Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: hJFvHqUHdrEdWs/9/44geyYgAkQGCLk53Pqz3YuBCKA=
Subject key identifier: CE:82:3E:A3:D4:D2:EC:0A:75:F3:E5:09:3C:7C:80:08:FC:B7:34:D2
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019CAC7E5B1A1AC8147B0C3329A6FBEE4128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0CB4
Signing time: Mon 02 Mar 2026 03:01:27 +0000
Manifest this update: Mon 02 Mar 2026 03:01:27 +0000
Manifest next update: Tue 03 Mar 2026 03:01:27 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: h57SNBAIRZDPflTjE3C662PnsiFDz4RyWRR36HLn7VA=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5b:1a:1a:c8:14:7b:0c:33:29:a6:fb:ee:41:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Mar 2 03:01:27 2026 GMT
Not After : Mar 3 03:01:27 2026 GMT
Subject: CN=ce823ea3d4d2ec0a75f3e5093c7c8008fcb734d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:6b:39:de:f7:95:0d:32:2a:c7:72:cc:00:
fb:e4:61:fb:10:bb:85:75:0f:14:42:98:a2:a1:e7:
99:9c:62:d2:7e:2c:80:99:74:66:9d:95:43:aa:5a:
99:c0:3e:5f:2c:83:68:5f:03:2f:99:2f:59:8b:2d:
4f:24:eb:05:af:93:00:54:57:0b:ec:23:e3:21:b0:
24:e8:f3:4b:e3:1d:5c:51:d8:f5:a1:0b:36:17:86:
90:1a:92:25:3e:1a:e7:c3:13:d0:72:18:5d:24:a8:
f0:a9:ee:4b:69:34:1c:e2:ec:e4:c2:a3:dd:09:bf:
fe:90:3a:28:0e:1c:57:23:5a:77:3b:6c:60:89:a9:
58:cb:e9:da:3b:16:c1:53:61:d4:6c:f5:aa:13:be:
c1:32:b3:00:48:62:0f:43:a5:4e:c2:54:b6:1d:03:
ff:1d:92:cf:7a:a0:ea:da:c4:f5:57:ae:01:ab:e3:
22:2a:d7:cd:25:7f:28:12:d1:97:53:e5:93:7f:58:
c4:a1:51:14:22:98:b2:65:b7:5e:08:2a:c1:db:fe:
98:fb:d7:79:1a:47:9a:65:b2:35:4e:91:a4:77:51:
54:e0:8b:de:d6:12:ac:58:cf:a5:87:1b:01:be:cf:
5c:e5:e8:93:f3:00:e4:44:22:9f:96:c2:b7:ac:e1:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:3E:A3:D4:D2:EC:0A:75:F3:E5:09:3C:7C:80:08:FC:B7:34:D2
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:22:8e:3f:a0:85:64:c5:c4:d5:d8:f2:85:d1:13:10:b8:a6:
c4:86:42:de:44:b4:cb:3b:f7:04:b7:13:d4:34:79:62:09:d9:
61:51:60:90:42:f9:10:fa:94:0d:6d:fe:10:2b:de:98:b3:f9:
f2:94:79:57:53:85:64:60:b6:ce:38:d2:31:c3:42:02:20:26:
8b:5a:ea:0e:78:2d:a7:47:3c:5f:65:98:d0:3b:b4:b3:56:78:
3a:7d:88:1e:7d:28:81:b7:b8:9a:83:fc:1b:7c:b6:16:1f:2e:
47:a1:52:59:a6:5a:f1:98:e5:01:e5:bb:8d:14:bb:16:e2:72:
2b:82:91:3d:af:77:db:16:0c:39:61:b3:3c:10:bc:92:06:04:
9d:77:3d:08:22:b7:a5:71:3e:26:b0:e0:31:e5:f2:79:00:11:
1e:b9:0c:36:3a:ef:d9:00:ba:8d:15:9a:4c:0a:b1:23:a1:bc:
2b:3d:34:45:3f:01:d5:83:b1:61:fb:1d:33:f8:2a:d2:e0:c2:
c2:ca:e8:75:40:b5:f6:ce:43:af:a3:89:f1:15:f3:fc:23:59:
d4:df:ea:9b:b9:46:76:f6:5c:a4:17:27:64:5e:df:9e:46:bf:
a4:74:12:9b:cd:21:a8:36:01:76:d2:3e:9e:40:4a:a1:80:25:
b9:1a:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:41 2026 by rpki-client