMDIwWhcNMjYwOTIyMTMwMDIwWjAzMTEwLwYDVQQD
EyhiOTc1ZmE0OTljYTc4NjhkZWI3MmI1ZGI3YjlhNGQ0OGI1N2JkMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ryGtQ0bb/dApY9L2i9XJQPVlbQx
AVdjLnV41CowhKNMpoclldBPW0DCzBnzlAGoNovcBszG0BLq/1lkKM7yhccXmMUW
BZiTeffQNCGuVrzOY5uwFpaPdlivAaDntmQEKK0I8rLaLNnOhGXLQfcwh1xFCfCO
bZZrClJDWIlHpPnTQCUnlJKtAmszXeAKpsfl3ebnAbxdu0aw4VyG8QfbE+GEljI/
JzA6lBXi/ti0XQ2hZ+kHC/Ya7ECG6p3fndoiywHQYs4dp/K76YAPdyNDt62d0Ggg
X5iuFcFwQf3cpp5U40zboI1qR6m37uI8Evr8gDso/hDF4AwukwCJzNvT8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl1+kmcp4aN63K123uaTUi1e9F3MB8GA1UdIwQY
MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt
ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4
LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemHjT6Uj
edpU6dt1enYyHp20XR6vF4oYHM0QGxFD5UNeB98hfZEjGm/zVFE9/Ulo/71Aw6Db
d62EnuIURzXy9E5s0sMBxlZNnyB52Rmm0uhpmUJ1ymcH29t6mMJvOgWKKc8rZ6yw
Cfx5hh/N3Px5yJ9t+npFOS4x5tPh+RbRSuWMDzSxrrwaTC2Grvil1KQ3Aggbno6d
uGw9HAAmSu/Tr8dZT+e3inUWHmkAwM18089i/eLunh7DCdmEvF2VyENRiPLV/dr5
L3wH+bmjehuY94GBGmBTC4Z0Xhfs9TbE8lYDeRTGN5qR0bz48Ik1g67D7qNXjO0a
dPj7fI+1mXWxBg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:43 2026 by rpki-client