Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: 6+IPMNX0Y87OtkDgHu+wBa9YW0w4K6mqLOLg1PjpSbg=
Subject key identifier: E4:78:80:51:3F:BB:77:AB:4D:A3:46:11:F0:BA:70:65:46:3E:FE:97
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01A0C47B8A323817B745F20FD9D5FF3E528F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0D93
Signing time: Mon 21 Sep 2026 15:00:25 +0000
Manifest this update: Mon 21 Sep 2026 15:00:25 +0000
Manifest next update: Tue 22 Sep 2026 15:00:25 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: OAa8qfjRRqbLuX4H2MhArmHwq9R7NNpDgE0/5k0OfuU=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:8a:32:38:17:b7:45:f2:0f:d9:d5:ff:3e:52:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Sep 21 15:00:25 2026 GMT
Not After : Sep 22 15:00:25 2026 GMT
Subject: CN=e47880513fbb77ab4da34611f0ba7065463efe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:a1:2a:a9:f2:df:34:8d:cd:1c:cd:cd:e6:
46:db:79:2c:b0:a6:d5:cb:7a:7f:8e:f0:2d:d6:45:
4f:f8:47:14:86:81:a1:59:fd:43:c1:8e:51:ed:d6:
92:40:b9:46:43:f7:69:32:1a:65:f2:12:b6:85:72:
cb:78:79:a8:3a:cb:59:ff:c4:c9:d0:6b:9b:6d:55:
1f:c6:4f:cd:43:ca:7d:95:62:24:99:e8:0a:d0:4f:
cb:cf:f7:58:fc:33:c2:33:81:f7:30:04:3c:52:22:
49:a1:5e:be:a7:a3:67:5f:40:8d:ef:ed:3b:0e:88:
a0:24:d8:04:3a:15:2a:e6:bc:25:c8:02:87:1c:51:
b2:e2:5b:6b:b6:80:35:bf:d8:a3:4f:fc:c6:b7:31:
68:65:fe:12:e0:0d:66:31:9f:26:fd:7f:75:a4:0a:
d5:a6:c1:8d:34:79:fa:45:8d:03:8f:67:e1:9d:72:
e0:f9:45:30:44:08:69:9a:a7:5d:c9:cf:27:0c:f4:
af:d1:28:a1:6c:ef:56:f2:5d:a7:ae:f2:02:c4:02:
94:d6:10:1b:cc:9b:04:7f:49:96:a7:df:bf:c3:6e:
2a:80:8d:e9:38:0c:91:5c:e8:a7:24:78:57:91:2e:
0f:16:5c:bf:91:2a:3d:96:2a:88:65:36:df:5f:c4:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:80:51:3F:BB:77:AB:4D:A3:46:11:F0:BA:70:65:46:3E:FE:97
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:6c:30:a2:a7:29:30:55:a1:40:aa:fb:b9:67:6f:7a:d4:
15:c5:d3:72:9c:5f:69:c6:59:44:b0:ef:18:15:6c:2e:2d:60:
89:1e:a1:5b:b5:c9:f8:a6:49:5a:e4:34:63:36:c3:8f:0f:8e:
2e:a9:2b:5d:f8:96:ef:a7:33:21:58:86:47:97:36:4f:f8:84:
8b:be:0c:48:5f:1c:ee:a8:c9:35:6f:93:91:21:5f:4a:8f:dc:
75:5b:c2:18:01:7b:13:14:af:7e:b6:6b:f9:a7:b2:f6:bf:de:
e4:94:63:ef:82:46:60:9e:ac:a1:c7:5c:63:de:8a:85:82:ab:
9a:1b:17:c9:88:d1:84:ad:6a:38:56:20:b9:3b:19:1e:7f:17:
6f:a9:31:66:af:87:cb:43:f8:86:83:22:c6:b8:aa:3e:28:3b:
f4:17:ea:63:24:29:f5:41:36:6f:5b:3b:9b:28:16:8c:f4:de:
b7:77:d7:3e:df:8f:36:c9:be:b4:b9:fd:f3:0f:6f:44:28:8f:
7c:b9:72:e0:6d:ac:e1:28:30:06:a4:a1:56:24:4c:56:3c:22:
ec:57:87:c4:7f:5b:6d:04:58:11:fc:8a:93:ae:8c:4c:0b:81:
1a:7d:33:d1:3e:39:0e:00:3d:b0:9f:16:0a:cb:89:d9:31:77:
b0:22:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:31:32 2026 by rpki-client