Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: jCjxBiCMyQIhp85q/dIEuZJdPi4VNqQTv0t4DPFtTjY=
Subject key identifier: AD:BE:FE:92:3C:D4:36:60:8D:73:92:C8:AD:71:D1:96:DF:10:5A:62
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019CABD9D40249A29312340691683829A2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 127D
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: Prxgq3AxNj9Q7zIpNAwc8wRMKGHLoKTeLlk4AhT/Ups=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d4:02:49:a2:93:12:34:06:91:68:38:29:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=adbefe923cd436608d7392c8ad71d196df105a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:60:76:25:8f:13:22:55:77:0e:4a:08:ed:
39:4d:87:f0:74:1a:ce:9e:35:5b:f4:b9:43:9d:c1:
ce:da:e8:94:0c:4f:c7:e7:2a:85:08:a1:d3:84:9b:
84:8f:b1:c6:c5:07:6c:9c:fe:3c:2c:9d:89:b4:87:
06:ef:4a:4c:6a:02:6f:66:95:d7:3d:ef:23:a5:9d:
50:f8:11:b5:7f:67:cd:df:3a:51:52:8f:84:2b:e1:
88:d8:f0:65:c7:2e:a9:a1:a6:a9:b1:c8:6d:63:7f:
cb:9f:f1:fe:bf:84:36:05:24:12:08:b1:f6:89:ac:
a1:cc:09:61:d0:89:8c:bd:94:3a:6d:43:7d:b8:d3:
f9:cc:16:e6:1d:2f:92:85:52:50:1b:c8:5d:52:ab:
10:2d:ee:56:19:46:33:e6:32:bf:16:ce:8e:03:56:
4a:de:7a:4a:27:9d:c4:42:11:81:03:5b:19:44:23:
30:d7:32:01:fa:2e:01:ac:1e:86:a0:fd:3b:5a:d2:
1b:67:70:1f:11:f4:77:34:48:2c:31:ce:22:2b:04:
5c:d3:2e:e1:6f:25:1c:2b:9f:9e:40:46:18:3f:5d:
11:20:27:6b:11:af:10:c5:09:15:ae:8d:5c:7b:9b:
c5:33:4b:15:4c:fb:c2:a4:a0:90:1a:44:d8:9b:bc:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:FE:92:3C:D4:36:60:8D:73:92:C8:AD:71:D1:96:DF:10:5A:62
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:98:fa:cc:6f:23:eb:36:3f:2a:ab:9c:96:2e:1a:03:08:
30:28:00:54:1f:43:7e:06:6c:63:97:56:63:20:0f:ba:d7:32:
5c:07:01:15:d7:d4:b5:4c:23:e2:e0:cd:c5:9b:34:0a:b8:2e:
e7:0c:5a:20:e1:fc:e8:47:f4:b4:70:de:2d:d9:0f:be:9a:4a:
e7:21:58:e4:eb:3b:e5:7c:5d:5d:f0:2b:4b:72:78:0f:2c:d2:
49:6b:9b:59:db:4c:33:56:4a:b8:05:bd:a9:4b:50:14:e5:aa:
eb:c8:70:2b:7f:af:c9:ec:af:8d:bb:cf:f6:da:e2:90:18:c6:
70:46:59:6f:06:61:c2:89:9c:1b:83:c0:a3:a8:73:e0:8f:47:
26:6c:2a:96:85:92:6b:b8:0d:6c:85:2e:5a:ca:8e:5a:a2:50:
04:87:c7:01:7d:82:a1:27:f8:28:ef:d9:4f:54:09:7b:90:f9:
e3:59:53:53:b3:ec:dc:c1:d4:b7:c7:b6:ba:ad:f3:77:89:4f:
ff:55:d5:d6:ad:bc:89:6b:5c:35:e3:5e:7a:e9:e8:a0:e6:9a:
22:88:3d:ab:16:56:c9:33:ef:67:b1:1f:1c:bb:9c:f8:12:63:
22:9b:2c:8e:c6:a2:04:ed:b5:7d:37:05:66:86:33:8f:52:55:
a2:8e:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:56 2026 by rpki-client