Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: uEbB1x059EVatVFzdgyW9PM8MzybUwqXx9UFWTeXeu4=
Subject key identifier: 03:2C:70:41:6D:C0:D1:BB:80:B3:0F:E5:F9:CC:2C:42:20:22:9A:64
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019CAB6BB2F82DCF27ED492AEC00054091AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0B78
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: 0h5emncj0UqznHCm9qw5OLEdXO+gIrjCyZRFznzker8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b2:f8:2d:cf:27:ed:49:2a:ec:00:05:40:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=032c70416dc0d1bb80b30fe5f9cc2c4220229a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:cf:c0:53:7d:36:c5:bb:71:c4:cd:d2:a7:
a5:b5:b9:ff:15:e5:44:ce:6f:9f:1f:44:17:28:f7:
d6:f0:9f:09:57:08:70:14:bb:00:a1:dd:4d:83:50:
2b:b6:4d:68:66:9d:e2:1f:5d:08:94:44:a4:16:67:
d5:93:1e:76:21:fd:f3:33:96:b3:c0:1a:c0:f3:61:
43:64:c7:05:dc:3e:e2:aa:c6:84:ba:44:95:b7:20:
ef:a8:1a:a0:a1:80:e2:bd:f8:03:78:c4:7e:5a:c7:
b3:cf:13:4e:8e:1d:ca:2b:f7:8b:fe:df:92:3a:fe:
32:bb:da:7d:75:bd:1d:23:0e:34:6f:4c:8f:9c:70:
25:eb:36:52:47:fa:20:ef:1a:4c:53:1b:b0:a0:92:
f1:0f:a3:af:a8:9e:45:39:b5:46:7b:9b:12:2d:c5:
db:a0:a0:75:be:ff:45:87:30:40:bc:46:2d:0e:20:
a4:42:6b:a9:a6:b0:ca:72:42:bb:eb:d4:d0:27:4b:
a3:f2:ac:77:14:ce:a6:98:96:84:d4:db:0f:87:04:
55:8d:12:d9:11:66:f5:9c:ed:19:27:3c:37:7f:6c:
45:ec:e8:4d:dd:aa:4d:63:72:2d:63:a8:36:6f:2e:
b6:3c:02:26:1f:41:0f:f8:ca:af:3d:d2:b3:0e:96:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:70:41:6D:C0:D1:BB:80:B3:0F:E5:F9:CC:2C:42:20:22:9A:64
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:c6:f5:4b:ad:c4:ec:78:ff:1a:5c:9f:1a:c0:5f:ef:b9:
9e:e5:a3:9d:ee:a0:06:9b:99:fd:df:d1:4b:8d:5e:f9:dc:91:
ed:e9:39:6c:66:c9:52:6b:db:e1:47:af:d2:c2:02:98:3a:97:
95:f2:c7:fb:d6:e8:91:af:ec:43:9a:ce:2a:2f:72:ba:dc:e5:
78:0b:50:5f:23:65:61:28:30:61:d9:a3:35:6d:87:8d:b0:ad:
79:7d:2a:84:8b:79:74:bd:3e:ed:da:bb:8e:df:b8:81:04:b2:
67:56:8f:64:af:a7:0e:14:1e:89:e5:42:89:3e:e2:2f:86:90:
13:c3:87:43:ee:42:e5:6c:db:09:74:37:18:4d:3d:7e:b9:f3:
e7:a4:d7:10:ed:d8:55:cc:56:1a:02:3b:af:6c:4d:1d:c5:d5:
9d:dd:0a:f3:bf:65:d6:cd:57:0a:de:89:92:95:f6:bc:5d:1e:
2a:82:d8:12:41:09:b7:d8:20:25:9a:76:bc:d7:21:3e:b0:44:
09:d1:24:a6:8b:f3:cf:7c:04:92:58:4d:91:c8:88:73:3c:a0:
83:05:3f:27:99:46:30:13:52:91:f8:7b:6e:56:28:3f:59:c5:
37:70:7e:ef:c7:fd:4e:ea:f9:95:3e:0e:6c:b9:71:7e:40:25:
ff:4d:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:08 2026 by rpki-client