Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: bZHFr5oi0VL1pTGcGe3mW+aYH9JxPTAg+6xr4CDTIb4=
Subject key identifier: F0:E2:A1:3A:F2:69:C1:C6:18:4B:93:E4:33:0A:34:DB:14:63:A8:B8
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01A0DB3BE436F1B47AA80CF5D42A328D610D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 179D
Signing time: Sat 26 Sep 2026 01:02:10 +0000
Manifest this update: Sat 26 Sep 2026 01:02:10 +0000
Manifest next update: Sun 27 Sep 2026 01:02:10 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: kNGSZGpGw4tpxBSrNgKYrscCKZGEIHC5RJvo4FnYqg8=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:e4:36:f1:b4:7a:a8:0c:f5:d4:2a:32:8d:61:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Sep 26 01:02:10 2026 GMT
Not After : Sep 27 01:02:10 2026 GMT
Subject: CN=f0e2a13af269c1c6184b93e4330a34db1463a8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:17:d1:ca:af:da:1e:e0:bb:ad:62:d6:a0:
f9:da:d0:96:33:ba:dd:37:fe:56:53:2e:52:94:7a:
cb:7d:59:60:03:6f:d1:ee:77:2a:49:25:35:18:9b:
67:4f:65:19:6f:54:62:9c:f6:b1:cc:6c:a7:cc:85:
8f:1a:b1:5e:a9:50:a1:87:5b:06:07:ae:8b:33:a5:
c1:26:2d:27:64:b8:9a:1d:61:98:85:40:c4:4f:bb:
f1:85:7c:fd:78:b4:43:3b:51:8e:30:f0:c9:cd:66:
2f:10:ce:03:ae:71:67:bf:93:76:2c:fb:8a:f9:44:
e7:ef:47:03:bf:b0:c0:1c:4d:25:f2:dd:90:f3:bb:
9d:97:83:1a:b2:a4:a9:c5:d9:f2:9b:fc:fb:6d:53:
93:85:6f:6f:a0:c7:9e:03:0b:e0:3f:22:2a:c1:71:
4a:3a:76:b0:e0:c6:5a:a1:25:f6:f5:b4:49:1b:70:
3f:04:4f:f7:8d:80:09:f4:fd:79:81:2d:a0:1e:a6:
60:5c:f3:0c:c8:61:48:28:9d:9f:1b:5a:cc:c3:6b:
69:d8:df:1b:5d:c8:78:79:ee:18:93:a6:c3:ae:be:
25:0b:c0:d4:a3:91:1a:f6:f9:bd:37:39:60:ef:da:
11:11:27:8a:c9:53:6a:fd:bc:20:9d:92:bd:a7:6c:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:A1:3A:F2:69:C1:C6:18:4B:93:E4:33:0A:34:DB:14:63:A8:B8
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:3b:d5:8d:24:5c:ab:20:b9:68:bc:77:49:e4:c7:58:1b:
d5:02:68:f1:ce:4c:da:33:9d:ab:e7:d7:6f:bd:e7:cf:79:12:
43:5e:9d:f4:58:eb:72:61:36:2d:a6:a2:a4:c0:ef:72:04:8a:
e8:73:b5:bd:71:4b:f7:16:84:8a:b6:24:e0:16:ba:5d:b1:00:
21:0b:4a:0a:6d:74:3b:72:a2:5f:e6:39:36:9d:54:58:ee:71:
1e:0a:f1:3a:a2:f2:19:5a:01:11:ef:2f:98:42:c8:b5:eb:95:
0f:b1:9e:64:92:a7:c2:06:48:e3:39:6e:86:16:6b:39:9e:40:
da:f8:7d:70:33:c6:75:68:39:af:f9:87:a6:0e:b8:0c:2b:95:
de:6a:61:c0:f4:b9:80:0b:f9:0c:29:58:ef:90:fe:60:8b:11:
d0:6e:e6:d3:d4:72:46:30:2d:87:f5:c4:42:fc:f0:c0:6f:4e:
07:22:f8:df:c8:1b:72:cb:e5:2c:15:5e:48:65:f6:f7:36:aa:
e2:62:88:30:be:32:0c:46:d0:8f:9d:d5:4c:d3:73:70:86:ec:
67:07:75:72:db:b1:1e:1e:b4:08:f8:a0:79:b4:05:dd:f3:44:
f2:83:15:db:5f:cf:b3:5c:ca:bd:b2:ab:56:d8:db:d4:ce:ad:
93:64:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:40:00 2026 by rpki-client