Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: KTglff2szjAheq9X83dsNp/hnkqQhvRT66Z5Cn/KjX8=
Subject key identifier: 06:69:41:E1:5D:3A:9A:24:F9:70:C9:4E:CC:2A:A4:32:41:91:BA:11
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019CAC7DFD64D6DC17B683FF7D6AA1C0C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 0178
Signing time: Mon 02 Mar 2026 03:01:03 +0000
Manifest this update: Mon 02 Mar 2026 03:01:03 +0000
Manifest next update: Tue 03 Mar 2026 03:01:03 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: hqGH5QMnBzYvn8vkMdKMJr8Hag1DnP18HmRuzkKVS14=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:fd:64:d6:dc:17:b6:83:ff:7d:6a:a1:c0:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Mar 2 03:01:03 2026 GMT
Not After : Mar 3 03:01:03 2026 GMT
Subject: CN=066941e15d3a9a24f970c94ecc2aa4324191ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:3a:03:4e:7a:59:d7:60:da:e4:0b:3b:37:
5a:f2:08:18:43:fb:b2:b9:07:8e:7c:a6:ce:5d:30:
45:3e:3c:55:7e:79:80:c4:7e:aa:52:8a:6c:46:96:
cf:b5:a3:fa:4c:48:88:92:06:98:03:c4:80:68:50:
49:e5:81:8c:4c:ca:96:53:5c:27:ed:2b:b1:6f:0b:
5e:81:ef:24:f2:02:f3:ee:7b:b6:71:95:53:de:1a:
fe:64:a3:47:c5:42:f0:eb:27:b4:5f:1d:f6:04:57:
d2:77:5f:a1:23:20:6f:cd:81:81:16:25:d4:2b:f9:
2d:ad:77:7c:d8:13:fb:25:1c:a5:64:8b:dc:7a:72:
e2:75:1e:51:62:6f:e1:eb:5f:13:c1:85:b8:95:ea:
07:9d:bb:60:a4:44:05:a6:f3:4e:36:ad:1a:11:57:
a0:97:1c:9c:78:08:e8:6d:3d:d7:ff:93:a0:33:7f:
5a:2c:b4:b7:29:7b:c1:1f:a3:e9:35:ff:bd:2a:e9:
8d:1f:40:7c:57:84:eb:c7:13:67:f7:55:8c:ae:c1:
78:af:57:2a:83:3d:b3:f0:05:46:48:55:9a:05:57:
72:40:4d:8f:13:35:0b:01:db:b7:b1:b2:4c:68:ca:
f5:f8:77:96:9b:26:94:9a:f6:40:fb:04:13:53:77:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:41:E1:5D:3A:9A:24:F9:70:C9:4E:CC:2A:A4:32:41:91:BA:11
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:2a:b5:5a:a0:58:87:a3:f8:b4:76:40:d5:c3:d0:b1:1d:
03:0f:57:ea:a3:50:f8:47:a0:0e:f4:23:e8:d2:7a:7e:f3:8a:
a8:9b:8a:42:d7:f1:74:fe:8c:83:75:f3:86:6d:64:a7:2a:e8:
88:01:2b:28:c1:4f:e5:77:03:dd:2c:e0:55:31:66:92:b7:93:
28:7a:c4:6f:b6:2f:94:64:a1:02:62:24:82:4b:dd:03:17:7c:
c9:e3:71:2c:d2:f4:5e:ab:84:1b:57:ef:4c:57:37:90:c5:c4:
e3:ee:e0:c2:51:ea:f5:72:c9:45:25:d2:4f:1a:1d:5c:6b:c8:
4c:85:f2:03:89:f2:8b:d0:8a:c8:6a:38:41:79:55:ba:ad:4c:
2e:20:2d:30:eb:d5:15:5a:8a:6f:80:7d:ab:cf:9c:cf:59:94:
a0:e4:61:27:45:79:a7:db:f7:a3:35:9b:1f:5f:bb:14:a0:0a:
eb:58:a6:2e:17:2e:49:40:45:45:ae:94:63:47:da:1f:71:e3:
f0:52:b3:60:8c:1d:03:a5:2f:a9:6b:3e:c4:66:fb:7e:f7:9f:
ba:28:bf:9b:ac:76:01:e6:db:df:21:12:16:bd:1b:fd:9b:45:
ca:77:59:de:77:8a:02:71:f1:dd:45:33:89:7e:92:45:07:fe:
5f:ec:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:17 2026 by rpki-client