Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: NFYEg1zynhHBlOrlUN4RgQqeLqcA12sz69ctaJVpEAA=
Subject key identifier: CE:71:2F:43:CF:06:92:C4:76:2C:13:41:9A:0E:B0:14:23:38:3A:FF
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019CAB3404A1160F6EE249C9DC073E99E824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: 4SQOkBPyNFLCvu+CP0M8a7kTyp7fwvglnJG7X5YNFVQ=)
3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:04:a1:16:0f:6e:e2:49:c9:dc:07:3e:99:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=ce712f43cf0692c4762c13419a0eb01423383aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:df:ca:02:b2:14:cc:f8:86:36:1b:12:61:
b1:37:6a:75:38:e7:f8:66:1b:98:96:d1:52:d2:dc:
5a:f2:93:2f:3c:82:ae:51:ea:8c:6e:67:40:e8:ba:
8f:da:49:34:bf:a6:40:24:a4:c5:0b:e6:d0:22:1c:
7c:f9:94:f1:34:82:46:cf:f8:e3:c1:c5:1c:b1:bb:
4a:ce:5f:5c:c8:b9:50:f2:cb:cc:d8:3e:94:59:73:
0a:d8:3f:dd:22:25:f7:9e:8e:0f:11:a7:1d:cd:61:
02:8e:46:b2:15:87:42:4b:64:13:cd:27:3b:49:f6:
4d:74:1e:0c:15:86:fe:6d:cd:09:9b:a0:4d:a3:ae:
a8:3c:42:7c:70:d3:f4:4a:1c:83:9d:48:5a:fc:91:
d4:a9:24:02:aa:cd:d5:a0:5a:58:0e:f1:7d:6e:b6:
6a:07:9d:3f:10:33:a6:c2:7e:98:d3:be:1b:9a:5a:
45:c8:91:de:bc:68:7d:cb:36:46:35:f6:c1:77:b9:
cf:d4:80:d7:c5:b3:6b:a8:f5:bc:30:fe:c2:9e:18:
ce:b1:5b:73:bc:a6:3d:6c:7e:3b:4f:04:c3:5b:92:
76:b3:b5:db:a0:7a:3f:06:ba:97:06:72:39:65:c0:
2e:64:35:fe:5d:5f:19:cc:56:ac:e7:41:87:b5:a4:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:2F:43:CF:06:92:C4:76:2C:13:41:9A:0E:B0:14:23:38:3A:FF
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:39:11:f8:52:b1:28:5a:fb:05:ce:c5:d9:3e:6e:ca:a8:
91:95:46:c1:8c:a1:b1:36:d9:2f:6f:40:dd:b2:db:35:60:97:
48:55:5a:c5:ce:11:cc:8d:5f:d6:da:d0:64:28:52:06:56:ac:
b8:50:a2:98:3a:59:67:58:f3:4a:e4:10:4a:80:20:75:2d:75:
01:c6:36:b3:19:bd:87:a9:48:77:8d:f9:9c:76:34:b8:57:97:
a7:08:fa:d2:db:2c:b2:d2:29:32:4e:4f:b5:72:53:4d:e8:8c:
0b:99:0c:13:75:d2:2b:ef:f3:44:a9:53:9b:53:68:a6:1c:05:
c1:1d:7b:fe:6b:0b:4b:47:27:05:66:0f:9f:b4:91:9d:7d:67:
cc:80:22:00:3f:01:b4:cf:0e:6d:d7:89:99:8d:16:f2:98:a1:
f6:b4:40:b8:79:ee:03:58:b1:9e:31:96:8f:4c:7d:bf:74:9b:
67:7e:f7:53:58:f9:02:04:aa:68:b0:f1:7f:c1:3e:be:bc:cb:
11:50:56:d1:fd:d1:99:4a:25:a2:78:bd:1b:21:f9:94:2a:15:
36:f4:78:cb:01:e6:09:9d:cb:c0:4b:97:f2:af:e2:73:59:b9:
60:6c:cf:f9:63:38:36:e3:be:da:c2:11:33:29:38:08:2e:b7:
fc:1a:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:12 2026 by rpki-client