Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: 68KjKnY3kWHru6+v92/LoKojrl1uWKIXvdI4jn82p9k=
Subject key identifier: C9:84:D5:81:C9:0C:04:ED:82:36:B7:FA:47:49:90:50:68:11:40:92
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 019CAB3418E49E32D357BE49DDECEA76830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: HukEo3cVqcCZCNkQC8Fo0OdcPV8.roa (hash: uaWWBhq83jLIq6e0tcD+B+F+JyjozNUJczctcyW3h1k=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: vbgwaURqGbPK3GpKCFYMy+UXy3qQCgoyxo8pzVVj2rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:18:e4:9e:32:d3:57:be:49:dd:ec:ea:76:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=c984d581c90c04ed8236b7fa4749905068114092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:55:6b:9b:ad:e8:33:c8:69:aa:18:47:11:
ac:1d:93:da:4b:9a:25:0c:f7:77:74:de:1e:30:96:
0f:49:6c:e7:9f:4c:a2:b8:e0:c5:a0:35:cb:c8:db:
58:8f:27:58:80:76:8b:18:b3:8a:30:d9:6b:ab:7a:
16:c3:70:61:d0:4c:9e:23:c8:5d:e9:9c:8a:be:ce:
db:1e:18:49:6f:04:82:33:b2:fa:3a:0b:d2:e0:3e:
92:c0:f6:8b:f2:1c:d9:30:9e:81:d1:49:c1:e4:14:
5c:a7:f6:bc:56:f9:5b:68:71:98:74:a9:1f:9b:35:
81:25:6f:0a:71:91:8d:61:56:f8:e6:77:d7:43:d6:
2f:54:e1:ed:82:c4:c8:cb:50:47:f1:04:5b:0e:2f:
a8:c5:73:93:d1:30:8d:88:6a:23:41:09:40:5b:98:
96:0e:9e:df:29:0d:63:3b:f1:75:97:cd:5b:5a:bc:
6b:96:20:7d:c2:03:81:0b:e8:39:f9:3c:ca:42:e4:
19:92:c2:9f:3a:c8:b7:3b:2b:71:8f:31:2d:7d:69:
2b:14:11:ab:71:4e:36:89:26:f9:92:bb:04:f2:d3:
c0:2a:5b:80:33:64:be:6e:e0:d0:72:3b:8b:10:91:
6a:dc:a2:a7:c9:89:37:b5:7e:5d:23:84:38:26:d9:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:D5:81:C9:0C:04:ED:82:36:B7:FA:47:49:90:50:68:11:40:92
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e3:ec:37:2f:d8:1b:8c:d3:4e:90:28:21:55:b0:06:ab:64:
07:b4:ee:5a:94:12:84:c7:bf:2b:f0:b2:af:19:a4:2c:25:4f:
0b:50:af:0d:92:d8:17:ca:0d:05:bb:c1:a7:3e:0e:37:6c:60:
89:a7:a9:9b:12:23:db:a3:fd:01:12:cc:d6:10:01:c7:ab:c4:
ec:96:90:b2:81:ad:fd:6f:c5:63:46:d7:0b:98:d0:af:f3:0c:
95:ed:18:f3:9d:6b:30:87:bd:b4:72:ba:9d:40:59:a9:e4:3c:
f0:fa:e0:c1:1a:a1:48:08:5a:d6:ee:b6:ed:df:a9:7f:29:b4:
8e:95:7d:0b:1b:af:09:14:14:00:24:dc:68:8a:f2:aa:71:de:
bf:d4:aa:b1:73:4a:81:16:c1:df:14:03:1d:ff:1e:c3:d0:5a:
66:d1:77:a0:7e:e9:c9:1a:27:f5:1c:3d:0a:30:f2:2d:cc:dd:
9b:e1:2c:c3:a3:4d:74:67:df:eb:5f:9c:b6:c7:83:e4:db:3a:
f3:7a:64:49:1e:70:68:60:2f:fe:77:a8:ee:4f:9f:1e:60:0e:
bd:8c:98:ad:de:ad:1e:21:51:25:b7:b8:ee:e4:44:52:ce:85:
72:62:75:e2:2a:73:6e:b5:d5:b6:9f:50:1c:11:4a:06:4c:7d:
46:17:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:57 2026 by rpki-client