Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: TjVYgIUBRdMVf2NBs79gGgsV8vHWg+nQ7yt7F351d6g=
Subject key identifier: 5E:90:20:37:63:6B:98:FD:17:B6:F4:17:5B:4B:25:4E:D5:7E:E7:82
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019CAC7E01143E3B777AB2AFF47F894C781F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 1536
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: zcN9AeHbgrobYS7UhRkdUSVKWOgyWLSQkOoMR4tCMM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:01:14:3e:3b:77:7a:b2:af:f4:7f:89:4c:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=5e902037636b98fd17b6f4175b4b254ed57ee782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:2c:02:09:d7:cc:ed:8f:de:15:aa:8d:5b:
63:1f:e4:1f:b9:50:5f:2f:c6:0f:92:4e:81:09:f6:
16:4d:bf:cf:87:c1:d7:d1:86:a7:82:61:9f:da:15:
7e:8b:02:32:78:36:28:69:f3:27:6d:81:3a:a7:0c:
c2:d3:65:8b:6b:0f:92:df:35:8c:25:11:32:7e:26:
5a:70:98:34:35:3b:02:5c:8c:30:34:45:00:71:22:
f1:84:87:36:eb:26:dc:53:cd:37:4f:de:e4:9e:23:
bc:2e:e8:5a:b5:cf:19:f5:4f:0f:f1:e7:21:94:2a:
b9:02:27:da:b4:0e:fc:f3:3f:29:ce:cd:dd:3b:0c:
1d:4a:4d:bf:94:61:f8:c2:98:46:a5:68:47:ef:eb:
fe:9c:11:1a:e4:fa:5f:48:fb:33:7a:cf:a3:70:4a:
68:41:48:e9:77:e7:b5:49:97:9a:84:57:33:38:b7:
42:1a:05:9a:5c:95:58:df:15:7d:bc:92:96:c4:01:
f7:3c:35:83:ac:be:5e:45:d7:43:e9:79:97:59:40:
12:c8:7c:b7:d6:91:3b:71:64:db:b7:df:f8:ab:7b:
f1:c7:c3:ee:70:73:6c:61:80:e5:77:56:ab:3a:c3:
00:27:da:18:43:ce:cd:b1:59:11:d0:34:df:fb:64:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:20:37:63:6B:98:FD:17:B6:F4:17:5B:4B:25:4E:D5:7E:E7:82
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9d:bb:ec:f3:35:63:d1:b3:d9:18:5e:19:83:0f:39:7d:3c:
0d:f2:a5:44:ac:0e:9d:a7:d4:97:62:f5:ba:7a:bb:2f:29:8c:
e7:0b:dd:38:a5:47:0a:99:c3:72:70:38:ae:c9:e6:76:ad:20:
09:88:d7:6b:f7:47:b2:b3:a0:85:c0:fb:2d:0e:74:3a:a5:f3:
33:c9:d1:04:71:43:e4:68:25:05:ee:96:12:c6:8d:2a:db:7f:
e2:17:bf:86:e8:33:09:42:8a:ae:c3:cd:bb:95:db:d4:23:fd:
55:d7:dd:4c:fc:98:11:ac:a7:5f:96:3e:0b:34:46:ec:ff:d8:
f7:48:30:cf:b6:41:90:8d:a9:bb:fe:fe:15:af:8a:b4:0e:6a:
6c:6c:72:c0:f0:c0:c2:25:4b:ac:58:aa:76:d1:6f:24:33:26:
a6:68:bb:ef:11:45:80:62:ae:11:fa:e7:a4:af:dc:c7:c3:06:
74:a8:78:72:14:b2:20:a2:66:09:23:d8:4a:b2:b1:77:a4:b7:
e1:ac:4e:6c:e4:da:54:49:3f:6d:d3:46:bb:3d:dd:f6:93:34:
ea:dd:e3:46:18:d9:2a:4a:41:43:fc:f8:ea:6a:48:06:bb:3d:
b3:b5:4a:c4:de:7f:bb:ce:d8:14:a9:42:de:96:98:84:7e:bf:
6b:bf:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:50 2026 by rpki-client