Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: mEO1zAD58zhoO1JCxb59jnsl6Q503Dhl4tB9Pcxw4XI=
Subject key identifier: 4B:B2:32:E1:0A:E3:6A:3B:3C:CB:BE:F7:A2:57:0F:4A:87:24:04:D1
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 01A0D383B95FCB948A2F06A0D2DAB7B5116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 13:03:40 +0000
Manifest this update: Thu 24 Sep 2026 13:03:40 +0000
Manifest next update: Fri 25 Sep 2026 13:03:40 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: B4b+GXweGst2gyLjvGhMqzwen/yCouue6a9xl+upZgg=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:b9:5f:cb:94:8a:2f:06:a0:d2:da:b7:b5:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Sep 24 13:03:40 2026 GMT
Not After : Sep 25 13:03:40 2026 GMT
Subject: CN=4bb232e10ae36a3b3ccbbef7a2570f4a872404d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:a0:ef:ac:99:b5:ec:56:30:7c:24:7a:e2:
dd:ba:b2:5f:1d:19:b7:5a:87:3d:e9:ba:26:23:3d:
56:44:dd:ad:6a:43:27:cb:47:c6:91:20:47:31:68:
ea:ba:3a:ab:34:e3:27:70:c0:48:ff:d1:b7:d4:18:
60:a6:9b:dd:ba:8b:0d:60:b2:fc:d2:a3:a7:b1:8f:
11:36:7d:55:ef:27:b9:c1:cd:a6:6d:01:b3:62:94:
5d:57:fa:8c:43:25:bc:38:e4:27:00:59:1b:0f:e5:
5f:a0:53:97:27:b6:92:91:b2:78:01:26:c3:75:f8:
ee:a6:d8:04:c4:35:3b:4a:2b:17:46:16:86:f6:8b:
e0:24:ed:8c:69:af:e5:59:a6:6e:e4:42:30:93:a4:
ca:44:08:89:8f:3d:cb:93:cb:a9:67:6d:f5:8e:08:
1a:71:7e:36:15:e8:ad:4b:9b:77:c8:f5:9f:c4:a6:
64:93:a1:4b:6d:a2:b2:89:e7:7b:e2:02:d7:76:97:
06:d0:94:0d:96:7d:df:4d:85:8a:67:8d:6c:a5:b4:
14:33:7c:db:fb:05:f1:ba:4e:5d:59:3a:46:da:4e:
79:86:b6:7e:20:e1:d1:51:b0:39:61:e4:b8:6d:6f:
20:73:10:05:68:32:14:35:fd:52:90:8c:60:51:80:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:32:E1:0A:E3:6A:3B:3C:CB:BE:F7:A2:57:0F:4A:87:24:04:D1
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f5:b5:a1:19:02:7b:ac:b4:3d:9d:8e:4c:a1:91:0a:d8:39:
4d:75:9a:65:2d:77:dc:ba:ee:7a:25:c5:2c:3e:77:6c:b2:dd:
90:a6:01:50:0b:94:fb:2c:e5:fc:9f:f2:1e:bb:a1:08:0f:44:
6f:db:fe:a0:64:21:e5:2a:83:a4:d7:4b:db:e6:e1:8d:6b:fa:
0e:3a:08:da:b1:86:40:73:b0:67:69:99:13:df:1e:64:d7:58:
b2:3a:ee:1f:6d:09:5a:44:84:55:84:69:66:d4:7d:40:f9:2f:
2a:e5:ab:55:96:b9:b4:18:b9:3e:7d:fb:95:72:f7:db:bc:46:
99:40:4a:9d:4b:bf:e8:8c:50:16:98:2d:61:71:fe:b2:dd:a8:
ac:1e:f5:76:43:4c:2e:88:48:89:a5:be:9d:d2:84:e0:9d:6f:
4c:6f:e3:05:b5:0f:cc:b9:f9:dc:e7:04:3e:88:e5:33:fb:43:
0c:6e:04:5f:97:92:36:a5:6f:7a:1d:cf:26:99:62:e4:aa:0a:
bb:a1:7a:42:39:7e:ff:ba:90:7d:76:d2:97:d1:b4:19:b7:4a:
f8:e5:ab:f0:5a:76:b0:d2:36:ac:f7:24:8e:23:f9:e4:cc:c6:
88:0d:90:e8:9d:67:e8:72:fe:4c:04:18:a2:a1:ab:4f:a6:e4:
1f:31:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:44:41 2026 by rpki-client