Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: 93uipJoT3L4aD1jFaEc+9n7zDFMPTJUPc76Fnn1B6Vw=
Subject key identifier: E3:DB:97:1E:F3:5C:C7:D0:8B:5D:48:A2:D0:CB:DD:AE:09:B6:CB:8B
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019CACEB98A57DD96484AA2D976216D91891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 1558
Signing time: Mon 02 Mar 2026 05:00:47 +0000
Manifest this update: Mon 02 Mar 2026 05:00:47 +0000
Manifest next update: Tue 03 Mar 2026 05:00:47 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: Uq0QbBm7EL0NQYgPjR40wDL+9vk7F1ZwE9Fo+MaQITU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:98:a5:7d:d9:64:84:aa:2d:97:62:16:d9:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Mar 2 05:00:47 2026 GMT
Not After : Mar 3 05:00:47 2026 GMT
Subject: CN=e3db971ef35cc7d08b5d48a2d0cbddae09b6cb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:07:f4:57:99:16:fd:79:0d:cd:62:e4:59:
39:b7:93:f7:de:ee:bb:3f:c7:33:06:af:22:71:7e:
c0:4d:96:62:a7:01:e7:e2:98:0b:18:bb:33:58:9a:
a5:e5:31:f8:b9:61:65:36:75:e9:65:b5:02:13:9e:
d0:c5:0a:fd:b5:4f:90:88:ed:9f:bd:1d:84:c1:e5:
fb:4c:d8:aa:a0:73:88:bd:c5:e2:91:b2:b0:50:34:
26:3f:29:65:6b:a0:c2:01:9c:19:f4:ef:be:63:b0:
0e:17:e2:83:f1:7d:56:8c:f6:10:72:a1:de:a3:24:
01:6e:a2:cc:1f:2b:69:47:c0:14:3f:72:3f:24:9b:
71:7d:f3:0a:12:1f:2c:b2:a2:00:37:1d:2c:28:17:
40:c2:f7:4e:9e:27:5c:94:8b:d8:d9:47:3d:5b:f8:
65:fc:1e:ca:87:f1:4e:c2:13:b6:bb:88:f0:a0:8f:
cc:0b:10:38:d3:c0:cb:a1:9d:33:7b:c4:aa:40:0c:
33:5b:22:cc:55:b6:dc:c9:4e:da:e0:2c:80:42:c5:
3f:6e:3b:8c:e1:3f:7c:0a:f0:63:6f:ae:4c:e4:e2:
d7:f1:75:d7:e3:73:8a:b0:1d:c5:47:91:38:ae:20:
42:9d:5f:d4:ce:de:e5:2f:ed:08:30:80:7a:49:bc:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:97:1E:F3:5C:C7:D0:8B:5D:48:A2:D0:CB:DD:AE:09:B6:CB:8B
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4e:34:35:1f:4a:6e:12:49:41:95:1d:ca:93:20:22:61:e9:
04:3b:d9:ed:d6:ca:e5:c9:e4:bc:3d:90:e8:33:e4:72:d1:a3:
7d:70:6e:39:ae:2f:32:fa:73:3e:fe:f5:c9:73:b7:46:2d:76:
8b:05:1e:1e:6a:0e:fd:30:a3:39:56:61:28:36:41:99:60:ba:
bc:43:f9:d1:ae:d6:c2:02:1e:fa:ce:fe:f0:43:13:45:27:db:
09:ed:51:b9:0f:e9:2b:9b:f3:da:de:ac:c0:26:94:ee:57:88:
bd:e1:c9:64:1b:54:31:9b:ed:bc:c2:70:d5:f8:b4:51:cc:2d:
ea:b5:0d:94:1d:a6:5e:d1:1c:1c:42:1d:f9:f0:4a:ed:a0:97:
66:57:a1:41:7c:41:63:d2:0d:95:d9:aa:42:b9:be:95:15:79:
ef:c6:61:45:fe:83:59:5c:77:aa:dd:48:42:c7:2b:3f:ee:3e:
fc:a1:3f:d3:06:e1:b7:fb:0b:34:58:3b:6c:ad:40:80:7a:96:
21:02:0a:11:1a:bc:82:0f:fe:09:e9:9a:ee:0d:7d:b8:6c:65:
6f:b4:14:75:20:38:88:93:92:94:db:c0:cc:b2:b7:01:f5:28:
2c:73:c3:87:12:b4:6e:a3:09:03:6d:14:5f:d5:13:e6:a1:22:
0d:95:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:46 2026 by rpki-client