Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: ASRgfVnouZjAtMzCLQsQr2axaeXEMhm0GzJtz363TO4=
Subject key identifier: 68:DD:D7:F0:FD:31:7E:F5:ED:98:8D:63:4F:DF:7F:48:0C:2F:87:B5
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 01A0C7EAC3059BB08E5B1EF02CD92FB8D797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 1416
Signing time: Tue 22 Sep 2026 07:00:46 +0000
Manifest this update: Tue 22 Sep 2026 07:00:46 +0000
Manifest next update: Wed 23 Sep 2026 07:00:46 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: Y8Ekyr2LWZRfSObWMMjbDp+IAw8mnSj1Baw1vrGLPCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c3:05:9b:b0:8e:5b:1e:f0:2c:d9:2f:b8:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Sep 22 07:00:46 2026 GMT
Not After : Sep 23 07:00:46 2026 GMT
Subject: CN=68ddd7f0fd317ef5ed988d634fdf7f480c2f87b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:af:30:27:06:28:a8:32:9d:ca:39:99:0a:
06:2c:0a:fb:1f:db:8f:d7:4e:60:f0:eb:a7:86:e3:
a5:98:a6:bc:6e:06:80:29:c1:17:3e:75:34:48:17:
92:d2:1b:df:81:2a:57:bf:21:41:6c:47:3a:7c:57:
fb:e9:92:de:1a:1a:ad:44:7b:96:de:02:ce:a5:34:
9b:8b:78:dd:7f:89:c1:f2:41:e0:ef:ed:e5:8a:b2:
4e:87:93:36:cb:dc:cc:e2:18:f3:37:7a:d5:d4:2c:
15:9b:36:21:ab:25:9f:7b:9e:4a:a1:94:f7:34:82:
6d:78:ae:ee:55:b2:d8:5c:84:23:fc:01:f2:c0:a4:
89:69:ab:d2:6c:6f:ef:0f:41:0a:f9:db:6a:cd:01:
57:3a:f0:8a:ef:e3:98:b7:bc:04:f9:02:32:f2:94:
a3:0f:ed:e0:33:b5:63:4c:d3:64:a8:d5:24:78:77:
63:46:a1:c9:45:b9:7f:9a:bf:a9:07:ab:8f:d4:ae:
cf:da:85:16:24:f0:81:56:9b:99:42:f3:56:6c:c1:
40:9b:37:aa:bd:2b:2f:50:64:63:2f:a1:46:ee:db:
70:29:c3:59:54:a2:df:e4:dc:a0:a4:19:c2:2e:8c:
c9:ed:2b:d3:f3:22:bb:28:79:08:46:15:3c:e8:ea:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:D7:F0:FD:31:7E:F5:ED:98:8D:63:4F:DF:7F:48:0C:2F:87:B5
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:83:2c:e9:f0:41:c8:0d:68:e6:9e:75:e3:25:b9:41:3e:
9a:11:41:fc:62:57:fb:a8:29:e8:77:08:dc:d2:5a:25:1b:90:
37:60:3c:e1:76:be:4b:da:e9:13:9f:71:c1:20:ef:ca:f8:fe:
9c:8c:cf:48:4a:7f:e9:4f:4a:97:0e:f5:79:68:0f:c7:af:3b:
6a:be:30:72:e5:21:bc:51:3e:e6:e7:88:95:13:10:2c:6a:3a:
fa:6b:ba:b0:86:dd:50:c7:ad:b3:a1:e8:66:27:a9:94:41:dd:
41:8b:4f:e8:ad:73:e0:1f:e2:18:fc:b5:d7:49:f3:1b:9c:c2:
53:92:8d:9a:a3:d1:4b:13:9c:dc:81:a7:c8:28:9e:e7:a7:b4:
aa:6d:c0:62:1c:7c:d5:1c:d1:46:c7:a8:2d:23:da:40:16:73:
e5:30:8b:53:9d:3c:52:a3:14:3d:fa:f0:ef:d3:39:87:de:96:
35:45:04:6b:42:8b:21:82:59:70:e4:ed:1d:57:f5:75:d6:5e:
82:62:65:70:af:e8:aa:ea:c7:52:dc:19:2f:56:6b:43:33:19:
02:3a:9a:fd:e8:85:83:fc:06:cb:64:23:a6:11:47:77:f9:d1:
2b:a0:d2:02:3a:d5:d0:ac:06:10:95:2e:f8:6c:35:d0:23:bf:
af:f7:d7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6sMFm7COWx7wLNkvuNeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjYwOTIyMDcwMDQ2WhcNMjYwOTIzMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg2OGRkZDdmMGZkMzE3ZWY1ZWQ5ODhkNjM0ZmRmN2Y0ODBjMmY4N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TmvMCcGKKgynco5mQoGLAr7H9uP
105g8OunhuOlmKa8bgaAKcEXPnU0SBeS0hvfgSpXvyFBbEc6fFf76ZLeGhqtRHuW
3gLOpTSbi3jdf4nB8kHg7+3lirJOh5M2y9zM4hjzN3rV1CwVmzYhqyWfe55KoZT3
NIJteK7uVbLYXIQj/AHywKSJaavSbG/vD0EK+dtqzQFXOvCK7+OYt7wE+QIy8pSj
D+3gM7VjTNNkqNUkeHdjRqHJRbl/mr+pB6uP1K7P2oUWJPCBVpuZQvNWbMFAmzeq
vSsvUGRjL6FG7ttwKcNZVKLf5NygpBnCLozJ7SvT8yK7KHkIRhU86Ooe5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjd1/D9MX717ZiNY0/ff0gML4e1MB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX+DLOnw
QcgNaOaedeMluUE+mhFB/GJX+6gp6HcI3NJaJRuQN2A84Xa+S9rpE59xwSDvyvj+
nIzPSEp/6U9Klw71eWgPx687ar4wcuUhvFE+5ueIlRMQLGo6+mu6sIbdUMets6Ho
ZieplEHdQYtP6K1z4B/iGPy110nzG5zCU5KNmqPRSxOc3IGnyCie56e0qm3AYhx8
1RzRRseoLSPaQBZz5TCLU508UqMUPfrw79M5h96WNUUEa0KLIYJZcOTtHVf1ddZe
gmJlcK/oqurHUtwZL1ZrQzMZAjqa/eiFg/wGy2QjphFHd/nRK6DSAjrV0KwGEJUu
+Gw10CO/r/fXMQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:30 2026 by rpki-client