Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: YhI4V0+qAiFkU3K+iCRz1A907xRlNfv3RdoJxzSKoVU=
Subject key identifier: 19:99:BA:DE:11:30:E5:CE:51:09:3E:84:CF:28:FE:39:D2:B0:79:2D
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019CAAFD0A460B333116F4BF7287783FB321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0B8E
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: EaZgv+Zoz+f/dxYOT6VmQEd7l88FqJMOVHdLwRSA16M=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0a:46:0b:33:31:16:f4:bf:72:87:78:3f:b3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=1999bade1130e5ce51093e84cf28fe39d2b0792d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:05:37:29:2e:1d:e3:84:e2:98:a9:52:20:
27:68:54:b8:20:5d:fd:e6:a6:a5:bc:26:0d:2d:98:
73:41:87:76:20:93:0e:e9:93:44:72:5c:3e:67:a9:
a4:6e:d2:b2:0f:71:fc:a5:7b:ff:4f:11:55:52:7b:
9e:3d:a4:64:60:a1:8f:87:8b:79:73:91:cc:74:1c:
da:e8:6a:fe:10:da:08:a6:7b:fc:64:2a:25:2a:eb:
87:18:5a:cc:e1:ea:eb:88:99:90:28:f5:d6:9c:78:
19:07:f7:00:97:5d:a5:cf:74:af:7f:11:51:11:a0:
48:ba:7c:19:aa:a5:84:d2:6b:e4:4c:f2:17:f6:c0:
f4:7d:c0:69:f9:2f:33:20:20:30:21:84:0c:21:ae:
db:ad:05:22:4a:72:d3:36:ff:9d:58:06:36:00:af:
82:ea:a7:44:ec:ba:0c:b0:2c:4a:0f:ce:55:1a:9f:
0d:4d:9d:5a:99:8d:d3:e1:46:6b:b4:24:e5:74:66:
49:6e:fa:e0:2d:0a:12:9d:b3:10:77:4e:34:70:96:
4c:37:85:33:7c:d5:21:2b:ff:50:b5:0d:be:18:a0:
18:17:75:6b:40:f4:34:83:1e:d0:a0:44:34:5a:a9:
43:9d:99:d0:db:49:74:9f:80:09:6b:f8:5f:67:f6:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:BA:DE:11:30:E5:CE:51:09:3E:84:CF:28:FE:39:D2:B0:79:2D
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5c:a2:b1:91:ad:8f:39:d9:ed:03:86:dc:23:68:45:56:f9:
91:60:b4:a8:55:ec:6b:98:92:93:6a:f8:97:50:c8:84:f6:40:
5a:19:a6:67:96:0f:c0:c5:a2:b1:4c:51:87:e9:b4:4a:3e:03:
de:af:83:e4:56:4e:0c:0b:ea:7c:70:32:29:3a:e4:83:e3:9a:
41:31:c4:56:7f:0a:26:0f:b4:31:db:6a:ab:3c:91:0f:5d:0b:
2b:dc:65:c3:6f:2e:87:8a:7d:48:c7:cc:e9:44:3c:3c:34:b1:
9f:39:83:82:72:92:a2:3f:d0:83:d0:f8:a3:7d:86:e5:93:a1:
cc:37:77:f6:a6:f6:c1:27:0e:a9:69:8e:32:cd:35:cf:c3:57:
ad:b3:b9:c5:5b:49:a6:a6:69:73:22:3a:dc:e9:0a:8b:2a:c2:
0a:13:45:f0:b0:fa:ae:13:c8:43:ab:00:4f:52:6b:ad:3e:aa:
b2:ce:0f:5b:81:85:b8:74:35:b3:18:3b:c1:dd:a6:f7:4c:72:
95:b8:e0:f9:27:df:35:6b:bf:46:39:e3:40:c5:ed:4e:56:91:
f8:7f:f1:8c:b5:ad:8b:ff:6c:98:ab:68:9c:1b:cf:66:c2:a4:
d3:95:33:53:15:ca:95:7f:8c:ba:0e:85:7f:67:c1:54:f1:d0:
0b:4f:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:44 2026 by rpki-client