Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: xqNFae+AM32WYRgJY7AtQQ6OuEPvApkKQYQK/OkUsAs=
Subject key identifier: 35:E7:FA:9F:5D:E1:2E:DB:29:CB:18:23:9B:40:BE:40:CC:AE:4A:C8
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019CAC4767B6AB5B992BD98934FC3CD12DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0B8A
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: D+nfiztPqRfDafKMWKWOLl7pWumWg5DOh347kAL7XZM=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:67:b6:ab:5b:99:2b:d9:89:34:fc:3c:d1:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=35e7fa9f5de12edb29cb18239b40be40ccae4ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:23:aa:39:b2:14:8f:c7:78:76:78:53:c5:
b3:61:4a:84:7a:4d:5d:cc:b1:c5:15:23:ff:31:ee:
d4:06:46:b0:50:56:29:02:69:a1:d4:48:ce:e4:79:
12:19:98:17:6c:3d:fc:f4:cd:81:77:a7:fd:e7:2b:
03:de:c0:92:c9:4e:7d:ca:90:10:f4:8c:b2:70:1e:
01:24:c9:97:d4:3a:2a:4f:c3:6c:3c:4f:66:61:94:
6f:17:c7:53:a1:0c:29:82:06:d3:29:56:ea:56:77:
3b:c9:74:2c:6e:65:15:d8:e1:0c:a7:c6:cf:1b:b1:
53:d7:3c:7c:46:a2:c7:c9:61:a4:61:63:1b:f8:84:
1f:64:6b:3b:1e:06:77:55:7d:71:4c:a0:fd:52:f7:
c0:0a:bb:59:c8:6a:f9:64:93:e8:ed:88:54:47:a4:
12:92:04:7f:77:ac:db:98:98:6c:a8:70:33:1d:4c:
b1:dd:90:07:0c:62:80:ce:2b:7a:13:7b:64:ad:e6:
20:2e:a3:d9:3d:e8:f8:46:a0:17:e5:17:4a:35:83:
62:1c:65:95:18:ee:30:90:fa:f6:f4:ff:5a:8a:0f:
bf:a2:02:dc:d4:2f:e9:40:04:01:52:9c:07:49:93:
2f:1e:91:70:cc:17:8d:f1:5e:3b:6f:5c:5a:48:6b:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E7:FA:9F:5D:E1:2E:DB:29:CB:18:23:9B:40:BE:40:CC:AE:4A:C8
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6b:3f:f8:13:ff:5b:9d:72:40:71:53:47:5e:14:10:bf:d2:
28:b3:c2:c8:ac:1e:bd:80:0e:6b:27:ee:e6:09:db:89:1d:60:
42:f8:40:0f:09:9d:7b:eb:b4:eb:f1:20:91:56:34:96:b1:51:
c6:41:80:b6:83:45:41:b5:21:df:bc:34:91:1b:4b:84:22:b2:
9c:51:ad:7c:40:e9:63:32:86:b8:d3:5e:bc:dd:be:1e:44:ce:
69:a2:fb:28:d2:31:d7:9d:fb:c9:72:08:de:66:f3:9f:3e:ff:
c9:50:0f:3f:66:5f:a6:0a:47:a2:d9:a4:0d:32:cb:2c:ea:c6:
f8:e5:31:ca:a2:fe:91:0f:a0:a4:c8:9b:dc:2a:3d:ea:8b:cc:
ce:e9:5b:7d:6b:71:28:46:f3:15:ee:42:52:13:8a:3b:21:ca:
4c:fa:7c:cf:47:6f:d3:0c:11:b5:79:87:03:ff:9b:11:9a:13:
3b:a4:e3:b3:91:17:85:29:76:fc:17:24:c4:52:79:47:3c:cb:
d4:67:b2:89:01:e1:49:91:ce:56:05:ed:6d:b3:ec:a4:42:bd:
57:18:a5:aa:56:e3:59:13:49:01:e1:1d:90:84:30:8d:67:b0:
c4:00:d0:4a:89:78:3b:69:cc:f1:21:36:8e:92:51:bf:f6:35:
de:b3:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:48 2026 by rpki-client