Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: 80D1PN4ijhw9QkJqPGO6bUD7CQxnA41B0xLSppJxsLU=
Subject key identifier: 8C:17:A3:D2:A9:35:AE:46:D4:F0:34:92:36:5B:F9:52:7F:0C:84:77
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 019CAB33FF8F608CC2D355B5EDA6C95D447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 05A5
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: QogyvWPisdntpmICPJEytHpddn0.roa (hash: HNTYMpcwAwpgRtJkBvumc5GBtbLf8MOK6w7oCd2sY4A=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: Sz4mTFEIYsM7BWOEy5e9oU6f9xy4os8l750b1jbSCvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ff:8f:60:8c:c2:d3:55:b5:ed:a6:c9:5d:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=8c17a3d2a935ae46d4f03492365bf9527f0c8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:01:a3:98:1a:1a:06:5f:bb:8a:eb:b8:d5:
d0:9d:2d:9b:c4:08:a8:d4:3e:85:a1:ea:7e:67:7b:
90:46:50:73:19:90:43:75:97:d4:de:59:d3:08:e4:
fc:bd:9b:91:db:46:a0:21:ee:64:83:28:66:a4:14:
b6:ec:80:3f:64:61:08:9a:6a:1e:98:be:91:ef:a7:
00:ec:f5:f7:61:11:3d:48:fa:6d:21:98:bf:ab:fd:
67:4e:72:5f:83:a5:b0:94:26:56:b3:d7:df:84:b1:
5e:d5:75:fb:d3:af:ed:34:fd:5a:21:71:77:7c:b2:
7f:ea:b1:50:f4:f3:c1:b7:af:0c:6a:8c:d1:50:ff:
87:3d:11:df:99:06:17:08:32:df:1f:d1:3e:07:24:
fd:4f:48:ca:a3:ce:57:05:ef:07:0e:bb:bb:2b:18:
4d:44:54:2d:fd:ab:29:6d:f1:95:e4:e5:32:26:df:
ce:cc:98:3d:82:8b:7c:7d:a3:e4:a5:a0:d9:22:ab:
ef:10:7d:42:ec:0c:b7:4b:96:75:b3:97:ac:62:3c:
20:a9:ca:48:72:c7:3a:3b:26:f5:9a:1c:8f:b9:b8:
c3:36:fb:f4:e4:02:a3:3a:2d:ca:7b:e6:21:d2:65:
0d:8c:04:15:c7:a5:3c:8e:41:c8:ad:13:b8:ab:b3:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:A3:D2:A9:35:AE:46:D4:F0:34:92:36:5B:F9:52:7F:0C:84:77
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cb:7a:c4:69:74:ce:90:e1:cf:36:bd:8e:a4:d8:3b:6c:e4:
9d:11:fc:54:3f:94:64:66:71:50:8d:fa:09:9d:ec:f5:20:2b:
90:89:43:7f:d2:c2:79:4f:5b:f2:85:b7:1c:3c:6a:07:cd:2c:
df:ab:f9:f0:65:bd:98:d7:fb:e5:93:8c:79:6a:14:8e:1e:9f:
ab:94:b0:94:ff:43:9b:8b:b6:ed:85:16:07:cb:fb:7e:5d:e0:
b3:f6:d7:e8:14:a0:bc:2a:d0:90:39:31:b6:06:e9:34:e0:b5:
6f:a9:07:6b:f7:5c:43:d8:2f:ab:33:ff:50:14:d8:0f:9c:02:
4f:99:ab:18:7f:48:8b:e9:2a:ee:82:d7:a5:81:53:a8:49:28:
fd:79:91:c5:15:bd:e4:fc:c0:9d:0c:97:25:1c:8f:69:ef:14:
0b:6d:9a:7b:87:5f:ac:31:f0:78:66:b6:44:bf:fc:58:af:74:
fd:30:d3:20:27:6e:97:af:1c:0f:5f:ee:01:41:42:f5:ea:6c:
c2:2d:ef:f5:70:e3:6f:0b:b4:16:41:9d:7c:18:36:6e:41:a7:
b7:22:cd:d8:3a:17:24:4d:5e:4b:87:de:e6:75:dd:a6:f6:b7:
81:22:40:17:83:dc:46:33:db:a7:11:75:32:3b:72:61:56:72:
5c:a1:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:26 2026 by rpki-client