Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: WB48NJqVaHIVGzoOux1oZQVd43haBkUAURYO94d5y50=
Subject key identifier: 2E:80:64:FE:37:9E:A5:44:1D:67:97:D2:98:05:A2:9B:61:79:61:F9
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019CAAC672B1040982BB7FEED72C00F15092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: h86V89DdYrAWOJ5bPvKJFxqUYbvetbCpTPcrFVj8whI=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:72:b1:04:09:82:bb:7f:ee:d7:2c:00:f1:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=2e8064fe379ea5441d6797d29805a29b617961f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:84:b7:d5:18:7a:ba:17:2d:6f:b1:72:40:
42:32:35:43:78:de:88:35:ba:59:eb:67:a6:a8:15:
02:0a:a3:7d:ed:e2:6a:d3:9c:a2:55:fd:76:c7:2b:
75:a7:a0:c5:c5:47:de:b6:e3:88:d9:a4:35:c4:0a:
d3:5f:5b:01:3b:39:0a:87:fc:53:64:0d:86:b3:65:
83:9c:09:a5:b0:61:ac:1c:e9:63:c6:21:aa:89:58:
0f:f0:a0:b3:b0:76:35:60:91:cb:00:e6:6d:de:f7:
2e:2f:57:ad:84:8c:5c:20:37:4f:a9:03:bb:cc:05:
03:86:77:95:86:6b:f8:e8:fb:c7:4e:88:fb:76:be:
c2:bf:41:4e:d7:f9:ca:38:11:9d:1d:69:da:d1:49:
73:8c:b8:da:47:8b:b4:b7:96:a2:aa:c7:26:4a:d4:
25:29:78:98:15:70:37:49:34:e8:58:2c:79:74:60:
be:df:16:c1:4e:a4:34:5f:73:9e:65:10:41:08:55:
71:13:71:32:a9:24:dd:86:12:2c:d6:28:91:f0:f2:
58:c7:be:12:60:fe:22:58:f2:88:8f:28:15:2b:bc:
2a:78:39:5c:1f:ca:86:1e:61:55:f3:17:0d:04:3a:
17:2d:94:97:3d:dc:6a:64:3c:e0:b5:f4:72:47:09:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:64:FE:37:9E:A5:44:1D:67:97:D2:98:05:A2:9B:61:79:61:F9
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:c0:b9:ab:05:3c:75:40:85:ad:91:c4:6f:0b:5a:01:96:
12:46:e6:27:f5:5c:a7:ba:19:75:23:09:ab:59:a7:c5:43:6e:
5a:2a:ba:69:de:06:44:98:9b:05:3c:87:0f:92:42:73:b4:d6:
14:a8:b5:47:16:f3:cb:a3:c2:34:68:50:52:6f:f0:e5:c4:cb:
03:44:49:d7:50:c3:91:68:eb:e7:d4:0e:56:22:24:2f:a0:e4:
5c:b7:e8:34:b1:cd:aa:45:db:0f:08:65:4b:bb:a0:1d:35:63:
d3:df:71:d9:43:8c:0c:ae:09:41:d7:61:b3:c2:34:11:b2:40:
bb:a6:a4:fe:e4:4a:de:ea:96:03:7c:1b:46:a2:c3:8e:bb:80:
61:d7:78:fe:51:f5:ca:a1:07:81:5c:49:dd:ae:a2:27:91:70:
56:3f:2e:b5:e9:82:e3:a5:cf:8b:21:de:36:d5:9f:74:07:14:
7a:75:33:fa:df:55:1e:48:64:df:e9:c3:85:aa:17:7b:b9:3e:
5f:2a:dc:78:4d:bf:ef:37:80:c7:91:8e:c8:3c:99:d0:5f:c0:
07:c7:bc:82:80:72:0a:ca:76:f3:79:c2:c3:3e:42:53:bc:48:
65:6b:3e:dd:4c:65:05:cc:45:7e:78:a9:14:c5:de:2d:61:78:
4c:35:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:42 2026 by rpki-client