Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: BOJnmzmXeYveJR2/dh0ZvY4bQOr5i3sNSdMpDhB6/BQ=
Subject key identifier: E9:BF:37:93:4C:22:93:D0:21:8F:5E:18:D9:4F:94:7E:07:6D:2D:6E
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019CAC7E51CA2B3A4D13A199D426D83C2A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0B7F
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: pcHqBWUVE5btq0gsuRn2hh56mucqfCo+hVvHQ/UBnVo=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:51:ca:2b:3a:4d:13:a1:99:d4:26:d8:3c:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=e9bf37934c2293d0218f5e18d94f947e076d2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:b9:38:2c:a4:91:64:3a:98:c1:04:53:b0:
9f:f4:34:f7:68:9a:18:a0:cf:40:27:e2:b5:77:47:
18:dd:f5:a2:86:40:dd:33:77:ef:31:26:fa:ae:71:
a4:e4:69:a5:17:0e:32:2f:bf:ed:9d:33:b8:3b:cf:
b1:b5:44:cb:2d:66:0a:84:84:9e:7e:11:42:74:c3:
1b:80:db:a4:52:2a:8f:e3:84:40:6d:58:4e:80:a2:
f8:0a:0d:02:f4:41:1e:98:80:05:4a:f5:8b:ef:44:
f2:92:a1:08:ba:27:a6:fb:d7:f8:ac:bb:75:fa:ec:
d2:2a:a9:f5:45:d8:eb:8a:d6:0a:0c:0e:c6:64:88:
50:03:0e:57:dc:80:26:f3:93:83:50:8b:84:38:23:
26:6e:94:54:a9:b8:1d:e7:1c:43:e1:b7:27:b0:ab:
a7:02:2a:13:b8:42:0b:e4:c8:af:a3:2d:cc:ef:9c:
64:b0:92:1a:cd:df:7b:ad:1a:af:e4:3d:f1:ad:f1:
9c:0b:9b:41:e8:76:24:ff:0b:9b:e8:0b:f0:25:20:
7d:5b:de:52:5c:ee:97:41:08:99:96:9e:bb:df:6f:
9b:05:1b:7c:9a:d8:c8:23:4f:49:6c:23:50:30:62:
1a:0b:3e:ad:f1:20:93:68:93:a2:ea:6b:ca:5b:b0:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:37:93:4C:22:93:D0:21:8F:5E:18:D9:4F:94:7E:07:6D:2D:6E
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e6:35:70:44:69:89:e9:e5:9e:26:9c:3e:2b:01:c0:ea:2a:
c8:2f:f1:f6:c9:6f:55:49:3f:1b:a1:fc:40:ac:42:74:d7:80:
78:f2:08:ad:91:b6:a2:7f:49:cb:3a:35:d3:c6:59:36:ee:b1:
cc:a5:f2:6e:2e:13:7d:d4:22:70:3f:9f:c2:88:9c:9a:1b:ff:
be:56:76:cd:20:44:fb:a6:2a:8f:c3:02:79:c9:96:66:1e:c7:
95:36:cd:eb:e7:1f:60:0d:2a:59:fe:bd:d5:c5:98:dc:0b:46:
81:99:fa:0c:a8:60:2e:02:5d:cb:af:a5:de:16:50:2e:d5:a5:
07:16:01:26:d8:91:6a:3f:10:f6:0d:1e:08:09:94:91:b2:82:
c6:2c:3a:78:94:60:e4:55:bd:d9:eb:85:ca:88:90:02:76:0d:
ce:11:c5:9b:ad:2c:cf:84:76:c8:eb:1f:02:27:86:c5:12:d3:
6d:33:0e:18:68:d9:b1:3f:98:af:8c:8b:02:c8:62:f8:22:9a:
26:cf:f1:5a:9d:22:81:83:cd:da:27:27:3f:04:4d:6a:3a:03:
a0:2d:8c:38:54:87:53:fb:91:96:56:c5:28:af:9c:81:7d:13:
fb:31:1d:1e:70:ae:4f:5b:af:e7:49:4f:2d:68:01:02:08:2b:
91:33:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:17 2026 by rpki-client