Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: X1elPjuoGqFR4kWlhhkhaRS/QVu9R6tVDE1bv/L4BsY=
Subject key identifier: 1E:09:B1:97:0C:D6:A9:A6:BA:9A:68:D9:76:A8:30:50:2E:BA:5A:F1
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 01A126554CF50C17937C4228673FABAA981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 15:01:26 +0000
Manifest this update: Sat 10 Oct 2026 15:01:26 +0000
Manifest next update: Sun 11 Oct 2026 15:01:26 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: Dgr1WIQtBd5PByif41Qse0ywon+ZDxnDxvE1QhoOK/g=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:55:4c:f5:0c:17:93:7c:42:28:67:3f:ab:aa:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Oct 10 15:01:26 2026 GMT
Not After : Oct 11 15:01:26 2026 GMT
Subject: CN=1e09b1970cd6a9a6ba9a68d976a830502eba5af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:92:6f:0b:fe:fb:ab:15:ac:43:da:60:b3:a9:
e0:af:9c:ed:5a:19:8a:69:cd:96:d8:57:c0:02:ef:
4d:b3:12:60:95:86:18:3b:af:ee:60:75:b6:b7:e1:
b9:a8:ef:16:72:3f:7c:a6:c3:3c:ed:6e:0d:fa:49:
7b:83:ba:db:03:a8:ff:d4:01:de:95:ac:a7:46:c8:
35:b0:e6:f1:bb:9d:70:22:2f:23:4e:9d:63:5e:fb:
31:e5:23:56:e0:41:f7:74:d5:c1:d9:27:d0:2b:b8:
39:eb:7d:de:63:ea:5a:67:3f:aa:1b:2f:17:b1:e8:
07:2a:3d:b6:af:ba:8f:2f:d6:d0:02:96:8f:17:49:
f9:78:7a:b5:5f:82:c3:75:ea:52:7c:17:cd:c1:64:
64:29:d5:16:92:55:bb:f3:78:7e:7d:fd:4b:e5:6f:
68:e9:21:14:86:89:4b:02:12:fa:2d:67:27:b7:7b:
68:0d:33:6c:cd:b2:8e:56:e4:7b:9f:8e:7d:0d:f8:
f0:15:95:02:f3:c2:99:3e:a3:bd:d3:d2:20:f7:59:
0d:97:1d:6a:1a:e0:a3:aa:49:c0:f7:8f:f7:2f:25:
cf:4f:c0:6c:f9:87:b6:fd:cc:07:80:df:01:88:85:
32:37:13:c8:50:5b:e4:5b:f1:d7:d2:65:02:d6:dc:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:B1:97:0C:D6:A9:A6:BA:9A:68:D9:76:A8:30:50:2E:BA:5A:F1
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:76:6a:f8:e4:97:5a:20:93:46:cf:63:ee:dc:38:d5:30:
c8:74:2e:15:e3:a0:77:fe:ea:6f:5f:d1:51:13:e9:6d:2c:a6:
b6:c9:fb:c2:06:be:47:9f:70:08:44:2a:4e:80:9f:43:26:9b:
34:29:5c:f9:5f:4b:7d:e2:c1:79:ed:20:79:1a:9a:25:ba:b0:
5a:cf:8d:b4:0d:62:7b:e1:39:4c:3a:48:1b:58:f2:b6:c4:00:
ea:9f:c6:bf:5a:d0:19:63:a6:7d:41:66:f9:80:d3:8a:17:bd:
41:ac:ef:60:36:38:c0:97:fe:ce:69:71:a2:18:ba:5a:d5:cc:
28:cc:9f:35:61:e8:a5:ec:bd:15:56:42:42:7e:e5:65:7f:15:
a7:f0:2a:41:ed:0a:b1:61:19:84:cd:69:5b:8a:85:e8:50:bf:
8f:6a:50:2e:03:94:af:7d:0a:4e:be:7c:43:be:a4:40:cb:f6:
0e:dd:93:22:e6:13:c6:03:c3:f5:2d:57:ce:9a:56:7e:ed:90:
8e:7c:a7:9e:0d:7d:64:fb:fc:ec:0a:6e:f5:c8:2a:da:d5:c4:
33:66:20:27:a0:91:c1:69:75:c3:d4:33:49:74:c5:e4:9f:c7:
bf:90:e6:b0:12:8e:2f:f2:43:6d:d2:fa:b7:30:6b:6d:56:07:
e0:9e:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:05:34 2026 by rpki-client