Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier: C+EMUyD1sZLSKZr6du19diu4tuLQsqQCYk+quQRK+Pc=
Subject key identifier: D9:CA:5C:FB:63:26:02:9B:0E:1C:6C:49:DA:03:19:6A:7E:80:39:6E
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 019CADFEB488DA9D0815ACD288693ACBF65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number: 0A41
Signing time: Mon 02 Mar 2026 10:01:16 +0000
Manifest this update: Mon 02 Mar 2026 10:01:16 +0000
Manifest next update: Tue 03 Mar 2026 10:01:16 +0000
Files and hashes: 1: 4WS4fKXpNyEuxVS40X3lIN34tqc.roa (hash: YL9+Lx3OpU65I5snabdkjLNWRqNS9J0xl+AZwvIsmMk=)
2: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: 7/k4VRNcEqj6SxoIacLfhttIN/ln0YWf16h4TA+SVOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b4:88:da:9d:08:15:ac:d2:88:69:3a:cb:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Mar 2 10:01:16 2026 GMT
Not After : Mar 3 10:01:16 2026 GMT
Subject: CN=d9ca5cfb6326029b0e1c6c49da03196a7e80396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:da:46:1d:3d:5e:ea:37:5b:98:37:1d:6e:
b4:89:c3:82:eb:5e:a1:95:51:23:7e:8f:e7:6c:80:
de:d7:b4:46:2e:b0:91:be:a9:04:dd:c0:fb:67:e8:
f4:62:3f:32:ee:1b:f8:31:16:25:71:85:70:9f:51:
cc:cb:aa:80:a7:d7:bd:37:72:74:1c:23:f4:8b:33:
e9:a3:81:31:77:4e:57:c8:c5:a2:b3:77:fd:c2:2d:
86:79:86:98:fc:c3:8c:85:c5:b2:79:74:e1:dd:86:
f7:f3:88:7c:b0:97:72:11:0c:b9:8c:30:73:74:89:
01:0b:b6:7f:1e:9b:ac:3c:c5:dc:d1:67:57:b1:c0:
e0:4a:85:f5:0a:24:fb:10:2c:98:6e:af:48:b5:fd:
91:7f:1c:39:53:15:1a:0f:1b:7a:9c:6b:ed:6e:37:
f7:44:ab:c1:30:2b:21:f0:da:a9:6d:47:b5:df:32:
1a:29:59:a7:62:94:c0:76:48:8f:e6:74:f6:9f:6c:
5d:31:64:0f:14:fe:90:f9:b0:53:31:40:e5:53:3f:
d5:31:76:18:af:c2:8c:01:17:e4:7e:f5:4c:16:ae:
9c:3b:b2:dd:f5:c3:e0:ac:1c:17:65:3e:7d:51:d7:
48:97:98:d3:42:f0:c1:62:38:92:19:e9:99:3d:d3:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:5C:FB:63:26:02:9B:0E:1C:6C:49:DA:03:19:6A:7E:80:39:6E
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:ec:21:87:c8:af:9a:71:c4:fa:2c:17:0b:cf:ae:b6:97:
f5:f5:b8:3b:0c:fc:ea:f2:e4:89:49:d0:11:50:65:4c:92:fc:
3d:7a:3b:61:d1:0e:72:a6:a2:e3:d8:f6:fc:61:bb:40:b9:30:
25:98:92:09:ee:03:29:de:df:e1:2c:62:33:4e:37:c6:b3:6e:
a8:69:1a:43:9c:27:6b:34:b0:e2:8d:15:ac:c3:6d:65:8e:26:
4c:bc:20:43:60:3d:2e:a2:93:3a:b0:99:e6:73:70:d9:35:e6:
98:12:fc:bc:e7:4b:be:f8:cf:5a:46:b4:e5:19:fd:dd:3f:8e:
67:79:10:86:cd:86:f4:24:53:4b:fa:64:82:99:43:8e:57:3b:
3b:47:5b:83:7d:fd:b8:36:97:67:a3:c9:9e:20:44:4d:68:27:
23:f2:80:6f:55:40:91:cc:30:95:72:58:17:11:83:6e:c1:cd:
75:43:09:2c:79:4c:57:52:5d:76:83:55:6d:ff:d4:52:df:94:
65:74:0a:ce:a9:68:e0:32:9f:40:3f:0a:e5:f7:71:60:56:e7:
e9:ec:bc:87:6c:34:33:bf:e8:86:44:55:db:1f:48:fe:ea:d9:
d5:7f:8e:d9:d1:4a:92:74:24:4e:65:c9:bf:4e:b7:fb:60:89:
92:97:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:37 2026 by rpki-client