Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: WpepLdzxy07zwzLWQO3obfhZx7HPvn28iEWGL3dLsdw=
Subject key identifier: D0:D1:A5:29:6F:2D:ED:91:7F:38:17:B7:3E:6E:ED:6F:0E:DF:D9:D9
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 01A0C3A036F1607A2BE37AA526D8508DCBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 11:00:51 +0000
Manifest this update: Mon 21 Sep 2026 11:00:51 +0000
Manifest next update: Tue 22 Sep 2026 11:00:51 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: 4EktPflMfT3dVtKvLGGUCDMSEnPhoPyS3WsdeMPNdgY=)
2: Xw8MVRQJpk47EKjQkBC2UTNVzic.roa (hash: 8j4isUf9xLJyeuJnVvuAvOsNA+t8iB00CcKI1JNi3Vg=)
3: qpReQJ4ra9EFepoIvfI-wRbEIOI.roa (hash: rfltCZyFcGQYfJJgi8SKKMqLHfq7fdrz+C8KH3BEHFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:36:f1:60:7a:2b:e3:7a:a5:26:d8:50:8d:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Sep 21 11:00:51 2026 GMT
Not After : Sep 22 11:00:51 2026 GMT
Subject: CN=d0d1a5296f2ded917f3817b73e6eed6f0edfd9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:73:64:2d:7a:42:f2:7b:c4:03:c9:ea:bf:
02:43:81:4d:fe:41:fc:e6:aa:46:ef:4c:6a:e4:6b:
27:2d:d1:d8:d9:8c:c7:63:b4:77:53:bc:5e:21:62:
99:09:24:1f:91:e2:1a:bc:cf:ee:7f:bb:c4:a5:e5:
cf:9e:bf:70:d6:e6:a2:00:c1:92:42:9f:55:d4:84:
2e:03:52:a7:a2:5a:da:39:3e:76:23:4e:85:89:24:
31:4f:fa:c1:3d:e2:d5:de:96:2d:e2:3a:bb:0d:29:
e7:9d:7c:35:38:e2:17:df:53:84:53:83:76:ad:47:
57:8b:b3:33:55:b5:2b:b3:2b:b8:84:87:15:ec:c9:
68:ba:27:34:7c:7e:db:3d:5e:92:9b:52:66:3b:0b:
04:3e:de:09:8c:62:44:60:35:1f:3c:03:51:05:e6:
fc:05:0f:b1:79:f5:ee:fb:b2:d2:e3:dd:b2:a9:f7:
fb:8b:91:14:14:2b:83:ec:60:19:41:4b:5c:c3:82:
5f:fb:f5:f7:23:bc:02:79:a8:56:ae:a4:f2:e6:8b:
31:e5:9b:d8:a3:ad:2a:e8:19:73:a4:7a:40:2a:23:
1f:38:5b:cf:19:f3:ae:14:92:f5:7a:76:cc:34:a1:
47:ca:1d:75:5d:d9:8c:b7:5f:c7:a7:85:75:71:c9:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:A5:29:6F:2D:ED:91:7F:38:17:B7:3E:6E:ED:6F:0E:DF:D9:D9
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:e8:44:af:56:ad:06:e1:7b:31:f9:0b:bf:68:f9:f8:f4:
6d:74:4d:4b:5b:33:4a:8a:b0:6e:50:d2:53:b9:1c:12:4c:40:
a3:d8:5a:73:b8:8f:93:f2:13:e0:bd:6a:6b:bd:7c:82:71:50:
f7:4a:40:33:48:ed:80:98:6c:25:c9:8a:51:ad:ba:60:a9:81:
b2:b6:ca:d2:55:49:1a:07:f7:f0:02:04:e3:60:e9:8b:9b:07:
b7:3b:41:62:da:77:b4:48:6c:92:97:30:0d:c1:8a:d8:67:42:
44:5c:5b:06:59:f9:b6:9f:6f:1b:3f:e2:89:f5:a5:a4:2d:39:
65:11:fa:81:d6:ca:04:be:13:b8:0d:43:2c:4f:2d:85:76:91:
82:41:a5:dc:22:19:86:34:50:bc:20:1b:fe:41:ce:85:10:0c:
d4:37:87:74:7a:48:18:62:04:52:df:59:1f:f8:25:eb:17:76:
70:20:82:aa:37:87:cf:24:f8:9a:5c:42:05:75:cd:02:af:91:
9c:47:af:9a:4f:36:20:22:3d:a1:c4:a1:6a:21:aa:c5:66:de:
a2:2a:74:6a:6f:0c:a6:16:d7:29:7f:5e:3d:98:4d:a9:ab:81:
d0:bc:ba:99:c6:65:4f:65:21:d4:d0:80:6a:dc:7d:b9:fa:3e:
1a:0b:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:07 2026 by rpki-client