Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier: JhBU1ldrrDpjXrljJCuYIPENgU6u7y4BQ9NSDu2QTYs=
Subject key identifier: 84:B4:4A:8C:CC:39:E7:48:39:C6:BC:94:D7:CA:98:4D:B0:7A:2C:61
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial: 019CA9B36B3A2A379BF9A9F4EC5FFC5DFA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 14:00:33 +0000
Manifest this update: Sun 01 Mar 2026 14:00:33 +0000
Manifest next update: Mon 02 Mar 2026 14:00:33 +0000
Files and hashes: 1: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: l4nKR6L8EYiH0b7mmh9KbUt54hN9szu2cabLnRDf76U=)
2: kY9tmhKeqBmNGdHcsEgpfNUwWzs.roa (hash: ufSkSo79tZguXWEec9VmuCg/qUTf+OMSW2NwdEun2aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6b:3a:2a:37:9b:f9:a9:f4:ec:5f:fc:5d:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Validity
Not Before: Mar 1 14:00:33 2026 GMT
Not After : Mar 2 14:00:33 2026 GMT
Subject: CN=84b44a8ccc39e74839c6bc94d7ca984db07a2c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:ff:e4:58:44:de:07:a3:d0:da:4e:ad:14:
9d:55:b2:9e:01:2e:0a:05:1d:29:e7:f4:46:dd:0c:
b5:c6:ad:8c:86:67:1c:d7:20:b3:e9:8a:92:19:a6:
08:5d:7f:85:63:3a:f2:24:24:59:3e:b9:16:f2:5c:
02:4a:2d:cf:36:cd:11:e9:90:a0:c5:69:a9:8d:48:
a3:c8:c7:47:39:ae:30:12:56:f2:3b:c4:c6:4f:e9:
06:4a:91:c6:99:aa:e9:51:73:4c:e4:46:41:f0:6a:
db:b2:ea:21:e6:13:b9:9b:c9:55:9d:66:dc:90:a8:
2c:ad:3f:aa:77:2d:7e:f1:26:79:c6:67:68:20:8b:
59:44:d8:3d:61:ac:f0:64:30:6f:66:a6:dd:56:7c:
39:db:b5:fe:4c:3a:16:c6:1c:31:4e:5e:fa:75:5d:
58:d8:6f:eb:2a:29:ef:00:39:9a:78:cd:21:e5:f7:
2a:bb:d9:59:c3:b6:c5:7d:d8:74:ff:b4:be:dc:83:
58:ca:ae:92:4f:1d:1b:5c:6d:73:9e:d1:1b:b5:bb:
5b:ca:18:9c:db:94:9d:1d:4b:48:85:8a:7f:44:75:
5d:51:d1:dd:98:c2:a3:88:1a:37:be:6c:03:5e:16:
e6:a7:a5:37:0f:7b:7f:3e:b9:e1:a0:84:f8:8f:cc:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:4A:8C:CC:39:E7:48:39:C6:BC:94:D7:CA:98:4D:B0:7A:2C:61
X509v3 Authority Key Identifier:
keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:aa:28:b2:42:84:af:41:a6:bf:6d:43:f8:86:35:cf:fd:
cf:86:3f:fb:fa:6d:de:7f:bb:80:07:d8:57:d1:e6:a6:7c:de:
6c:e0:56:6c:0e:f2:be:6a:ed:4b:ee:96:a7:e7:ce:30:6f:d9:
a6:b0:25:1e:b8:1e:e7:c8:5f:14:a9:8a:f5:57:f6:1f:bc:99:
2b:8d:c3:0c:4a:88:71:ed:fa:aa:1c:6a:ec:1d:46:9d:fa:5b:
47:19:77:98:39:30:df:54:cb:af:f5:7d:de:a9:bf:c8:3a:6f:
87:83:7a:95:1e:ee:af:79:68:96:69:25:e2:5d:42:71:cf:4c:
02:8a:e0:61:f7:bd:e1:e6:50:40:c1:16:04:29:36:d3:9d:fb:
e8:42:c8:a7:67:7e:77:b8:cd:fa:c5:8b:d8:f6:00:54:95:15:
ca:bb:3a:da:52:6c:9e:60:8e:12:ea:5d:6a:3a:5a:77:97:9d:
a0:3a:ec:ff:c4:12:c7:7a:e0:02:82:e0:da:cb:18:76:63:56:
b4:6f:22:a0:1e:1f:b5:75:2b:63:73:71:4e:5f:53:56:a4:ff:
20:0b:17:8c:bd:12:ed:05:ea:cc:9c:6c:b5:c0:9c:cb:94:55:
a8:c1:bd:2f:26:68:c9:83:43:04:69:a0:6d:07:fa:4c:80:af:
92:44:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:18 2026 by rpki-client