Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: ybFYcwXgObqchseR1ySwixx95SU4LobI4eo4rAx5mNc=
Subject key identifier: 62:29:8A:31:43:29:A6:8A:8C:9F:39:06:F1:DC:4A:15:A4:8F:48:BF
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019CAD225396BEDBDDA161FAB0EC9B3AE2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:00:33 +0000
Manifest this update: Mon 02 Mar 2026 06:00:33 +0000
Manifest next update: Tue 03 Mar 2026 06:00:33 +0000
Files and hashes: 1: BDIXWUULXF4ZYctzL1dIOfhWd84.roa (hash: S93eCFJP6MwqLRSBsJT6plLVugSYsxuO2UQgR9jVAWE=)
2: ItYXiGPx0Y7gidugw99Su1Ihb4A.roa (hash: m2YjVpmW7E6MJX+auloFO1THu1a7R7YZy5fNsp6qz8c=)
3: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: bDlf5RPuAhOhsbXKZafD3KySLwxJVQAsTmV5NDjlLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:53:96:be:db:dd:a1:61:fa:b0:ec:9b:3a:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Mar 2 06:00:33 2026 GMT
Not After : Mar 3 06:00:33 2026 GMT
Subject: CN=62298a314329a68a8c9f3906f1dc4a15a48f48bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:9c:96:47:f8:1a:e3:45:6e:53:37:e1:6f:
b7:31:a1:43:c0:e5:c7:17:8e:c6:bc:c3:c1:db:34:
2a:af:83:4e:dc:c0:4d:a4:ba:4f:ed:4c:9c:75:f8:
b8:aa:ba:c9:9e:08:32:43:c9:65:06:21:c7:cf:73:
0a:cd:87:c5:43:ca:3f:f9:6a:c7:ae:a7:dc:b2:a6:
6b:68:3b:dc:cf:66:19:8c:1c:ec:9c:3d:35:e2:1b:
ad:e2:2d:2b:45:87:af:ff:60:67:e3:e9:b1:bb:75:
49:7a:e4:86:41:fd:f2:3e:10:d0:1c:f6:f3:9d:82:
16:e3:c2:3a:ba:49:8e:17:ad:27:44:7b:1f:d4:73:
a2:de:2b:f9:3d:fc:92:d4:0a:d3:3a:1a:fa:7d:3d:
0e:7b:00:42:88:a5:eb:3d:c6:09:9a:e4:0e:73:8c:
48:f0:3e:c0:d1:28:4d:61:95:88:37:5d:c4:27:ca:
07:0b:17:e2:88:65:b0:6f:e4:a6:90:af:11:fc:28:
10:c8:59:25:a3:7b:13:58:1c:70:49:7f:57:dd:72:
bd:d1:9c:d2:c4:80:56:cd:53:bf:a9:62:78:93:3e:
62:94:d7:92:d2:c3:e3:b7:de:59:c8:a6:23:d5:57:
ff:e9:be:17:66:5e:aa:b1:d4:17:d5:46:8c:40:be:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:8A:31:43:29:A6:8A:8C:9F:39:06:F1:DC:4A:15:A4:8F:48:BF
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:96:5c:b4:88:cb:f8:ea:90:2d:63:57:f7:d4:50:fd:f3:e7:
c7:08:cf:08:ea:24:0c:89:0e:6a:c4:0f:d4:e8:98:ad:06:02:
e5:6a:0d:ae:e1:82:fc:4f:05:20:55:b7:bf:7c:1d:ef:80:33:
fb:fa:d8:de:20:52:9d:24:54:44:05:88:0b:89:72:33:da:2b:
a7:b9:39:76:e1:8f:9d:a5:95:5e:f9:76:96:d1:ff:5d:8d:75:
a8:0d:da:d9:13:d5:91:83:ef:b5:2c:c9:a8:ab:ef:be:32:31:
54:6a:53:db:b1:c2:13:c0:02:60:88:39:00:a4:00:5a:e2:cb:
c4:73:c4:39:34:6e:9f:9d:26:95:4c:0c:2c:da:f0:eb:de:19:
b8:76:42:78:f0:c5:e1:a8:57:99:86:70:98:1f:d1:bb:c5:8b:
2e:37:52:ee:5f:5b:d8:06:57:fc:d0:f2:0b:70:85:6d:00:43:
3f:4b:26:44:b4:c0:b7:b5:5f:e1:4e:cb:4f:8d:e8:e8:28:0f:
77:e4:73:80:de:da:e5:1b:66:77:b6:f5:2e:35:1d:02:99:b3:
36:46:ab:3b:1d:6a:ee:1f:5a:a2:6d:3e:28:22:b2:45:93:15:
77:b5:ce:15:5a:69:8d:88:1d:d8:6d:ea:da:95:84:95:be:02:
6a:2e:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:58 2026 by rpki-client