Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: IkIcCsGJrd4Vrnxk6ofnOyU+UAxFiD/678C2cXzSxzE=
Subject key identifier: 27:58:B2:C5:4A:96:9E:05:86:9D:A1:DD:E3:0D:AA:09:10:5B:3E:F2
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019CAC7DEBC51CC6DD39C298C45541FDC8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0FCE
Signing time: Mon 02 Mar 2026 03:00:59 +0000
Manifest this update: Mon 02 Mar 2026 03:00:59 +0000
Manifest next update: Tue 03 Mar 2026 03:00:59 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: AACZ9cyel2jS9L7bipUvo//bsXF0oe25OofGB/rfiCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:eb:c5:1c:c6:dd:39:c2:98:c4:55:41:fd:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Mar 2 03:00:59 2026 GMT
Not After : Mar 3 03:00:59 2026 GMT
Subject: CN=2758b2c54a969e05869da1dde30daa09105b3ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:d5:bb:ee:84:40:4c:14:94:f5:78:88:7f:
f8:aa:3b:6d:8b:3d:ee:b1:6f:ee:14:d4:dc:6c:97:
f4:e5:15:8e:c3:97:e5:dd:80:d2:fe:5c:d8:43:28:
d6:42:48:de:a4:70:0f:53:a0:4e:48:03:11:c8:96:
79:b4:cf:34:a4:29:ca:16:0a:46:07:a1:a0:15:6f:
f1:e8:93:a8:46:6b:d1:74:b1:38:5b:f1:d3:35:5f:
81:35:9e:de:d0:89:f2:0f:99:73:5e:c2:70:97:61:
59:90:40:0e:8d:5a:e0:4c:06:3b:3c:2b:d2:bf:ab:
6f:7c:0c:7d:2c:6b:a9:ab:c0:70:4a:85:63:64:30:
7a:62:f5:cb:5e:84:02:1f:2e:c4:81:2e:cf:72:09:
3b:2f:aa:b8:b6:b8:02:55:ec:3d:0b:56:c9:68:96:
69:d3:cf:a1:0d:1e:c1:76:ec:6a:a1:e6:41:10:21:
f3:2e:cc:42:f9:94:ad:46:7c:2c:8d:0d:8b:d9:9f:
9f:f0:49:c8:b7:38:f3:ad:7d:e7:9d:00:b3:7a:dc:
f7:ae:9d:e2:3f:c4:ac:0f:28:cb:33:f3:cc:05:b1:
b3:4c:74:18:cc:4f:11:4a:d7:1c:96:96:70:83:a5:
b6:b3:7c:5f:de:c1:cb:36:b6:5e:01:64:96:66:9d:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:B2:C5:4A:96:9E:05:86:9D:A1:DD:E3:0D:AA:09:10:5B:3E:F2
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:d7:d4:a6:3b:83:3e:57:89:a5:bb:e4:7f:43:d6:51:9a:
56:83:1f:0d:4b:60:e0:7c:4a:0e:24:47:49:3c:62:d5:b3:ee:
73:f6:40:27:23:79:6f:49:d3:63:67:63:45:27:f3:57:01:ab:
59:e8:7d:8b:ec:ab:78:17:bc:6e:a4:50:4e:85:b5:10:3a:65:
30:9f:60:59:66:0c:bd:97:55:54:f7:12:88:6a:8e:f3:21:6c:
97:02:8e:4d:53:30:8d:84:54:46:2d:7f:9d:91:76:a3:43:10:
5d:48:05:28:e1:4e:16:3b:ff:56:03:1d:b9:64:3d:54:3b:ae:
86:2f:05:a5:3d:78:db:f8:ed:b9:85:ee:6b:b8:03:85:f6:95:
36:8c:a0:eb:ca:64:f8:dd:42:3e:06:17:a1:be:15:96:eb:39:
d3:91:6a:f6:a3:33:f5:cf:46:ed:42:c6:ed:a5:3b:e9:fd:8b:
59:8d:f3:f6:68:8b:c6:aa:19:48:64:2b:ba:0f:aa:ef:1a:fd:
9e:4d:43:70:00:c0:46:66:45:46:a7:64:39:ae:69:e3:03:b5:
eb:2a:60:3f:d5:c1:f2:c3:a6:b2:dd:91:72:8a:2b:30:b2:d4:
b9:85:c5:57:1e:e4:48:cd:04:85:56:29:54:87:df:cb:2f:ee:
af:7e:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:34 2026 by rpki-client