Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: q0imlSkMoEgPtKsxp1eiGFyFPDqVo4XTh0A7iccBZ1I=
Subject key identifier: F1:34:1F:68:C7:CB:45:79:72:11:74:D9:10:34:93:D8:6E:6D:2B:B0
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019CADC7E2AE28A3E1C6F042AC46B5CAD872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 185D
Signing time: Mon 02 Mar 2026 09:01:23 +0000
Manifest this update: Mon 02 Mar 2026 09:01:23 +0000
Manifest next update: Tue 03 Mar 2026 09:01:23 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: z6RNsjXonO1h6vC4G8TaZJlyPhoZXqWqa2bSQfPSP30=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e2:ae:28:a3:e1:c6:f0:42:ac:46:b5:ca:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Mar 2 09:01:23 2026 GMT
Not After : Mar 3 09:01:23 2026 GMT
Subject: CN=f1341f68c7cb4579721174d9103493d86e6d2bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:c6:34:3b:49:d3:5c:b1:5d:89:fa:6b:bd:
1f:aa:17:e5:47:0a:96:94:83:88:04:98:23:ee:1e:
d9:61:f6:bc:0b:84:cd:5f:55:73:23:ba:90:d3:84:
1a:c1:1d:81:9e:99:fb:09:96:44:7d:7e:7a:56:af:
01:ad:02:93:a1:a1:1d:e3:3a:ca:9d:3c:80:3a:95:
98:7d:14:c4:a2:1d:ce:d1:44:00:61:c4:4e:af:d8:
71:6d:32:40:5a:e7:07:59:64:51:ee:3a:9d:c7:39:
d4:64:31:c7:00:76:02:ce:de:a8:f5:c1:3b:9e:9c:
f0:3f:84:12:21:ed:81:31:c8:0a:5b:cd:5c:77:31:
d5:f4:24:45:6f:6c:6e:15:af:06:2a:2e:7c:dd:95:
33:86:98:0e:e3:98:ee:0a:c0:b9:ae:2f:39:67:50:
06:5a:90:e4:17:72:0d:b3:06:1d:d5:ba:a3:4c:80:
51:23:b7:b2:20:88:26:42:da:b2:e2:cf:9c:a8:f6:
89:f7:f0:6a:36:2c:23:55:82:74:28:f4:99:d6:75:
bd:e9:2b:ea:6a:b8:f3:12:c7:7f:b6:b4:58:a6:26:
c6:34:d1:db:8f:82:9d:e0:85:1b:2b:45:64:d4:a9:
61:11:f4:d0:34:19:1f:14:25:4a:98:9d:67:af:d6:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:1F:68:C7:CB:45:79:72:11:74:D9:10:34:93:D8:6E:6D:2B:B0
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:05:f1:74:2c:2c:3e:25:d7:3d:0d:86:af:47:79:ba:05:
bd:72:75:75:64:f3:e1:83:7d:af:3b:d3:3c:a6:c1:40:df:61:
77:71:0b:7f:64:a9:ba:c1:f8:e6:39:af:b2:8d:a6:3b:1a:09:
2b:23:67:59:ce:ac:12:5c:9e:26:a9:f4:0c:91:6e:1b:f6:6e:
63:75:93:d9:3f:fb:37:49:b7:26:e7:00:17:dc:9a:08:ae:29:
4e:cd:e0:d2:4b:62:17:0d:01:d8:59:c9:b7:a1:ac:27:85:fa:
61:83:e1:e4:19:e9:c5:9f:16:b2:28:26:b0:80:03:1f:9a:6e:
57:ab:42:ce:1d:52:3a:2f:82:9d:e2:3b:ac:12:52:8c:aa:45:
2b:25:6b:77:16:fa:3e:64:7c:22:d4:80:62:e1:dc:69:bd:2a:
3c:59:ea:1f:1d:e2:26:05:95:47:ae:39:87:ce:ff:0a:23:63:
3a:d4:bc:35:fe:ff:f1:58:af:56:7f:be:e4:81:7c:59:39:87:
87:f3:dc:19:4b:33:02:1a:ae:a2:53:3b:f2:bd:95:d4:59:02:
82:93:66:75:88:ae:9d:7d:28:a6:0c:af:2c:01:b7:dd:ee:05:
0d:b2:ee:9d:b3:3e:4b:9b:47:1d:7a:6b:e6:f0:a7:56:dd:6c:
75:2d:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:34 2026 by rpki-client