Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: WmNpucFPq9Q32/ReoeAQDnkm3Kp779OwunjG0RPthV0=
Subject key identifier: A1:8E:28:7B:55:F3:AB:70:B1:53:35:09:9B:1C:22:D1:3F:40:A0:69
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 01A0C39FD4FD8B8C79B6DE177AF42A5ECCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 154A
Signing time: Mon 21 Sep 2026 11:00:26 +0000
Manifest this update: Mon 21 Sep 2026 11:00:26 +0000
Manifest next update: Tue 22 Sep 2026 11:00:26 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: IZ3tE4VNPaVDydqUgJH4cwVXPBbFUiEGbuBrUHyg8V8=)
2: HZKZt3i0tjhRATmGdiaaPS481ik.roa (hash: VGXONJbfgCWkz7Yv9blCEOKW4j+yHw/XZ24zEdm0ahs=)
3: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
4: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
5: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d4:fd:8b:8c:79:b6:de:17:7a:f4:2a:5e:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Sep 21 11:00:26 2026 GMT
Not After : Sep 22 11:00:26 2026 GMT
Subject: CN=a18e287b55f3ab70b15335099b1c22d13f40a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:c7:41:4f:c8:48:a1:35:97:9f:c8:9b:0f:
ac:b5:1c:53:98:f8:5f:0f:6b:a8:1f:d6:89:9b:e1:
ac:01:f0:8b:5d:f1:05:eb:1d:eb:9f:e2:a6:95:c6:
82:1d:17:a5:46:ed:13:21:5f:29:87:60:b3:78:b3:
9c:49:57:27:f4:bc:1b:75:6c:4e:94:89:7d:eb:b5:
6e:fd:aa:64:62:ee:d7:2c:f5:58:16:a3:c2:81:45:
5a:be:1c:2f:ed:3c:06:5d:1f:4f:0c:97:15:bb:03:
a4:45:97:94:93:f2:97:f9:5d:e7:bc:20:45:e9:10:
49:ee:56:f9:32:3a:e6:5b:e6:fc:dc:5d:22:c8:8b:
c7:61:d8:9e:fa:0e:cf:9d:e3:6d:86:43:87:15:26:
16:3f:eb:79:5a:e1:a4:18:da:22:b9:ef:d2:bd:5f:
7a:41:40:9d:1f:e0:1b:5b:f5:4d:da:54:9d:f1:e2:
1e:90:dd:9e:1d:58:9c:06:ca:c0:04:a9:86:41:8d:
9c:2a:14:76:6a:b6:24:b5:9f:2f:fc:d1:a3:90:fc:
c9:4c:17:c3:e1:79:47:09:a2:c7:cb:bc:b4:93:cf:
dc:ab:ef:f2:b4:30:da:9b:d0:c1:b1:33:e3:78:1d:
4e:45:e1:27:ab:8e:9f:91:96:0b:1f:b7:39:0e:fc:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:28:7B:55:F3:AB:70:B1:53:35:09:9B:1C:22:D1:3F:40:A0:69
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:82:1c:6f:b9:8c:39:06:a9:2a:03:18:d5:75:7b:7c:c8:
8a:27:a6:77:8f:cf:34:3a:f0:ca:37:e4:5b:5a:1f:32:d4:66:
cb:72:24:83:1d:6d:36:d2:57:f0:7c:da:0b:7c:4c:ad:6e:ff:
b4:8b:02:af:9f:d0:5b:53:b1:ca:c8:3f:76:1e:d0:28:e6:0b:
3e:23:50:42:7f:40:3d:ff:03:96:88:61:19:8b:71:15:84:f1:
e4:e6:31:7e:ad:fa:32:b6:0e:90:78:49:8f:ab:df:dd:2c:ad:
ac:c0:d0:01:0c:28:3d:86:09:c3:84:b3:cc:3a:e7:a9:6c:54:
a2:bb:a3:c1:f7:96:d7:1f:94:24:bf:98:45:0b:b0:e9:d8:b0:
5e:f2:0e:74:89:5d:68:e9:04:ed:a0:be:75:7e:14:9b:e6:1a:
d1:65:24:5e:22:0d:83:08:2b:7d:4c:7f:cb:b6:90:29:73:16:
7f:22:c4:c0:5e:4f:4d:f0:be:d1:c8:ed:72:d1:e4:22:4d:68:
08:c5:47:f2:b7:2d:11:e6:e6:64:ab:aa:81:07:28:71:64:35:
17:56:06:b4:7d:74:2a:ba:3e:b8:37:18:0f:3b:8a:f9:19:09:
c8:11:ba:f0:58:87:99:d7:9d:55:e4:61:40:b9:ea:15:58:16:
bc:4f:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:16:54 2026 by rpki-client