Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: XqWehrYWEhXMHEspOBtDnunMowNkddnkOvIIO6zt3EE=
Subject key identifier: A9:C8:72:D6:BA:EF:5E:FD:2D:B8:7F:EA:A8:CE:75:E6:BD:08:5F:F2
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01A0D34B2902E539A27A4B8FBAB88D54253D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0A63
Signing time: Thu 24 Sep 2026 12:01:53 +0000
Manifest this update: Thu 24 Sep 2026 12:01:53 +0000
Manifest next update: Fri 25 Sep 2026 12:01:53 +0000
Files and hashes: 1: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: VmEPrndJ1l1J10ah6LLrxAFzP8TXGT2iBQnfLlFgJyY=)
3: fY0xOILdXQ_CS-iTNJoFmP8blsA.asa (hash: DuVD+XPpR4oHnDDsfTjsOxjeLxWwKH+VHAE/Fl8hWC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:29:02:e5:39:a2:7a:4b:8f:ba:b8:8d:54:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Sep 24 12:01:53 2026 GMT
Not After : Sep 25 12:01:53 2026 GMT
Subject: CN=a9c872d6baef5efd2db87feaa8ce75e6bd085ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:f5:a3:d4:26:9b:ee:f5:7e:3f:0e:ea:28:
b6:41:76:1e:8d:15:78:b6:e5:e3:18:cb:1b:9e:d1:
1d:9c:bf:2a:b8:b4:ce:e8:f0:98:c5:05:92:ec:33:
f8:ae:d9:49:90:6e:e3:48:c0:07:78:be:3b:0f:ea:
05:12:db:c2:69:e9:72:73:5b:9e:ac:94:cf:03:f4:
cf:82:da:37:a6:e1:ee:03:ae:6a:f0:c2:10:fb:90:
be:65:28:3f:06:3d:7d:b1:32:80:f3:15:3e:8d:f4:
48:11:5a:04:b5:3c:f9:d6:56:ed:4b:77:ad:11:a5:
25:93:29:7b:3a:06:c0:0b:1f:cb:0b:d1:a8:39:ee:
de:f0:50:c0:19:59:0a:b1:c1:76:0e:bb:8e:bb:1a:
b7:1d:a5:c3:c9:d4:30:65:a9:c1:d3:15:91:1c:ff:
73:a4:48:a2:d5:0d:a3:47:3a:36:60:41:c9:e8:de:
a7:ed:56:73:7f:8f:3f:fa:1f:4f:e5:5f:be:38:3d:
94:6e:ee:1f:78:6d:63:60:a0:42:1f:0d:d5:10:81:
ae:b8:07:f1:1a:64:df:ce:a6:c7:31:c5:1d:93:3b:
d7:7c:1c:80:0c:6f:b2:00:d6:13:2c:af:62:e6:45:
65:5d:b1:26:df:45:d7:57:07:07:dc:9d:2c:56:16:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:72:D6:BA:EF:5E:FD:2D:B8:7F:EA:A8:CE:75:E6:BD:08:5F:F2
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b0:1b:d7:1b:2f:b9:ce:75:37:bb:07:9d:9c:d5:b5:e4:7d:
4d:f3:6a:eb:56:ca:ba:6e:ff:2c:9a:02:06:c8:3f:e5:a0:f3:
06:79:4b:f3:e7:ec:b1:98:72:4f:08:86:d7:81:6b:cd:1b:c7:
a2:3e:eb:b8:fe:e6:7c:00:5c:90:f1:33:48:9b:41:5c:32:1b:
4b:eb:14:e9:d3:4c:56:50:83:b5:59:bd:fd:61:a9:25:ba:2b:
a6:05:6f:57:f6:d6:19:34:0f:b1:af:4b:59:30:07:be:6e:5c:
81:5e:6b:f3:cc:4b:60:55:07:24:68:a0:e0:9c:6f:0d:b3:df:
8c:c9:26:3f:37:1e:43:1d:b7:f9:6a:f9:a2:5e:33:df:09:7b:
f8:84:9f:5b:83:8b:14:72:ae:71:b7:cc:07:ac:34:2b:14:7a:
2f:51:10:72:64:71:4d:f7:95:4c:8c:22:00:92:8e:f4:5d:be:
a6:46:70:37:34:d7:46:9a:91:e2:55:f2:83:d5:bc:a4:4d:45:
3a:44:77:69:6d:bf:53:62:8f:f6:ff:96:29:4c:12:05:df:cf:
5b:b0:1b:a1:99:ae:0f:ba:c6:2b:d8:57:be:b1:de:e9:8b:f2:
be:aa:ed:44:e1:9c:e3:9d:f9:c8:fa:b8:ed:36:e9:93:c5:b8:
0e:fb:b2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSykC5TmiekuPuriNVCU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1
NTc0NGYwHhcNMjYwOTI0MTIwMTUzWhcNMjYwOTI1MTIwMTUzWjAzMTEwLwYDVQQD
EyhhOWM4NzJkNmJhZWY1ZWZkMmRiODdmZWFhOGNlNzVlNmJkMDg1ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFf1o9Qmm+71fj8O6ii2QXYejRV4
tuXjGMsbntEdnL8quLTO6PCYxQWS7DP4rtlJkG7jSMAHeL47D+oFEtvCaelyc1ue
rJTPA/TPgto3puHuA65q8MIQ+5C+ZSg/Bj19sTKA8xU+jfRIEVoEtTz51lbtS3et
EaUlkyl7OgbACx/LC9GoOe7e8FDAGVkKscF2DruOuxq3HaXDydQwZanB0xWRHP9z
pEii1Q2jRzo2YEHJ6N6n7VZzf48/+h9P5V++OD2Ubu4feG1jYKBCHw3VEIGuuAfx
GmTfzqbHMcUdkzvXfByADG+yANYTLK9i5kVlXbEm30XXVwcH3J0sVhYhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnIcta67179Lbh/6qjOdea9CF/yMB8GA1UdIwQY
MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt
MTk0MmUwODlmMGIwLzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw
LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrAb1xsv
uc51N7sHnZzVteR9TfNq61bKum7/LJoCBsg/5aDzBnlL8+fssZhyTwiG14FrzRvH
oj7ruP7mfABckPEzSJtBXDIbS+sU6dNMVlCDtVm9/WGpJborpgVvV/bWGTQPsa9L
WTAHvm5cgV5r88xLYFUHJGig4JxvDbPfjMkmPzceQx23+Wr5ol4z3wl7+ISfW4OL
FHKucbfMB6w0KxR6L1EQcmRxTfeVTIwiAJKO9F2+pkZwNzTXRpqR4lXyg9W8pE1F
OkR3aW2/U2KP9v+WKUwSBd/PW7AboZmuD7rGK9hXvrHe6YvyvqrtROGc4535yPq4
7Tbpk8W4DvuySA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:36:13 2026 by rpki-client