Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: 33Yir+lQqmr0BMS4eiEpwiC0LCx7mLfCxD6YGStmiHY=
Subject key identifier: 56:31:AB:1F:38:EC:B0:73:D0:81:D3:A0:F2:0B:27:B5:60:A6:C0:DF
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019CAA8F5D333AA53E43FB24F044328A191C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 110C
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: J8NvpJq6eev4k_tCNDubI7WjbOM.roa (hash: i38yaMfp3QW23D0QcRAmrQEj3pbk8iPpDiqjLtiH3ZU=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: 9ErxNT8Q4x1ojh/7o7a1Dy9uBrYRxsL6L6lsayL1vjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5d:33:3a:a5:3e:43:fb:24:f0:44:32:8a:19:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=5631ab1f38ecb073d081d3a0f20b27b560a6c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:b5:a0:6e:56:03:91:36:99:8a:42:c6:70:
27:57:be:1b:7c:c8:68:48:f6:97:f8:9b:12:35:c9:
59:07:ed:e1:8c:61:53:92:db:35:09:e2:a2:cc:7e:
73:89:30:3b:5f:7c:db:e7:4a:7a:3c:7a:b7:e7:8e:
2e:2f:5d:c1:e2:4d:e7:d2:f4:90:64:cc:a9:2a:de:
51:1d:97:84:f4:e0:58:3a:6b:f2:e5:07:06:20:2c:
17:9f:8c:05:35:ec:c4:65:13:30:07:36:ef:3b:72:
25:fa:63:01:17:8d:87:bd:31:e9:2d:9e:84:19:e4:
c9:29:0f:68:08:af:1c:bb:f1:9c:ba:53:a3:05:62:
8d:9f:ee:94:8a:12:0c:02:7b:95:77:cc:2b:91:84:
8c:a9:c6:74:22:1d:ca:92:4d:6f:b3:27:98:8e:df:
96:19:5a:5d:82:d8:77:cd:3a:fc:9a:67:5b:9e:fb:
e6:a7:2a:71:98:21:d1:bc:e1:3a:46:f9:b1:1d:85:
f8:9a:86:b0:77:57:1d:5a:b7:b0:c3:57:a6:42:24:
ff:6b:34:47:13:b8:57:b2:b1:4b:75:62:7c:b6:3e:
35:05:f5:43:56:ce:ce:4b:f4:19:ef:73:01:ee:83:
d0:59:64:f8:39:ef:32:7f:78:59:ea:64:e8:4b:49:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:AB:1F:38:EC:B0:73:D0:81:D3:A0:F2:0B:27:B5:60:A6:C0:DF
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:f5:8d:d9:6f:2b:e3:ac:97:44:15:7a:83:64:e7:56:b3:
b4:b1:f3:2d:d2:23:76:7b:c9:08:ea:c5:f2:b9:62:c8:87:96:
01:bd:75:df:c2:8d:70:00:21:42:2a:e4:09:07:f9:40:9e:1a:
a1:84:a4:0b:dd:e5:60:07:03:9a:ff:36:c3:00:d4:dc:80:7f:
a6:94:d9:b3:2c:7b:f9:a1:18:02:77:41:17:d8:7b:25:ac:02:
e7:ce:24:e9:00:5f:8f:7b:64:f1:3c:d6:0e:c8:92:95:01:a1:
c0:60:a9:0a:a1:f1:10:eb:93:96:6a:01:89:f8:7b:cf:46:64:
ba:b7:ee:11:6f:8e:fd:68:de:65:77:09:e2:bd:e9:43:67:98:
20:37:3e:38:53:45:a5:e2:90:c6:aa:db:a5:f6:e0:71:10:42:
0a:5c:c6:02:4c:0b:20:51:77:62:81:91:c1:84:3f:65:ca:bd:
90:c1:54:ba:81:7b:29:4f:75:ca:1e:e1:30:c9:cf:6e:70:56:
df:be:1f:bf:ca:1b:71:6a:48:55:ba:d0:24:7a:1f:bb:79:a7:
c5:3a:6a:78:52:25:56:c4:be:2c:00:9b:54:e8:6c:84:89:1c:
dd:c2:db:3c:3c:c8:00:83:35:7f:18:65:7e:fe:14:69:da:ce:
95:33:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:43 2026 by rpki-client