Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: pmm+PZvUqiwfSyiBkD+x1orIPDrXZlE2QsihOpX2e9w=
Subject key identifier: 73:E0:1E:10:47:5F:32:91:D1:17:44:0A:FF:DE:77:62:48:5B:BE:DA
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019CABD9BB9A419684B4F574C8B01F2EE593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 072F
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: Hpbz7tqlbbeIZWJFTMeh84NUw9EjTP0S5R2KKGH7y5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bb:9a:41:96:84:b4:f5:74:c8:b0:1f:2e:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=73e01e10475f3291d117440affde7762485bbeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:01:6a:23:3d:73:62:cf:b9:66:39:90:8b:
c4:f4:5d:8c:eb:2e:8c:43:e4:e3:c3:d1:aa:b9:f7:
55:96:34:dc:52:84:06:9e:de:0b:1e:8c:f0:1d:e6:
cd:0c:c1:ae:e7:56:f0:15:c6:3e:5c:bc:3a:e5:00:
72:e2:58:d2:8b:fc:39:45:32:68:6b:4d:46:4f:9e:
c5:1a:92:f1:bf:7f:f4:b5:ea:6d:84:4e:5d:12:d1:
1c:e3:ea:b7:d8:cd:85:5f:0c:52:58:9b:fc:71:33:
ed:de:21:0c:9b:b6:aa:d3:8b:79:37:50:cb:18:05:
6c:5f:c2:2d:77:f8:5a:1f:30:05:d0:74:20:b1:49:
1e:ac:cf:fe:ea:20:28:e3:1d:84:e2:66:a5:7e:94:
74:bb:26:21:4f:c8:69:cf:6f:cf:3e:de:b8:0a:db:
ac:0b:1b:c4:03:ce:d8:8d:de:e3:97:38:b6:9a:a0:
22:50:87:52:c8:95:a8:99:68:6b:c7:95:42:bb:ae:
0e:4b:28:c1:f9:f4:82:e9:5e:55:f9:7f:b2:dc:07:
f7:bd:a7:ba:f9:44:e4:6f:5c:ed:aa:4d:c3:52:86:
3e:14:e0:3b:b8:4d:06:92:ab:ea:b5:eb:fe:a6:f8:
8c:dd:99:d5:0c:07:53:27:ab:ec:a6:5b:f9:5d:31:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:1E:10:47:5F:32:91:D1:17:44:0A:FF:DE:77:62:48:5B:BE:DA
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:c7:db:27:0f:ac:58:e3:cb:a4:54:a2:71:25:1d:e8:b7:
d3:63:d2:3e:7e:ad:fb:53:ac:dc:ae:ba:5c:85:e1:0b:ba:c0:
ab:db:fe:16:34:14:81:7e:a2:c5:19:b3:b1:26:0a:0a:93:95:
71:1c:ec:c8:c6:30:a3:30:91:fe:08:47:c5:6e:36:2f:5f:e2:
83:6a:17:60:f5:00:8d:ee:b9:39:eb:c5:35:52:ee:56:06:b5:
92:20:0a:4a:6a:4b:d4:9a:c9:ed:fb:94:c7:40:d7:fb:fa:8f:
21:df:1e:87:2d:5d:40:43:14:35:98:e2:96:22:25:35:b3:a1:
b3:ef:f8:fc:bf:82:e7:6f:c3:52:cf:2b:c5:6d:e5:59:6e:d7:
4d:17:20:ff:2e:5f:4d:1c:e3:d0:63:43:f7:7d:ee:50:b1:15:
75:0a:6f:ef:11:8c:29:48:81:95:17:60:8f:23:58:a4:f6:a7:
54:fe:7f:e3:17:85:68:f6:bc:6b:ab:e3:1f:59:a4:be:84:c6:
1f:71:e5:79:5e:75:46:f5:af:f5:0b:86:2b:5a:8f:45:7b:be:
2e:b6:49:96:60:07:b7:c6:d3:a1:97:2c:d1:d8:fb:e1:81:69:
ca:86:1b:52:16:45:ee:1b:3e:42:5f:09:ca:9b:21:70:15:b3:
e3:21:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:22 2026 by rpki-client