Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: jEfOugjo1lreXg3fD5KLmsmUefqNDSVj+VRWWMJo6C0=
Subject key identifier: 27:40:39:99:C0:31:E6:22:46:E1:48:88:50:18:AB:FD:90:1C:5E:E7
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019CAB3426099AE67771F04B8BD3541C838D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: aoOpVJxHaq6lirDB7KBfHBY1mPg.roa (hash: yU+Zr+0ARyapGrg/EO3GqqfA2M5mqsDqcwUrOhZ27aQ=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 9baJm3geolhpUua3G0U7gWg3jED/VH9SSdBvOqNYBn0=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:26:09:9a:e6:77:71:f0:4b:8b:d3:54:1c:83:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=27403999c031e62246e148885018abfd901c5ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:82:3d:22:96:3b:6d:69:f2:5a:2b:61:6d:
7f:e2:77:af:7a:92:1f:8f:1e:e1:82:5d:55:b0:f0:
b7:d1:1f:61:66:99:c2:d6:cf:9c:36:41:4a:5a:5f:
98:78:22:6b:3d:8f:bd:32:c5:b2:ba:08:5b:d6:a8:
31:70:e0:d6:86:2e:f6:ab:d2:e5:29:1b:f3:fd:49:
e9:b1:07:b7:a7:98:f5:5c:1b:b9:e1:86:26:de:9f:
c6:66:f0:21:ba:d7:e1:51:66:ec:d9:c5:09:97:44:
20:53:ec:6d:84:c5:e1:36:88:b1:f1:1f:f4:10:97:
74:a6:f1:72:00:c3:fe:39:ec:ef:76:d2:58:d7:b8:
9f:be:6b:e9:45:b4:8d:60:8d:fb:a7:bd:29:5c:7f:
3a:ab:1e:c8:9e:08:4d:39:9b:3e:c1:7d:d7:3d:ad:
9e:0d:e6:f2:c7:a1:13:97:3a:85:73:f6:bd:49:3f:
51:c5:02:5f:ca:9f:dd:3c:d4:4e:7e:05:6c:cf:9c:
30:69:e8:a4:5b:54:3a:3e:de:f5:40:89:91:bb:7f:
18:03:70:1e:82:64:4c:41:71:4b:96:8b:e2:88:30:
71:9a:8b:08:cc:ad:1d:c2:26:d7:9c:ed:53:cb:05:
1e:e5:02:0d:6c:11:01:48:1a:92:5e:38:56:03:25:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:39:99:C0:31:E6:22:46:E1:48:88:50:18:AB:FD:90:1C:5E:E7
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:7c:7f:c9:fb:31:0e:25:70:8d:3f:81:6f:7c:c0:8b:3e:
9d:04:c8:aa:ac:8c:87:6c:55:ae:ae:07:9e:ef:51:c2:eb:46:
1e:82:5c:9d:9b:a3:5e:02:1e:db:50:25:a7:45:f2:03:95:7c:
32:93:93:d8:44:db:63:2c:7d:cf:dd:4b:2b:69:08:d5:bf:90:
9d:58:98:67:9d:3d:81:44:60:80:6b:17:40:02:b3:d6:d7:6a:
6c:49:04:38:cc:26:11:06:81:34:22:b2:95:41:52:d8:87:90:
32:18:30:2c:ce:be:91:f3:d3:8c:68:78:91:cc:81:c9:8c:54:
e5:8c:bc:84:c2:96:13:35:60:f1:32:38:cd:3c:83:4f:86:59:
5f:2b:63:08:eb:78:f7:ce:61:a3:f7:c4:c7:89:a9:b2:ff:f6:
cb:69:52:de:6b:ab:99:eb:eb:ae:c8:07:18:84:6d:85:7f:79:
f8:03:22:21:1f:e4:48:4e:a7:ae:de:f3:07:2d:bd:77:68:b6:
4d:c0:6f:4c:7d:a7:a1:55:98:33:9f:c5:a8:aa:6e:74:0e:43:
d1:02:1b:bd:a3:f5:ab:ce:68:67:66:2e:a0:d9:ac:b7:a5:e5:
e4:ca:05:83:c2:e6:7c:cb:0f:1d:77:36:c6:6a:69:db:11:60:
11:f5:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:36 2026 by rpki-client