Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 2BcvMoeNEnYY5wBmBtp9iLz6lJQRaJQ3jJQH5oh0rTo=
Subject key identifier: E9:FC:7B:D8:A9:7E:58:A1:78:32:C4:30:37:64:A4:62:E1:38:77:A2
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019D9886786E2D4F8403E6CD0C1DD09D31AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1405
Signing time: Thu 16 Apr 2026 23:00:42 +0000
Manifest this update: Thu 16 Apr 2026 23:00:42 +0000
Manifest next update: Fri 17 Apr 2026 23:00:42 +0000
Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: NWkvVfMkVWFSEAKWTj3xkNFerVSmuK/8sBK/nNjxeC0=)
2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:78:6e:2d:4f:84:03:e6:cd:0c:1d:d0:9d:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Apr 16 23:00:42 2026 GMT
Not After : Apr 17 23:00:42 2026 GMT
Subject: CN=e9fc7bd8a97e58a17832c4303764a462e13877a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:ee:cb:8d:56:d3:79:6e:58:74:b5:4a:73:
cd:ad:f9:4f:3e:0f:f8:9f:0f:c7:fc:2a:62:82:be:
af:28:7e:97:b4:8d:0c:4a:d9:89:48:2f:c6:02:16:
84:9b:f0:bd:2d:7f:bc:6d:c8:ed:1b:2e:cb:3f:e2:
dc:24:aa:23:5b:eb:f5:e0:fa:60:f4:6a:ed:e9:d6:
d0:5a:40:ad:c9:64:23:97:1f:91:fb:60:41:b4:cf:
58:23:48:97:21:2d:f8:08:4b:d6:78:f5:7b:ce:45:
e2:8d:be:ae:a5:3d:20:d1:11:dd:72:70:00:bd:3e:
ed:f2:f6:81:b6:e4:85:d4:e9:bd:70:8b:6b:49:54:
fb:38:6a:94:6c:f5:6b:d2:b7:ec:7d:13:72:2e:5f:
d4:e6:e7:55:0e:83:e8:b7:e1:84:fc:11:ce:93:ec:
93:42:ce:7e:c5:eb:ad:b5:81:9d:26:3f:fd:29:e3:
e3:a7:9c:29:b2:10:c2:9b:90:48:da:81:cd:47:10:
8c:72:0f:ca:7f:34:a0:3d:e6:34:1c:34:99:1d:3b:
00:84:83:0a:a6:a5:cf:73:27:87:fc:d2:75:07:2c:
fb:f8:72:cb:03:35:47:11:d5:f8:5c:5b:39:30:99:
1c:9b:d1:eb:af:fc:1f:0a:12:8e:44:fa:bf:04:4b:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:7B:D8:A9:7E:58:A1:78:32:C4:30:37:64:A4:62:E1:38:77:A2
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6e:b3:11:ce:70:c0:e6:cd:d3:f4:9f:dd:a9:0a:d3:ff:7c:
25:cf:e1:65:88:27:70:4f:21:ce:fa:df:86:c7:8a:af:5e:c1:
86:b0:c3:34:7a:1f:d3:24:c7:10:e1:76:82:6e:98:f2:6e:25:
ba:75:cf:d9:1a:17:63:f5:97:40:d9:40:67:89:ae:fd:c1:fe:
a5:e4:a0:31:5d:9f:eb:f2:39:93:b2:cc:75:18:2b:39:f4:df:
b0:3b:a9:05:53:91:ce:4a:ec:87:c3:57:80:4a:20:c6:ac:25:
00:b6:23:c2:e4:dc:74:b8:8a:b3:51:07:dc:b8:54:41:f7:b9:
b4:34:f1:9f:aa:11:e4:c8:25:16:77:b5:9a:0a:36:88:ca:03:
f0:16:5b:b5:48:7c:d5:25:ce:b5:e9:09:54:4e:72:60:6e:f7:
3e:aa:19:85:b5:74:a2:d4:a6:5b:72:4b:91:81:1f:1f:41:d0:
ec:e2:38:57:04:ce:81:a9:01:ec:69:c0:86:a1:a8:f4:e3:a9:
e8:bd:8a:9a:74:10:58:1d:3b:19:ea:d6:59:7d:59:e2:cd:f1:
16:4c:a9:c9:8a:85:4b:fa:da:73:ad:d1:02:3c:51:26:f9:dd:
3c:57:4b:d6:e3:c5:cd:62:f0:3c:eb:95:5f:ab:56:7a:52:28:
fe:c3:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:26 2026 by rpki-client