Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: lI+JeaqlUExt2zedqnATAzon0djanSdIpuDBpylld/g=
Subject key identifier: 59:3E:92:E6:46:2E:8F:17:AF:63:65:A2:03:9E:AC:01:47:D5:69:CD
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01A1238A6AC2D345554AC8282B94D7568D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0DDA
Signing time: Sat 10 Oct 2026 02:00:36 +0000
Manifest this update: Sat 10 Oct 2026 02:00:36 +0000
Manifest next update: Sun 11 Oct 2026 02:00:36 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: 7nADU3qOrCpYMV3gSZ2216uJ2Cw8Z5a8v3rxdwqROgI=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8a:6a:c2:d3:45:55:4a:c8:28:2b:94:d7:56:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Oct 10 02:00:36 2026 GMT
Not After : Oct 11 02:00:36 2026 GMT
Subject: CN=593e92e6462e8f17af6365a2039eac0147d569cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:d6:3f:9a:57:b7:c2:19:80:86:3e:0e:b1:
29:c6:be:ca:65:ca:a3:65:ba:d6:67:da:a3:38:54:
a0:6f:d2:11:2e:12:40:1b:57:1c:c6:45:9d:a8:7b:
6a:c8:71:20:f5:00:ac:2f:74:81:4f:58:46:fa:14:
25:80:92:fa:ca:67:be:27:92:c4:19:19:d0:1b:69:
0e:70:da:9e:11:1c:c8:9c:29:85:4e:83:45:ac:78:
e9:db:28:ae:ae:fa:f2:a8:bd:44:48:da:fd:2b:13:
42:c3:39:b7:f8:d4:e7:49:c6:72:ff:38:39:b6:00:
36:c8:f4:1b:75:8c:94:f7:6b:35:91:74:a2:7a:97:
1a:53:29:21:29:26:a2:b4:59:4c:c0:b4:5b:8f:ad:
3a:f5:43:41:8d:ef:2a:e6:51:e3:67:4d:53:e4:6d:
8d:06:6b:a8:29:d2:ab:fe:73:7b:2b:f9:f6:11:0c:
46:83:ba:b9:fe:41:4f:76:55:ae:4b:ee:de:3f:f3:
3d:26:76:bf:21:d6:b9:74:35:c5:36:2c:c3:4d:ed:
67:36:a4:67:ef:1f:76:be:dd:13:60:0c:b2:f3:0a:
73:1d:85:82:2a:89:20:5a:ee:e9:7e:73:ce:cd:4a:
ce:2f:28:0d:a4:7d:b3:0d:f5:87:19:90:d0:ea:1b:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:92:E6:46:2E:8F:17:AF:63:65:A2:03:9E:AC:01:47:D5:69:CD
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9e:b7:28:6b:84:19:e2:9c:fe:59:19:50:25:4e:b5:5a:a3:
03:fc:57:c6:b7:69:e0:9f:3e:23:54:7f:66:c7:bf:c3:df:89:
6f:0d:ae:0f:79:7d:6f:e1:e2:92:c6:f4:5f:15:07:8f:05:b7:
d5:dc:9b:7a:4f:69:1f:a0:87:24:c3:b6:18:1e:2f:75:75:69:
93:52:57:3a:7a:c7:ee:23:0e:9e:ae:a2:50:13:bd:f4:5a:27:
c9:02:44:8c:b2:cd:29:14:4b:3c:60:0e:79:95:24:f1:a2:13:
6b:5b:a9:51:18:99:af:72:6f:f3:9f:83:33:43:56:87:12:95:
0f:1e:01:00:b4:06:74:a2:63:2d:fe:6f:dd:94:15:b2:ee:77:
d8:8a:a4:20:fd:e4:b0:fd:cf:20:91:84:d3:fd:60:d6:38:2d:
e9:70:18:e8:58:60:5f:3a:a8:a4:00:ee:c8:f5:7b:a8:cf:64:
5d:38:18:0e:ac:7c:c0:c3:27:b3:36:06:1b:6a:1f:30:14:d0:
9d:04:df:73:28:86:41:1d:d9:d9:6d:27:96:65:ef:00:28:e3:
9f:ff:2b:09:55:05:86:ad:43:7e:8b:f9:c4:ad:dd:60:a4:3c:
60:66:52:37:9a:f8:a1:ce:b3:b1:4c:e3:5d:6e:dd:57:aa:72:
9b:57:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:17:11 2026 by rpki-client