Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: Su4JUtFt3c0VzPhXoemCU1r1LqZessdxOY8BZbJeJtA=
Subject key identifier: CD:4A:CF:7A:61:19:9C:DA:AA:8C:10:FF:55:71:17:94:E9:2B:53:09
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019CAC1047907DEFE9452FBFFAB3ECF11736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 09BA
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: JEWO37aWCWuiGOzXS2nXXwIqgZDxAGo0zoB6I3nZKcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:47:90:7d:ef:e9:45:2f:bf:fa:b3:ec:f1:17:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=cd4acf7a61199cdaaa8c10ff55711794e92b5309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fb:2a:ac:95:f9:ed:f6:8e:5d:c2:65:95:91:
0b:2d:e2:90:71:eb:91:f0:ea:ab:96:0a:17:68:39:
fa:b6:cb:82:b7:4a:3b:df:8d:3c:09:da:8e:d3:8a:
e5:ff:fd:71:3f:5a:47:bd:ca:c7:fc:65:57:cc:9f:
06:50:ac:26:f8:cd:06:f9:cd:43:d9:3b:d7:19:68:
4c:6e:99:f8:c6:24:c2:4c:c0:f4:2d:e8:cc:a6:8d:
62:ce:64:cd:d1:6e:e7:0c:cb:66:93:f2:98:89:7e:
b3:9c:a6:2c:b8:77:f8:71:51:8c:3d:15:5d:2e:14:
5d:d4:fd:1e:bb:fd:8b:7f:d8:dd:4b:65:59:0b:a0:
6f:87:81:03:88:b0:86:f0:9c:1a:0b:99:e7:af:32:
bf:61:15:55:89:de:e3:df:21:01:ed:65:0b:8d:b1:
29:8d:26:9b:d9:62:c3:08:90:f8:89:df:83:e0:8e:
43:48:bf:53:3c:e5:67:ce:3c:6b:b6:eb:06:1e:e2:
3e:3c:7d:1a:63:be:26:5a:3f:38:de:c7:22:ed:5d:
88:38:f7:63:49:00:96:1c:f3:12:ef:ff:90:70:42:
ee:3a:89:d9:5b:40:d2:5b:34:cd:a4:4b:47:cc:8d:
58:a0:33:95:29:db:fd:9c:eb:42:68:e7:57:96:9b:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4A:CF:7A:61:19:9C:DA:AA:8C:10:FF:55:71:17:94:E9:2B:53:09
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:11:81:f9:e0:02:35:be:db:ab:81:35:8c:b7:31:56:57:
4e:0e:6e:20:14:5b:db:80:87:2f:9b:a2:70:fe:ad:ef:08:0d:
36:c2:0a:67:99:8f:d6:e0:10:9a:60:a9:74:38:1d:f5:0f:26:
9f:b8:79:4b:66:98:47:e2:ab:4b:50:24:5e:e6:e5:f6:bf:79:
71:d0:15:d9:44:2e:39:db:8f:7f:1d:51:b8:c8:29:2a:45:a3:
50:df:9b:d4:5f:09:e5:eb:f5:5e:c8:34:b1:e9:48:4d:85:b7:
07:46:99:b8:55:27:fb:0f:63:41:47:9d:2a:f6:76:e3:69:3a:
cb:a7:f5:5b:46:4a:ec:67:23:b3:86:69:b4:4d:67:a3:24:02:
42:67:f9:c1:52:bc:19:56:c5:64:56:40:39:d5:95:24:10:d0:
5e:27:dd:ae:da:6d:fb:b8:b7:6b:3a:95:10:ca:d1:aa:5d:1d:
04:57:96:31:b6:ba:07:ae:ad:17:1d:c6:04:c3:1b:66:e7:8e:
67:71:75:99:7c:e4:01:d5:0d:aa:95:c0:4f:d4:1e:67:7e:45:
6a:de:f1:f7:41:a1:38:52:d5:5a:17:b1:13:a5:00:3c:4f:18:
cc:06:bc:5a:17:2d:2b:ad:72:17:37:67:f8:8a:ef:b6:4a:c3:
36:c6:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:46 2026 by rpki-client