Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier: 81+AIVuNQlNyZBG2gP0VTDhELPb6HImRMjSt0Re4HHM=
Subject key identifier: 82:5B:25:E3:CA:8C:D6:35:DF:E6:3B:59:27:CE:DE:FB:85:98:3A:3A
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 019CAAC6FB8B206B979CB72956B2EFB9EDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number: 0C2D
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: FApYjE878gTQjnR6VxM2QnFzIxE.roa (hash: VNJOfYtDuAPjExn4P6G0DeQAutPtIF8Xz9lKtPfTGNc=)
2: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: upNIql2mn2cNjFcifHmUbQMJMYsY2AQ8sRbIuJt+oqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fb:8b:20:6b:97:9c:b7:29:56:b2:ef:b9:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=825b25e3ca8cd635dfe63b5927cedefb85983a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:a9:6c:21:da:7b:bd:a1:d2:e6:03:c1:e2:
a7:4f:ef:22:15:c5:6d:3a:94:45:41:8b:73:a9:6e:
fc:e9:45:d5:0e:75:b5:cf:a7:01:60:c9:bd:a9:79:
d8:94:04:97:5f:bd:ce:46:39:85:59:32:d8:71:33:
94:a9:91:c7:4e:e5:84:ce:21:a8:31:70:4b:18:e4:
f8:cb:d3:15:3e:21:1e:fa:0d:dc:b4:20:99:20:06:
48:d3:68:86:8e:72:0e:4c:58:b4:f5:ab:a7:dc:cf:
77:61:fe:ad:8a:ed:54:21:fe:34:1e:50:85:db:35:
b7:d0:8f:b0:94:25:29:35:21:b8:7d:0a:02:ab:26:
b9:6b:63:8e:41:53:d4:38:0e:96:8f:b5:16:be:cb:
d0:c1:58:cc:ad:04:a3:a7:bc:c4:d1:03:f9:0e:dc:
96:c4:79:b7:e7:98:78:70:fb:95:f3:63:74:ba:71:
43:71:3c:1e:8d:1e:c0:a1:9c:77:50:1e:c0:7e:da:
bf:a8:05:52:89:13:c8:75:62:60:1a:9d:f4:2e:8a:
e9:de:03:fc:0d:31:66:21:a3:8d:84:1b:ce:f4:67:
ef:65:b7:67:5a:1b:2f:d5:6a:e5:6c:53:ac:1f:4b:
2d:85:a2:91:1e:18:f6:ac:5e:bf:20:6e:3b:37:52:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:25:E3:CA:8C:D6:35:DF:E6:3B:59:27:CE:DE:FB:85:98:3A:3A
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:11:b1:2a:0f:4c:ec:ec:f8:f2:11:d8:10:a3:55:6c:1c:
a5:50:af:1a:6c:48:49:fc:db:8e:6b:50:15:4e:7f:7b:97:71:
0c:56:bd:c8:16:b9:a5:73:d5:ce:b0:ee:71:70:d5:36:cb:30:
8d:43:14:e4:76:91:fa:45:e8:ad:4d:3a:55:e6:91:e5:16:b2:
cf:30:27:8a:38:f6:19:ef:b0:c0:cf:49:5a:51:00:de:e5:e7:
3f:c1:bf:e4:ff:cf:04:ea:72:f0:fc:d9:d1:5a:b5:40:0b:7b:
95:68:c4:1e:db:5b:ea:8f:18:6b:55:32:40:1a:b2:ad:3b:ce:
c9:5d:cf:83:ac:27:3b:29:3b:c0:ae:49:20:92:32:1e:7e:16:
89:57:00:38:b8:ce:20:a6:d3:63:7a:e7:a1:be:07:c0:87:70:
e2:65:94:20:cb:c9:5d:6e:4e:3c:9e:ef:98:03:03:0c:87:5a:
51:5c:72:d6:3c:bd:b3:c2:b4:a3:b1:5e:57:9c:49:bf:8a:6b:
38:4d:1e:d5:92:cd:7d:b0:3b:64:99:c2:90:d8:e5:51:cf:54:
ca:ce:0a:bd:52:8f:ff:e0:0a:4c:78:56:5b:f9:86:09:69:0e:
bf:f4:a3:a3:45:bf:00:93:0e:68:75:63:43:89:82:83:ad:c4:
f9:ff:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:57 2026 by rpki-client