Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: GMKq8eBD1kZg1VDPe4RcUQF7XFvGlPWAKKs2Deet44g=
Subject key identifier: 90:5F:48:95:40:80:EB:03:6C:77:CE:C2:E6:09:C6:BE:0A:B3:DD:D5
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 01A0E8F6D5AD83DD6FBE019A06A58485DFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0EB7
Signing time: Mon 28 Sep 2026 17:01:25 +0000
Manifest this update: Mon 28 Sep 2026 17:01:25 +0000
Manifest next update: Tue 29 Sep 2026 17:01:25 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: T7+2nAtl5Vn+gNYNfaZgBDFuy+t0vkXCapvHpZrPv0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:d5:ad:83:dd:6f:be:01:9a:06:a5:84:85:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Sep 28 17:01:25 2026 GMT
Not After : Sep 29 17:01:25 2026 GMT
Subject: CN=905f48954080eb036c77cec2e609c6be0ab3ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:b0:1f:30:f3:d1:4b:fb:b4:c8:8b:39:c4:
f2:bb:79:ee:5b:d0:4b:be:0d:20:f3:09:f8:82:7a:
6c:64:2a:31:1f:87:e4:2b:84:47:85:19:d5:eb:f0:
97:32:8a:44:65:c0:59:02:19:69:82:b0:7e:15:c1:
09:d8:b7:14:80:c1:27:ea:d2:a5:73:e0:30:a2:56:
ab:85:0e:05:7e:18:49:f7:85:b9:41:3b:e8:78:a0:
5e:6b:bb:d5:9b:03:b0:52:ce:26:e5:5d:72:2c:48:
2b:d4:1e:fb:41:48:03:b6:eb:4a:90:7f:a3:81:b5:
90:92:40:af:8c:b5:11:51:23:8a:74:96:28:f2:b4:
52:71:bd:09:37:cd:c1:3f:d3:9a:84:d6:c7:f8:ab:
dc:4f:16:e6:4d:99:55:a7:ed:98:20:c6:14:cd:8f:
f2:d4:d9:a5:6e:85:25:d5:df:6c:f9:51:37:84:cc:
85:18:92:a5:7d:0d:18:48:60:52:2b:c0:fe:47:a3:
ae:27:fb:ae:a0:d5:d5:ed:87:dc:3e:a9:7c:f2:aa:
06:82:a1:61:6b:dd:d7:ea:08:a6:0e:3b:b0:68:fd:
84:9c:49:c1:a1:c3:58:cf:9e:04:3f:90:75:b1:ca:
74:a8:20:b7:1e:ff:c2:a5:ba:e0:17:8b:8a:7a:52:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:48:95:40:80:EB:03:6C:77:CE:C2:E6:09:C6:BE:0A:B3:DD:D5
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ad:a0:cb:61:17:96:a6:98:f4:fe:d7:fa:1b:bd:ae:d7:45:
77:35:7b:d4:6b:74:3f:8b:ac:6e:a4:33:60:5e:7b:83:51:b2:
3b:cd:3b:49:7a:ec:f8:e3:00:a4:32:dd:72:d4:ca:cb:c3:f5:
76:b0:09:08:1e:35:7b:fe:29:de:68:54:36:21:ab:cf:bd:a0:
35:ba:b3:74:e5:91:f2:8a:ed:8a:03:e1:55:c2:26:b9:64:c6:
ec:09:4e:76:19:80:90:b7:b5:4b:a3:98:2a:02:49:b8:fa:d8:
da:5d:85:86:3b:5a:b3:05:f1:bf:54:72:64:7a:65:93:4e:6f:
1f:12:9c:51:9c:b7:be:d6:6b:d4:61:5d:f2:84:d6:82:7f:ec:
21:88:0c:67:fd:85:e2:3c:24:0c:6d:43:dc:4a:80:23:81:b7:
53:26:dd:79:c6:f5:ce:71:9b:7c:29:e4:76:af:a4:fc:5f:55:
60:54:8a:83:90:78:a6:d7:49:b0:ac:c5:f1:31:16:5a:1b:2d:
3c:d4:e7:30:3b:4f:11:ec:b3:5a:22:a2:1f:4e:d6:a5:32:3d:
12:2e:c2:d0:a4:a1:59:ad:04:d9:2e:04:3f:7e:06:73:5f:d2:
96:db:79:e4:f3:af:29:77:68:c1:0f:11:c0:71:46:91:3f:78:
98:b3:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:12:43 2026 by rpki-client