Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: hNDWNEro8e6nEUZSXVWTD5YZ0YVgfzoRP4nqHT2yv/U=
Subject key identifier: 42:AD:DF:28:AF:95:B6:85:79:60:FC:85:A0:14:CC:F4:1D:04:6C:83
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019CADFE1A446D29AA6F37F37C5E4CA3854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 144F
Signing time: Mon 02 Mar 2026 10:00:37 +0000
Manifest this update: Mon 02 Mar 2026 10:00:37 +0000
Manifest next update: Tue 03 Mar 2026 10:00:37 +0000
Files and hashes: 1: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: yQT+wEcEDirvcFa0oMG04Vxgn18v8mgQXGtWfp7gm/M=)
2: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (hash: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:1a:44:6d:29:aa:6f:37:f3:7c:5e:4c:a3:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Mar 2 10:00:37 2026 GMT
Not After : Mar 3 10:00:37 2026 GMT
Subject: CN=42addf28af95b6857960fc85a014ccf41d046c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:d2:22:fa:61:f7:02:72:ed:db:25:ee:b5:
55:3f:92:2f:d1:85:fe:98:d4:3d:b3:ea:f2:95:2d:
b3:36:0b:14:48:16:59:fc:99:3a:01:be:8b:b3:ec:
bd:0f:61:7b:2e:c9:0b:d8:e0:34:0e:a8:4d:24:f3:
79:1d:12:6b:71:b3:59:76:28:0f:ca:b0:2f:71:e5:
ad:64:d8:ec:ea:95:f6:8d:42:3f:44:2f:40:a4:82:
5e:e1:8c:1e:f3:0f:5d:20:61:15:d8:45:67:d4:e3:
55:29:3d:41:86:c5:bf:08:c7:8f:48:8a:b3:fe:08:
f4:e4:7c:c7:62:62:2a:b8:8e:65:bc:22:48:19:ec:
0f:02:55:6a:0b:03:85:96:31:c3:06:c9:2e:01:ea:
af:8b:ec:b1:52:4d:bc:55:64:1e:06:eb:ba:94:a3:
6b:03:b3:1b:e7:53:64:5a:b8:2f:d4:0e:83:c8:ad:
ad:e0:5e:6b:f8:9e:a7:1f:56:ec:1e:14:ee:29:c7:
39:8b:13:96:d1:d2:7e:29:e7:e9:5e:5d:8a:e3:7d:
f1:f2:4f:51:ac:af:c2:dd:e2:cc:42:2e:32:12:3a:
a6:6e:32:20:87:b4:1a:38:48:45:34:6c:cb:02:a3:
4d:0a:d1:9b:65:66:03:da:63:e2:17:2b:e3:2d:62:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:DF:28:AF:95:B6:85:79:60:FC:85:A0:14:CC:F4:1D:04:6C:83
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:69:3f:00:a4:53:2f:e5:c1:5d:ee:2f:c7:18:aa:0b:ff:
2b:fd:3d:6c:58:79:8c:84:5b:08:60:f5:6d:29:db:f8:20:61:
b0:87:44:d0:0a:aa:a1:5e:c3:21:0d:e6:40:04:1f:0b:cc:9d:
24:d6:21:ea:76:83:23:85:3d:b9:9a:35:de:68:7f:9e:5d:f5:
70:21:94:e2:92:d7:c1:d4:df:c3:6e:ac:d8:6e:70:93:92:14:
c8:73:d4:e3:d7:ab:61:1c:ef:4b:f4:be:08:57:1c:1b:21:1d:
18:dc:21:a1:6d:74:74:7b:30:30:93:66:c8:02:08:f4:38:c4:
a0:be:05:20:9b:b8:28:82:25:ae:e6:c0:8f:69:09:16:22:5a:
a8:42:25:44:7d:a4:33:bb:42:98:42:bb:cc:0a:7b:01:59:f2:
01:5d:98:2a:01:86:85:c4:a9:d7:c4:10:d5:95:5a:c2:6f:bb:
37:2c:f2:3d:b8:46:b8:fd:21:e4:2f:fe:5e:d7:b3:5d:77:9b:
52:fa:bd:d9:bc:81:3e:70:13:37:de:7e:8b:57:27:30:8b:e3:
03:01:3a:e6:22:eb:70:5a:89:57:b1:23:90:95:90:8a:48:cf:
69:69:17:15:26:fe:93:c9:b4:18:b5:6f:5a:18:02:ae:05:95:
d9:e1:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:50 2026 by rpki-client