Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: ClUXTkI8dQJOX43KKb35xBcdPS4qrRBEP9ftmGtkmhs=
Subject key identifier: 80:7C:26:9D:37:30:5D:BB:37:B2:41:24:2E:BE:EB:0E:6B:7E:69:2A
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 01A0D2A6371AD49BBFD75B3C8FC89EEEA0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 09:01:43 +0000
Manifest this update: Thu 24 Sep 2026 09:01:43 +0000
Manifest next update: Fri 25 Sep 2026 09:01:43 +0000
Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: CPZeDBxNcZ+YRvAoTS82KLojyx0Yx6nr1ZggoBUqBVk=)
2: hA6_YTErxhku_uiY6bcvhY1hUhs.roa (hash: Q6FjJQt1zpguz0aAPZUF4vlr1RqYwbpYRo9ftd9mu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:37:1a:d4:9b:bf:d7:5b:3c:8f:c8:9e:ee:a0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Sep 24 09:01:43 2026 GMT
Not After : Sep 25 09:01:43 2026 GMT
Subject: CN=807c269d37305dbb37b241242ebeeb0e6b7e692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:9e:7a:bc:5a:99:10:7e:c9:dc:7b:c3:20:
90:cc:65:d7:fb:0e:e3:70:33:9a:bf:48:69:f5:ce:
be:36:8a:60:dd:95:54:e6:8f:51:e2:1b:31:06:b6:
c4:b9:93:fe:5a:75:ab:73:2d:52:ed:02:50:51:87:
29:3d:d2:71:82:40:5c:af:f0:24:49:3a:3b:b6:b1:
1d:3a:b3:7f:0d:8a:30:f6:26:42:b6:d3:c1:c9:d8:
a1:d0:aa:8b:e6:47:7d:18:97:ac:bf:66:8d:d4:4e:
7d:61:88:a4:49:ce:f7:66:0f:e8:e3:70:5c:24:22:
69:f6:73:7b:fb:15:5a:6d:b9:44:01:a8:54:34:d2:
11:2f:2f:8a:24:5a:63:8d:33:46:89:71:6b:89:75:
c7:d0:58:5d:d1:14:e1:36:26:28:f1:21:e1:2b:46:
b2:88:32:bb:e4:a5:99:a2:4d:b9:c4:a9:d6:b6:94:
12:2e:63:37:4c:e5:e8:a5:e1:b6:ce:31:37:75:04:
96:02:c6:45:de:ea:31:89:43:4e:ae:b4:c2:97:79:
4f:db:33:4f:33:a2:d0:72:01:5f:96:40:2c:0b:b6:
b4:89:ec:2e:06:eb:77:dc:c1:70:f0:92:f0:87:3b:
e2:de:78:31:b8:86:7c:8d:e7:1b:c5:a1:b2:3c:b8:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:26:9D:37:30:5D:BB:37:B2:41:24:2E:BE:EB:0E:6B:7E:69:2A
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4c:3a:f0:37:2a:c3:7b:2c:c5:59:d8:d8:d0:96:76:cb:9f:
df:55:6b:b8:02:41:ad:f2:66:3b:09:d8:44:73:34:0e:5a:7d:
ef:26:00:c4:f5:a4:15:be:65:07:f9:f3:a2:7b:e9:4c:b5:e9:
2d:f2:2f:1f:2a:28:07:f8:14:0a:b1:82:2b:b2:c7:cf:a7:d5:
ac:88:f9:ff:a2:3b:d7:a1:a1:e8:f2:46:f9:d8:3e:14:1d:8d:
2f:7a:bb:dd:06:94:4b:5b:2e:70:ad:ad:37:1b:e8:d0:5a:6e:
b3:96:6a:48:a9:18:2a:81:89:eb:25:e7:dd:cc:5c:a6:6e:28:
3e:ed:e5:fa:76:94:f3:ee:41:5a:24:f3:17:5f:30:73:70:5c:
3b:7b:9e:ca:51:e5:04:1f:2f:ca:74:96:5f:38:6c:76:85:0b:
a4:ca:ca:f4:64:e5:db:86:86:d2:32:95:20:3d:41:64:06:a3:
1e:36:5a:b5:cc:80:d8:2b:11:0c:af:e5:91:e3:84:69:0d:98:
e4:49:b7:78:b5:ee:b3:a6:dc:ec:d0:e9:a3:42:d3:7a:3a:2e:
f4:08:96:61:58:ae:16:41:d3:e8:e6:a7:b4:f1:23:02:24:28:
aa:b8:a1:f1:55:5e:1f:f4:66:20:85:e0:ba:c7:1c:99:b9:8f:
16:a8:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:14:21 2026 by rpki-client