Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier: sPZK+dl99U3EYdUiKcb7AyE+rfyGIhMgmg2RbyeoTlA=
Subject key identifier: F6:66:E6:DF:08:FA:F4:A1:D7:D6:20:A0:DA:B6:A2:1D:DB:B0:3C:AD
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial: 019CAC7DE4F7E95B4D35BAB6E2E2FE87D72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number: 04CD
Signing time: Mon 02 Mar 2026 03:00:57 +0000
Manifest this update: Mon 02 Mar 2026 03:00:57 +0000
Manifest next update: Tue 03 Mar 2026 03:00:57 +0000
Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: Hp4wWo7MUHiTYbGOdxJ7fV+ze6XCYi4wt6E1Cs1a7bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e4:f7:e9:5b:4d:35:ba:b6:e2:e2:fe:87:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
Validity
Not Before: Mar 2 03:00:57 2026 GMT
Not After : Mar 3 03:00:57 2026 GMT
Subject: CN=f666e6df08faf4a1d7d620a0dab6a21ddbb03cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:03:fe:23:48:85:67:cf:e4:77:86:db:97:
49:d7:62:c1:a1:af:f6:84:33:84:6a:d6:4e:ae:36:
fb:33:e8:30:fc:0d:cd:89:ec:a5:c7:cd:89:ab:87:
88:36:1d:66:d8:14:ec:7e:75:21:8c:f6:6a:5f:ce:
eb:65:84:11:d8:35:0b:d7:13:f5:2b:fb:f2:5c:8e:
d3:c5:36:21:3f:4c:48:9b:29:34:dd:01:4f:47:a0:
1f:9b:60:ae:76:9d:5c:6a:02:75:f9:ce:a7:f0:5f:
b2:35:54:9b:89:05:a1:33:94:5b:00:4d:dc:ef:fb:
d6:be:eb:0d:c3:82:28:ca:b7:69:42:8d:80:36:cf:
0e:79:7f:0a:7f:f5:be:ee:24:61:3b:f6:c9:aa:4d:
d4:0d:8f:01:89:25:1c:e8:0b:5a:1c:ef:bd:1a:94:
bb:1a:37:0d:1f:0b:76:a3:39:65:f5:94:ef:ca:33:
80:23:3a:10:46:6f:12:9e:d0:1a:82:26:5b:de:24:
44:a1:c6:eb:7b:f3:fc:c9:b8:7b:13:25:49:4f:37:
b6:c4:3b:c1:fa:c4:db:27:20:49:7c:fb:74:1e:71:
48:20:7c:f2:8a:5d:56:23:59:31:03:aa:68:2b:64:
e5:e3:df:f1:2c:f1:6a:7d:7f:37:8f:d5:dc:9d:82:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:E6:DF:08:FA:F4:A1:D7:D6:20:A0:DA:B6:A2:1D:DB:B0:3C:AD
X509v3 Authority Key Identifier:
keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:00:28:2a:2e:e1:58:88:b4:1a:72:84:57:1c:63:ad:0f:49:
29:b7:12:8f:23:a7:61:67:e4:05:c2:e6:15:83:80:96:bc:b6:
6c:cf:e4:14:48:a3:7c:e3:e0:58:8d:a0:5f:9f:8e:5e:6b:3d:
e6:63:57:0b:15:89:72:d7:81:5c:e3:2c:77:09:ef:df:e4:73:
05:ad:09:8f:5e:76:60:0f:10:63:fa:3c:36:9d:6e:62:40:a3:
3f:e8:5f:f8:91:f6:db:14:ec:f5:8c:4f:36:88:d0:a8:da:d7:
cc:c1:82:99:76:4b:e5:73:73:67:66:86:55:e1:93:7c:e7:3c:
af:80:28:fa:03:c9:3c:c2:72:e3:60:f9:2c:98:ee:b1:31:2b:
c8:a3:fe:d1:84:dc:0a:cb:69:f9:2a:54:bc:98:52:14:80:a3:
3f:5d:d3:74:0d:87:77:40:a1:47:47:d2:fe:bc:b0:7b:75:9f:
b5:0c:e7:3c:06:a4:fa:c7:89:3f:8f:3f:e2:55:eb:05:c7:78:
a8:b9:0e:b2:35:ed:f3:06:92:05:1b:18:7a:e4:da:1a:bd:d5:
4d:92:89:1d:24:c1:d2:47:85:05:5c:7d:9f:fb:48:4e:b9:d8:
ed:55:76:e9:31:46:b9:0c:b8:41:18:7c:ab:73:97:23:d2:d8:
b4:35:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:55 2026 by rpki-client