Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File: cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier: kqWPGmFgnGm5+JCqq894lala4S5XHezqklhZtAIbv8s=
Subject key identifier: D9:3B:F0:F3:FA:72:CE:8A:09:FA:22:15:CE:F6:23:C2:19:20:F5:CB
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial: 01A0EF67486D11C1D18C23B93EF6CC4FBC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number: 18EF
Signing time: Tue 29 Sep 2026 23:01:58 +0000
Manifest this update: Tue 29 Sep 2026 23:01:58 +0000
Manifest next update: Wed 30 Sep 2026 23:01:58 +0000
Files and hashes: 1: W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa (hash: LAGYp6tmx7aAjzZBlxGzQ8k1I+/BB+mHmklMRyiCKgA=)
2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: 5S9gfbU0JakJrHNSIkfqULEbrwpw6c7q54Gu+busMTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:48:6d:11:c1:d1:8c:23:b9:3e:f6:cc:4f:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Validity
Not Before: Sep 29 23:01:58 2026 GMT
Not After : Sep 30 23:01:58 2026 GMT
Subject: CN=d93bf0f3fa72ce8a09fa2215cef623c21920f5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:32:7d:2c:59:d7:75:94:83:c5:7a:5c:21:
67:1d:ef:62:d5:0b:e4:2e:49:11:ed:b1:d8:4b:8d:
28:48:24:af:9b:14:12:2c:e6:0c:3f:7a:99:b8:38:
5f:ff:f2:7d:ba:a6:1c:f9:92:71:c4:a0:44:d9:0b:
dd:2e:30:07:0e:4c:7a:48:53:0c:aa:77:1a:4f:27:
a3:09:87:dc:30:8a:0e:f3:bd:19:9a:7d:e8:79:f2:
e3:71:ed:11:11:82:78:09:c4:73:e4:80:f5:f7:e4:
4c:98:bd:7f:21:2b:e8:f1:6a:6c:2d:dd:04:b9:1c:
67:d1:8b:98:6c:f3:e7:e7:4a:a0:12:b6:54:6f:4e:
6b:e3:ea:e3:0e:8c:4c:11:2a:59:7d:48:24:d9:61:
d4:a2:a5:33:31:dc:03:37:1e:e3:b5:7e:53:8e:da:
0a:ab:da:64:df:c2:56:20:b9:da:3c:63:6e:a6:b3:
e7:d6:a4:12:60:89:2b:62:e8:be:9e:da:cd:2f:10:
e3:69:e8:7d:4b:4f:51:94:86:21:ab:3f:80:05:9d:
34:1e:a7:c3:fd:bf:20:85:7e:32:74:32:26:1f:f9:
81:dd:05:a7:dd:17:f9:d2:c0:be:db:d8:47:4d:4b:
03:fa:c1:b6:49:f0:f9:a8:c3:5c:5e:80:e1:c3:b9:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:F0:F3:FA:72:CE:8A:09:FA:22:15:CE:F6:23:C2:19:20:F5:CB
X509v3 Authority Key Identifier:
keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:cc:d5:72:26:2e:ab:1b:09:25:91:f3:0a:1a:e5:f0:db:
29:e7:41:54:2d:e6:c0:8f:22:d1:a8:17:1e:66:77:b3:a1:9a:
64:23:a1:71:d4:6a:6d:cd:6e:6b:77:b7:a7:9a:ca:a0:2b:e9:
f1:6a:f4:a0:5b:7f:f5:98:b5:54:fe:44:eb:0e:e5:b8:64:eb:
e8:53:e1:fa:cc:ab:4a:d0:d1:24:73:df:d8:2c:67:fe:f1:db:
65:a3:a8:f4:7c:3f:11:34:e0:bd:0d:a4:14:89:47:c9:64:8b:
16:40:c3:b8:45:dd:53:7a:ea:9f:50:e2:58:c8:29:c8:4d:e3:
18:b1:ed:b7:bd:82:3f:e3:16:48:c2:7a:b4:04:dd:8d:17:c8:
97:8d:cf:79:7e:0c:41:23:9b:08:20:c0:c6:bc:92:b3:d5:32:
4b:d1:6c:19:29:b3:da:20:0c:6b:52:c2:18:a6:8c:4f:91:9c:
eb:26:ab:1e:95:31:51:75:69:39:17:79:da:1e:63:7b:a2:ba:
00:06:9f:fb:1f:54:1f:f6:ab:0b:eb:47:d0:5b:2a:c6:ea:da:
0a:51:55:45:df:38:45:8d:e9:40:07:28:bf:29:53:85:88:eb:
a7:7f:98:44:65:60:9c:fb:e9:6d:23:4f:f7:62:19:78:48:27:
e5:7a:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:33:11 2026 by rpki-client