Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: GXu7NnQmmsO2KKAbgvrl2v1gb9o0kbxCaTRpUuL+XPo=
Subject key identifier: 10:82:32:48:59:DC:F4:29:AA:C8:9B:74:AC:67:64:61:96:93:3D:A4
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01A0BE0BC6A2C8BD95AD2B7CC80542F915B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 09:00:37 +0000
Manifest this update: Sun 20 Sep 2026 09:00:37 +0000
Manifest next update: Mon 21 Sep 2026 09:00:37 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: h5DLlyoBp1rpYo6rC4Rb8vvY6JvjvK3KO8+u8V3sSQc=)
2: b8fmiRsHfa1HeafrL2c67PcFnCg.roa (hash: LNAixwqyhx4gcnGKNiUYlHjHNINv1hh3kb/KDSTw940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:c6:a2:c8:bd:95:ad:2b:7c:c8:05:42:f9:15:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Sep 20 09:00:37 2026 GMT
Not After : Sep 21 09:00:37 2026 GMT
Subject: CN=1082324859dcf429aac89b74ac67646196933da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:ad:ec:b2:f2:f0:67:62:3e:31:e2:fb:25:
b3:96:4c:eb:17:24:98:02:56:af:6c:89:a1:95:66:
48:13:70:f5:ad:63:db:9c:a1:fe:aa:5d:aa:72:5e:
6f:64:b8:b7:d2:b4:72:ab:24:46:7b:87:8e:b1:0f:
b3:df:f7:d4:34:c6:86:2e:5a:0c:27:78:38:30:cf:
f4:ec:4e:ed:4f:d9:a8:33:0c:18:90:fc:2f:69:d6:
99:24:84:df:40:ee:13:ba:91:4d:50:53:27:83:f4:
4d:76:b8:32:6c:4b:2b:40:b8:dd:7f:bd:82:a0:49:
ac:55:bf:77:65:15:32:55:90:f9:77:77:75:13:25:
bb:36:d4:4f:aa:26:e4:f5:d9:88:3d:e0:93:19:29:
d5:12:8e:21:d5:53:ed:c8:e2:66:bb:ed:03:a2:3a:
6f:f9:30:9c:7b:ea:a5:fe:a7:97:29:21:fd:b2:0b:
37:ff:89:c2:36:1b:6c:48:44:55:16:34:4c:3c:84:
1e:5c:a2:65:a9:9d:3a:84:19:ed:5a:67:f2:3d:ba:
c3:e4:59:4c:39:87:eb:08:9c:02:28:c9:60:89:79:
0c:0d:81:c6:8b:7f:a5:3a:1b:10:7e:42:42:47:2f:
53:ea:61:71:0d:c7:7a:c5:f9:82:37:70:6f:c6:c2:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:32:48:59:DC:F4:29:AA:C8:9B:74:AC:67:64:61:96:93:3D:A4
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f2:fa:4a:a8:af:91:28:1b:69:0e:77:97:36:3e:b9:c2:2e:
56:c2:66:f8:20:c1:5f:a3:c6:8b:7f:6b:ce:98:27:76:e7:6f:
f8:6b:b6:d0:09:de:7b:62:e0:22:fc:dd:40:ff:af:96:a9:8a:
f5:3e:e2:f4:7e:7a:68:43:16:98:e9:c5:27:54:81:e0:6b:2e:
12:20:42:39:49:cb:bf:82:19:ad:fd:ce:b1:43:20:28:15:17:
2a:d9:72:a2:5c:be:b4:e2:69:d5:4e:db:f3:5d:47:41:a8:25:
c9:aa:cc:0b:d5:a0:0c:d4:ed:29:18:99:ef:66:55:26:66:f1:
70:b3:45:69:1f:35:90:ae:0d:ef:a0:be:ad:83:7d:39:c2:7a:
7b:90:8b:9e:d4:43:e0:66:21:b4:ea:04:80:78:49:ca:ab:d7:
dd:f1:0c:8f:b0:5f:37:d7:36:c2:96:43:2a:92:2d:ed:54:58:
61:94:ff:ad:bb:de:74:14:61:2b:61:e3:97:5f:db:3c:eb:0f:
b9:1b:b4:b7:11:3c:59:fd:65:07:7a:d8:0b:88:85:dd:96:a7:
da:b1:95:2e:c8:30:b3:96:be:45:70:2e:bd:07:80:42:68:8a:
bb:a1:46:b4:9f:f1:a0:53:c0:3a:1d:0e:bd:44:70:e8:99:77:
59:4b:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:48:23 2026 by rpki-client