Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: djTJvWoBZb+JXp+JiXedUTH3Rqf3v7oMK1SA0bapbWw=
Subject key identifier: FA:D2:F3:ED:EA:44:3C:14:88:95:04:CE:75:28:7A:6C:CA:69:62:B5
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019CAAFD06597D4E6814EC253B2F2618C677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 138A
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: gHpf2LeRRVkUeySfi0sLhg/eNAAgc7fl+lb8oNgH3Rw=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:06:59:7d:4e:68:14:ec:25:3b:2f:26:18:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=fad2f3edea443c14889504ce75287a6cca6962b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:ee:4b:d4:13:9a:ee:38:ea:a1:17:0c:e4:
f4:8e:2f:66:eb:ad:7e:5f:ae:ae:14:79:e8:57:ad:
f1:22:ed:62:fe:4a:fd:c2:58:82:63:db:54:55:e7:
2a:d7:be:76:e1:2f:90:61:b2:b8:08:e5:33:16:5e:
d9:e8:93:06:e2:94:4a:49:ea:98:4b:b5:b7:df:cd:
58:74:f7:c2:ce:dc:31:2b:b7:3d:49:d2:2d:bc:13:
0e:73:0f:57:7a:69:75:9b:bd:b9:c2:5b:23:61:da:
df:e1:be:f4:11:c6:22:c2:fb:40:1a:21:57:6e:34:
5b:14:db:49:ca:8c:b4:4b:b4:0d:ba:77:21:1f:ca:
71:18:1c:fb:21:a8:a6:2e:c0:40:8d:2d:f0:f7:41:
48:e9:eb:ad:71:c9:0c:dd:60:c0:29:1e:e2:0d:05:
9f:8f:2f:78:c4:44:6f:bc:89:d6:b7:9f:e0:21:0d:
b6:e5:ac:f0:11:4f:d1:15:5f:c3:49:72:2b:9e:ad:
f3:5c:88:23:e1:7a:7d:af:dc:f7:b1:47:74:2e:f5:
ca:fe:b8:cf:eb:b4:a7:0f:d1:ee:e0:05:83:f1:62:
16:59:af:2d:68:ad:45:9f:78:95:8b:52:fb:48:0a:
83:bf:06:7a:6b:ab:3f:76:f0:d4:6a:e2:b5:ca:12:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:F3:ED:EA:44:3C:14:88:95:04:CE:75:28:7A:6C:CA:69:62:B5
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fe:24:9a:d6:65:90:ee:80:cd:f6:34:8f:8f:7d:fd:6f:4c:
a7:6f:64:d5:6a:1d:a2:37:04:da:18:e8:59:d1:0e:fe:fb:bf:
c9:26:75:e2:7c:7f:26:dc:4b:55:20:48:96:69:bc:de:7d:a6:
94:09:35:96:e4:a3:4e:5d:e5:1b:1e:69:d2:45:29:bf:76:83:
83:b6:21:ca:e4:9a:4d:bb:fb:27:ec:34:6a:7f:c4:0e:02:1d:
f1:61:aa:be:ce:49:ae:da:e9:84:9e:48:e8:5e:66:89:24:83:
9c:f1:ce:07:6a:5d:1d:10:11:8d:7e:f8:07:67:ac:b2:35:d3:
18:1d:dd:60:3f:b2:da:75:18:db:a8:73:02:ec:be:e8:f9:d7:
8f:ae:dd:0f:5a:bd:21:a0:11:31:6b:da:a5:a0:27:66:e4:a5:
64:e4:50:28:90:64:3c:7e:04:17:64:b0:3f:08:d0:65:27:bc:
4d:c2:ab:41:4c:61:eb:ce:51:bc:69:f9:e2:55:77:06:9d:cd:
be:f1:34:87:52:4d:95:d6:39:aa:db:51:11:42:0a:19:00:a8:
2c:f1:31:30:21:4e:c2:0c:79:50:00:92:f3:b2:bb:1f:ec:98:
e0:4f:d1:1b:14:71:38:d8:41:04:39:aa:ba:c3:0e:c9:be:ef:
99:b9:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:56 2026 by rpki-client