Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: GOpd2i5+ehW5Y1HxteDTZPBwC+HsnjoliauxZym9tC8=
Subject key identifier: CD:A1:A8:1A:24:59:3F:3F:1D:FA:30:77:CF:0B:F6:2D:A9:A1:F8:4D
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 019CAB34204477DA2D4B4BD94C90CFC1B06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 0909
Signing time: Sun 01 Mar 2026 21:00:45 +0000
Manifest this update: Sun 01 Mar 2026 21:00:45 +0000
Manifest next update: Mon 02 Mar 2026 21:00:45 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: 7G6wzd4d8B802l0dO2YTN/JZCD7XCaWwDo1K18fNU70=)
2: deQ3iUYI2zhDS5WVofbw_0r7MdU.roa (hash: aWouu4WFuntFUTMgXaNZBkCjMzZT9CqQafzXFsbJDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:20:44:77:da:2d:4b:4b:d9:4c:90:cf:c1:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Mar 1 21:00:45 2026 GMT
Not After : Mar 2 21:00:45 2026 GMT
Subject: CN=cda1a81a24593f3f1dfa3077cf0bf62da9a1f84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:aa:95:20:4d:30:8e:aa:f2:83:92:41:bc:
8a:d5:1a:be:bd:58:9f:7c:62:6d:79:d2:c8:3a:ba:
b3:eb:22:e1:8f:4e:7c:96:e8:4f:fe:77:c1:bd:dc:
4d:6a:f3:d7:05:cd:1b:fc:f3:c8:e3:f7:9c:38:06:
0f:21:4a:cf:f2:4c:58:b0:b7:be:32:e2:d1:91:3e:
7b:d8:b9:45:4a:c5:f4:a6:26:e6:f7:7a:db:fd:1c:
19:ed:4f:2c:5d:e2:20:30:97:50:ae:fd:67:50:fe:
6e:90:59:52:13:1a:9e:f3:3b:4d:03:fc:3b:2a:ff:
6c:30:fd:0a:c5:90:c8:ef:4c:3d:54:7f:09:74:cd:
50:11:45:cf:91:e3:e6:c9:21:fe:98:72:4d:16:99:
fe:65:24:b3:16:d3:45:85:21:ab:b6:38:fe:a9:17:
bf:10:f5:c1:65:fc:af:9d:2a:ac:b7:25:da:e5:c0:
a6:08:7a:ce:86:27:9a:64:64:4f:7b:45:fe:29:b7:
50:8d:43:de:d6:28:8a:30:ee:d1:b2:08:33:3a:38:
d2:ee:0b:9c:c0:ec:9b:3c:f5:64:7c:96:5a:e0:97:
cb:fc:e1:31:b3:d0:70:57:3e:86:9e:d5:ab:30:8a:
2c:ad:81:c2:75:b7:d1:26:13:9d:2c:93:52:14:1e:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:A8:1A:24:59:3F:3F:1D:FA:30:77:CF:0B:F6:2D:A9:A1:F8:4D
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:22:0c:be:8e:6e:3b:69:49:52:23:20:31:2f:a9:5d:8d:
69:af:a6:7a:cf:6c:28:b1:0f:5f:b3:bd:ae:bf:43:ac:20:da:
fc:ad:8e:14:2a:a7:8e:5a:e5:01:aa:11:94:50:a1:ee:f9:15:
f6:4f:24:e5:e3:93:3f:2e:67:52:b8:71:c0:ba:4e:f6:b2:9b:
e4:12:4c:da:ab:23:2e:9c:c3:2e:1b:b9:45:fa:ed:6f:8c:6f:
0d:66:22:a2:bc:db:68:3f:4d:6b:a8:68:14:ee:c9:3f:b9:d8:
08:cb:cd:16:fd:bf:42:59:d8:76:f1:d1:be:6d:59:78:ef:1d:
f0:8e:31:98:2b:74:81:fd:e3:db:2e:91:e4:65:ae:45:27:ae:
e6:bf:1b:c9:f4:f9:19:c4:a5:b6:01:75:b4:20:07:0a:d1:0a:
2d:66:c5:ca:a4:ba:fb:ca:35:85:9f:23:43:cf:35:d3:fb:b8:
9e:6a:a6:db:cc:86:fe:4e:9e:b0:45:2b:f1:75:b7:12:80:0d:
da:4b:91:c7:a0:57:fa:47:c6:91:61:d2:c2:7d:5e:0f:e9:98:
83:fa:ac:85:d5:f7:d1:8a:66:95:4a:ae:c8:bb:e1:c2:23:75:
c0:70:75:d0:d8:12:87:1d:81:6b:7f:01:39:4a:5c:6e:01:bc:
4d:a0:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:13 2026 by rpki-client