Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: 9c98HUMHMb+aFpk9RTTIKnLxWi+j4DldCnkDCNX9aN8=
Subject key identifier: 8D:52:A5:DC:CE:E9:2E:25:C9:58:28:91:4B:16:6B:FC:B9:1E:62:C1
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019CACEB7EB983412D56CEC4999A855F10D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: TZz8NGSCzzt8h38yT7tDHga4ZPCjX5ijkyOSHBd412k=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7e:b9:83:41:2d:56:ce:c4:99:9a:85:5f:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=8d52a5dccee92e25c95828914b166bfcb91e62c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:b1:c5:cc:e9:f5:e4:35:c7:f3:ad:61:47:
9d:e3:82:ef:4d:eb:8d:dc:07:92:d0:a7:f8:23:cd:
56:1b:b7:8f:0e:8e:e7:b5:37:9d:9f:34:60:74:65:
fd:57:9a:5d:df:d0:d9:88:f5:13:66:65:1c:54:1c:
fc:44:a3:7f:20:f1:27:71:d9:32:c4:43:41:53:3a:
23:31:aa:a7:24:ad:90:7c:f4:28:d5:fb:9f:c7:f3:
d9:45:52:ec:7c:cc:05:d0:03:7b:20:6b:f8:a2:06:
2c:23:c7:9f:05:84:3b:c6:f9:5a:2d:d5:90:e5:df:
e0:c2:68:c3:ea:09:33:64:58:1e:da:a9:f6:de:c2:
2d:46:bb:17:aa:ee:e7:14:b7:e4:ca:7c:d0:ba:ce:
be:08:c5:7b:7f:6b:12:0f:23:83:22:d8:03:c7:4c:
24:0d:b1:61:2d:28:19:9a:9c:7d:1b:98:d3:95:2b:
81:a9:fa:5a:c0:0a:ea:e3:56:6d:e4:d6:09:e1:4a:
23:e1:13:a1:55:fd:ba:89:2c:52:dd:b5:5f:cf:ec:
2f:08:94:aa:14:92:ca:3c:61:ed:e7:ba:a6:9d:f3:
1e:15:97:b2:c2:d8:47:b7:84:22:62:05:d4:26:ed:
cf:35:d7:b5:e4:14:19:85:b1:ad:c3:e2:e4:05:02:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:52:A5:DC:CE:E9:2E:25:C9:58:28:91:4B:16:6B:FC:B9:1E:62:C1
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:af:0e:d4:07:7c:08:64:c3:b2:13:63:02:54:0a:20:5b:8e:
b3:2b:e2:8e:fd:9e:18:1d:c9:16:9b:20:ad:15:67:03:56:b2:
51:af:b2:5c:cf:a2:bf:c1:77:02:31:f2:10:61:af:bb:91:be:
15:73:eb:ce:ad:d1:d1:1a:c1:fd:03:9e:03:21:92:75:92:a5:
fe:7f:97:d7:fa:ca:29:92:6a:f4:0a:38:68:85:71:24:78:f5:
24:c6:e1:9d:81:2f:e3:47:c4:b5:47:b9:8c:53:09:8d:7d:61:
39:84:a9:2b:4c:8e:36:86:96:4f:c9:2e:02:e5:8b:e2:94:d9:
33:4b:3b:f5:37:1f:92:85:e9:a3:f8:d3:99:a5:06:12:fc:85:
b7:82:4c:f8:af:8d:69:28:74:9a:29:da:c7:ac:65:38:a0:fe:
3e:81:1c:d3:3f:0a:f7:58:18:b2:8b:ee:d1:ed:95:55:2e:dd:
9f:5c:b4:43:1f:6d:11:3b:f9:6d:f5:e4:af:19:6c:38:42:87:
b6:e4:31:dd:e5:58:b5:bc:9e:33:76:bb:26:c4:23:6a:7c:24:
8e:7d:7e:0e:5a:41:32:05:18:6d:72:01:b1:c4:40:55:cc:19:
10:55:90:2f:67:53:47:73:5a:82:6f:d1:f4:b5:29:fc:d9:17:
48:43:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:30 2026 by rpki-client