Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: GW3IRXF4x76o0dofFyGLBFpVY5ktx4aQrsE68w26UB0=
Subject key identifier: AD:6D:E3:A1:45:8A:D2:1A:47:6B:D9:5C:D1:A3:C8:60:03:5D:1F:66
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 019CAEA31D9175376A4CB151553776684EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0D8C
Signing time: Mon 02 Mar 2026 13:00:51 +0000
Manifest this update: Mon 02 Mar 2026 13:00:51 +0000
Manifest next update: Tue 03 Mar 2026 13:00:51 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: oiT8IBQpqYPesczIkr4JvHsM+0WGcaM0+M/NgtydrcY=)
2: eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa (hash: 10KRq+2t5E30gi8VhOOLk5+bD9qKlbZmUWl2P2qS7Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:1d:91:75:37:6a:4c:b1:51:55:37:76:68:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Mar 2 13:00:51 2026 GMT
Not After : Mar 3 13:00:51 2026 GMT
Subject: CN=ad6de3a1458ad21a476bd95cd1a3c860035d1f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:6a:76:be:df:31:b5:1e:4d:23:09:0f:33:
80:a9:78:ee:b7:25:41:a0:b4:e9:a7:24:51:32:04:
05:55:3d:04:4b:c3:29:69:d2:c9:4a:1e:c0:a7:73:
a8:b2:40:6d:6b:a8:7e:55:65:62:42:26:2d:d8:2b:
31:09:3f:d8:09:97:f4:03:06:cb:75:47:0c:94:4d:
c7:0a:6b:ca:b1:17:63:24:b5:8a:14:e7:6e:73:05:
73:96:28:90:1d:7c:70:fc:f7:8e:ac:29:0a:6f:95:
8f:2c:cc:38:c9:5f:08:81:c9:b2:9a:ed:d0:18:33:
79:07:1b:63:5f:7b:bd:9a:62:a6:f6:5d:25:78:54:
ba:35:1b:2d:b4:6e:92:f3:b9:eb:7d:3b:7c:19:02:
8e:d8:db:84:cd:66:ad:55:78:ea:bb:9b:1f:4b:b6:
13:bf:6a:eb:f8:40:97:d6:dc:4f:88:1a:17:f9:54:
8d:29:08:d0:47:d0:72:24:45:f1:a2:b4:d4:7a:2b:
9a:61:53:69:7e:07:87:4d:7a:62:29:43:0d:d2:0b:
6e:e7:34:78:df:07:a0:ba:74:f0:68:78:04:79:37:
5c:44:4a:ad:a3:2f:c6:d8:ae:86:10:22:00:24:d8:
b8:e4:ed:53:f8:a4:75:c8:6a:e1:ef:11:22:d0:df:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:E3:A1:45:8A:D2:1A:47:6B:D9:5C:D1:A3:C8:60:03:5D:1F:66
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:71:ac:5c:42:e8:be:fc:56:4c:34:2e:f4:2c:f9:f4:49:
a7:e5:cf:94:85:c6:47:d4:d6:ef:bc:72:7c:1e:1b:d9:f2:38:
43:62:74:b4:6d:36:38:da:b6:82:ff:79:57:5f:8c:e7:ae:42:
5a:79:18:fb:80:76:7a:60:7c:65:06:09:ae:34:be:aa:e0:56:
8e:2a:f6:53:60:ca:8b:f6:bd:7b:ea:1c:1f:ff:52:c9:3d:1e:
00:05:63:9a:81:9e:db:4f:84:d4:07:21:19:6e:c0:d9:b6:60:
32:77:08:67:fb:be:e8:02:46:3b:be:40:3c:2a:81:f4:aa:7a:
ef:f7:df:ed:d0:65:cc:8c:9f:b1:70:ad:87:a7:2b:12:0d:90:
16:fa:ed:17:36:44:70:82:51:4e:22:80:38:31:fe:88:ef:0e:
58:51:b5:9d:ee:fd:5a:19:93:a2:38:74:e0:94:bb:b6:db:ff:
39:bf:c9:cf:21:b1:28:e7:24:e0:bf:d0:78:19:4d:d6:ae:d2:
25:8a:de:ee:51:60:8c:01:54:9e:d6:b5:0a:d9:e4:80:89:35:
b8:f5:12:7d:7c:41:32:1f:a3:68:e8:c4:6e:69:af:c7:27:e7:
49:ab:90:5b:c0:61:0e:37:c1:b8:a6:3d:2d:e1:0e:bd:4a:a6:
11:8c:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:17 2026 by rpki-client