Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: Ty9/KXWww3vBbf4WAvv5ATDb8bIMlfSbkqOb0jfzsEw=
Subject key identifier: F3:2E:6D:67:FE:AE:E5:82:3C:79:2A:8E:C0:1E:E9:F1:B2:44:8F:72
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019CABD95009B817424C5A0BAD4AAEA5F261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
2: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: VrveMilGVcGxD4Kh41JAU0RBf8XA2Rt5833REkrId8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:50:09:b8:17:42:4c:5a:0b:ad:4a:ae:a5:f2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=f32e6d67feaee5823c792a8ec01ee9f1b2448f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:a7:3e:b3:39:b4:53:2e:30:8d:fa:58:5e:
41:ff:aa:fc:08:77:a2:d4:cf:a7:00:aa:e8:63:79:
27:0f:e3:5d:3a:b6:97:fc:06:cf:b0:cf:0a:47:48:
ec:b4:61:c0:5b:5e:12:95:37:1f:75:bb:1c:7f:21:
3f:0b:55:07:8d:72:85:4e:08:01:74:33:33:5e:5a:
ea:95:73:35:1a:80:34:f8:a3:6e:67:3d:75:3a:4b:
2c:9e:d2:99:8a:0a:78:96:ce:f2:56:9c:be:48:79:
28:c3:24:19:a6:86:15:dd:c9:3b:e3:4d:f2:b0:d1:
4e:60:ce:3e:f0:dd:56:13:4d:f4:dc:fb:f9:de:fc:
9f:2f:d3:7e:72:f8:c9:59:db:33:37:d7:b7:cd:07:
25:13:54:75:a1:e4:82:49:fd:8f:ee:df:01:90:5f:
72:ed:16:01:72:df:b3:55:30:62:01:10:2e:0c:95:
ed:bd:aa:fc:f9:54:02:2f:66:7b:4a:ed:41:69:2b:
1d:5c:3c:3a:49:4c:37:06:d5:b7:82:ac:02:1c:b9:
72:9b:27:d4:80:8f:57:07:3f:63:2f:54:4f:ab:6b:
3a:d0:64:43:37:e7:71:52:4f:49:cc:7d:97:c7:d2:
3f:04:b9:1a:5c:81:69:2f:24:b6:2e:a2:10:53:12:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:6D:67:FE:AE:E5:82:3C:79:2A:8E:C0:1E:E9:F1:B2:44:8F:72
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:37:6b:7a:78:08:f0:d5:5c:df:d1:77:c1:0c:a7:2e:42:
14:fe:1e:4e:85:8d:82:19:bf:dd:99:ca:f4:42:8c:7d:92:9c:
ad:fb:75:6b:0b:87:f4:d6:d3:6c:7c:ed:2b:7d:58:11:de:55:
1e:8f:f2:37:da:b8:d8:d3:25:39:30:9d:08:aa:e2:c7:5c:f3:
5c:05:5c:3e:98:50:8d:44:41:98:80:57:90:cd:e1:0a:2a:55:
7f:52:21:4d:d6:6a:52:d4:d9:f8:77:38:5d:9b:03:dd:67:55:
fe:5e:2e:ee:a4:cd:dc:5e:50:2c:bb:5a:c3:ea:11:f5:1d:49:
7b:9f:54:18:a0:10:35:1c:3b:ad:c4:02:4f:83:35:3b:9f:ed:
de:6b:8d:94:bc:5f:3e:81:83:0d:e1:30:c7:27:f6:a2:d0:15:
3c:e4:bf:79:a9:74:5f:03:9f:65:d1:43:5e:af:4b:f8:2a:f7:
cb:1b:aa:b5:0d:42:a9:25:a1:1f:d7:ac:28:2e:47:f1:4e:b4:
28:01:5f:1d:bf:8a:8c:9b:74:19:c6:ae:58:5f:e2:04:96:23:
a9:1b:af:c4:87:34:c5:fa:d6:f9:9c:f8:05:0b:be:7f:76:c3:
37:26:ea:be:65:b4:8b:50:0a:6b:8b:f1:dd:b4:9b:dc:a6:e8:
b7:da:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:11 2026 by rpki-client