Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: tOcYJyFsi8Su9jFicxE01KCz1nZUjknlBKqmkOpyTRw=
Subject key identifier: 5C:DD:A0:68:04:CE:37:0D:A8:78:46:35:F0:76:9D:AC:97:65:B7:64
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 019DA341162867EE6D054AB67E5377CBB974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 09FC
Signing time: Sun 19 Apr 2026 01:00:44 +0000
Manifest this update: Sun 19 Apr 2026 01:00:44 +0000
Manifest next update: Mon 20 Apr 2026 01:00:44 +0000
Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: jSGy3gU0lQ+zyURTQKVSuGbzMwdQ6jV7NKyBz0DOq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:16:28:67:ee:6d:05:4a:b6:7e:53:77:cb:b9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Apr 19 01:00:44 2026 GMT
Not After : Apr 20 01:00:44 2026 GMT
Subject: CN=5cdda06804ce370da8784635f0769dac9765b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:3d:00:38:5d:a0:1a:4f:d8:8c:01:d9:30:
4c:93:85:34:e6:d8:23:9a:2c:d4:a7:3a:71:7f:b2:
d3:aa:12:11:aa:50:18:75:fa:18:0c:74:a5:7d:0e:
af:c2:2d:87:d4:29:85:ba:5e:10:eb:19:50:9c:63:
86:14:00:2f:60:5d:6e:46:75:e2:9a:d2:fa:65:08:
b6:90:94:4a:0c:ae:cb:08:cd:4a:93:ab:41:14:43:
eb:34:2f:f3:74:0c:5a:22:19:80:b5:e1:8e:e0:62:
37:3b:33:6e:d4:0b:78:07:2f:ea:23:a6:a2:87:a2:
62:00:44:4d:52:c4:30:89:31:49:1d:ea:1a:76:fc:
95:85:02:15:f1:b7:04:fe:9f:4a:be:73:99:56:ca:
89:a8:bb:3f:54:28:cd:f4:39:e8:71:54:25:e9:2a:
76:cb:e7:53:53:e9:9a:9d:fb:b3:3f:12:24:35:ba:
f8:b9:07:34:8a:f8:fe:6b:aa:db:31:e1:16:37:2f:
34:57:4c:67:7c:b3:b4:f5:c3:05:72:ef:0a:0f:f8:
53:80:53:2e:ef:22:2b:09:80:d2:3b:ad:6f:d7:76:
b1:97:4c:3c:d1:98:0d:f4:8f:58:77:85:76:ab:ca:
17:ee:9e:97:64:cc:ca:c4:29:15:42:37:39:b8:27:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:A0:68:04:CE:37:0D:A8:78:46:35:F0:76:9D:AC:97:65:B7:64
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:54:1b:52:02:b9:da:1c:2a:ce:5c:73:22:d0:3d:33:92:0f:
9e:21:d0:13:90:ea:69:0c:a5:f2:c4:a0:ae:a7:c7:2d:ca:cc:
71:3a:45:50:9d:23:20:96:a4:55:9d:eb:04:5b:78:6e:8c:e5:
37:ae:09:06:07:02:e4:64:92:70:c8:7c:00:ea:8d:60:3b:dc:
1f:bc:8d:5d:bf:5b:ae:d6:aa:8a:f3:ab:47:89:65:f7:f1:05:
6c:4d:3c:b3:20:c2:a6:f7:61:50:0e:b7:ba:ca:36:f0:2d:51:
ff:3c:7e:5b:65:c2:1f:15:7b:c8:b1:b9:30:46:22:8a:39:2f:
c6:0d:6f:e2:7d:0c:72:29:34:1a:76:61:84:a2:04:25:92:63:
b6:d9:c1:72:52:71:10:75:03:9c:a0:4f:49:5e:98:09:7a:96:
d5:42:c9:33:bb:4f:9b:c6:1d:84:5d:15:c5:43:cb:b3:ba:5a:
58:dd:4e:ce:f5:2f:9a:1b:0f:c4:ae:b0:60:95:49:1e:64:76:
83:c3:ac:00:1e:22:29:b6:e8:e5:00:26:f1:9c:8c:b5:50:ea:
bf:26:7f:4b:95:87:ed:06:b8:75:7b:33:0e:a1:49:45:6c:cf:
52:63:20:54:9f:c9:8e:d6:8a:11:05:3d:91:09:48:ce:9f:12:
39:20:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:09 2026 by rpki-client