Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: IelRn3s1IxYTt25i2E3DnGakB6cGPfDMHV51N85uv+0=
Subject key identifier: 40:0F:2A:17:6F:79:52:A7:A7:11:03:14:FB:39:C8:05:C4:83:25:17
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019CAA8F5877F1AB15428139D69DE5CCD652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:00:46 +0000
Manifest this update: Sun 01 Mar 2026 18:00:46 +0000
Manifest next update: Mon 02 Mar 2026 18:00:46 +0000
Files and hashes: 1: MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa (hash: PycaTW4K59wW80aiPDoqRYwdmZTOHKaA4NMu7/9B2n0=)
2: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: uFjuc+mbHnDcvr9+IeSbPOX3fTnX4qhnP/x7ADHqdR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:58:77:f1:ab:15:42:81:39:d6:9d:e5:cc:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Mar 1 18:00:46 2026 GMT
Not After : Mar 2 18:00:46 2026 GMT
Subject: CN=400f2a176f7952a7a7110314fb39c805c4832517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:0f:3e:7f:39:1d:87:e1:32:9d:94:85:7d:
34:52:b3:32:07:26:04:10:7d:b0:05:e9:0e:93:87:
39:0e:7d:5e:ca:31:ea:62:06:54:5b:ba:62:c3:df:
97:a0:35:03:a3:6b:6a:29:f3:bd:33:71:3d:95:0c:
ce:ba:ce:8c:3b:79:52:ab:00:14:b0:00:4f:9c:39:
f8:b9:b4:46:d6:dc:39:f9:72:8e:1b:64:d6:1d:de:
61:18:54:c6:25:e7:a9:b8:00:d7:69:91:0d:a0:3e:
d6:4f:3e:ed:13:6a:08:4f:e1:e5:0f:64:77:2a:18:
76:22:11:52:8c:03:89:04:27:0d:9d:5e:85:f2:09:
38:78:05:f9:02:4d:7b:3f:3e:a4:a0:d9:50:90:ef:
1c:fb:a3:2c:f7:ee:1c:e1:8b:db:6c:c4:55:e9:3a:
41:5d:13:16:de:1f:f1:48:d1:19:92:36:b7:0d:0a:
5e:ad:0d:fb:2b:45:0a:f4:c5:3f:d4:e5:10:65:43:
79:e6:56:03:2e:ce:f9:4c:4d:ad:fa:57:04:c7:12:
52:9c:7a:21:4e:e4:3e:04:fa:60:6a:b0:ec:b6:cb:
1b:b9:10:92:62:ac:fa:c8:07:37:23:8e:bf:fd:40:
90:cf:2b:43:a9:b3:33:c0:da:c2:6d:d8:f1:d5:fb:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:2A:17:6F:79:52:A7:A7:11:03:14:FB:39:C8:05:C4:83:25:17
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:bb:bd:05:71:7a:7f:ba:22:84:98:0a:f3:ec:ad:3c:1a:
d6:13:64:dc:83:f9:b6:c1:3e:ab:cc:0a:54:c9:e7:f3:86:f7:
5f:37:46:31:0d:0b:ef:36:c5:80:cd:3b:a1:4f:95:87:07:f7:
2a:89:c5:75:cc:7f:2f:0f:1b:38:ee:f3:1d:f2:3a:52:1a:ad:
73:03:fb:5e:b0:33:24:ca:05:07:4d:e6:18:06:8e:e6:30:87:
b3:01:c6:a0:5b:56:62:62:d5:9b:b6:10:15:6e:df:f4:42:ee:
66:f0:bb:96:f3:f5:9e:52:b3:57:91:0b:db:73:3b:90:a4:e0:
cf:40:89:94:c3:ba:5a:7c:f7:2d:74:f2:cb:d5:0a:a1:c4:bf:
6b:38:a1:7d:c6:1a:c4:30:42:ac:94:25:9f:a5:b0:7d:83:0c:
bf:53:23:dc:68:50:b3:85:e0:52:b0:a9:4e:14:2f:97:1e:59:
f8:ea:57:40:e7:b7:8d:50:4e:65:da:a4:a2:63:41:0b:0d:79:
d2:9f:ac:30:50:49:73:f1:2e:04:e1:c9:b7:be:4b:01:ee:f3:
c9:1a:d6:5e:75:05:46:03:43:29:f5:f6:63:bc:45:c9:43:6d:
fe:08:ad:91:ea:38:48:8d:3b:dc:75:73:b4:55:e8:b2:be:26:
fb:9a:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:02 2026 by rpki-client