Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: V84E+RKMq38vrkC8ifojFP0KdpqhtHHR9+D+NCGgkRo=
Subject key identifier: 9F:2D:AF:5F:A9:88:BF:63:7F:1D:3D:3E:BA:0F:58:B7:9F:42:56:17
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019CA9B362A7F9F91E683D7EAEFC7F468A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1327
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: U5hj0h3jZSFe8oTtZzPMRGRq0HEuUjGU5NnHavzSc9M=)
2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
3: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:62:a7:f9:f9:1e:68:3d:7e:ae:fc:7f:46:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=9f2daf5fa988bf637f1d3d3eba0f58b79f425617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:36:fc:77:37:d8:f1:5a:95:e4:9d:7d:b8:
af:1a:32:87:21:1b:da:c8:51:0f:5f:4e:7d:be:ef:
e2:11:8b:cb:fa:fd:05:6e:06:6b:84:2d:1a:d4:8b:
08:ed:39:8d:c7:02:ab:2b:f8:11:b2:7c:93:6d:29:
90:ca:cd:8d:d2:f5:03:b8:22:c2:4c:c8:56:5f:92:
8c:14:9b:9e:fe:b6:10:aa:7a:95:3c:3d:d7:d8:72:
12:52:28:44:7f:18:0a:b6:a6:f5:fd:e6:a7:b1:dc:
7d:e1:7b:8a:64:af:36:07:be:f7:f0:e6:28:e5:6f:
75:a7:7c:f9:4f:20:55:b9:bc:e8:1f:55:62:5b:5e:
1d:05:47:2e:86:9a:5a:ea:f8:be:e5:8b:c5:56:31:
09:72:25:5d:40:11:f7:e2:cd:83:fd:4f:b4:40:4b:
d7:86:1b:db:42:b0:73:6e:ad:ab:5e:f0:12:62:ed:
bd:1e:3b:88:93:e0:16:78:fb:da:5a:b8:62:98:84:
4a:19:c1:a0:f8:07:4b:d8:d5:74:ad:e1:58:26:28:
78:db:cb:fd:50:2f:df:27:67:77:50:4d:67:89:2d:
df:cc:d1:db:41:e2:3d:b0:a1:33:b5:90:37:c1:42:
7c:9b:ee:93:c7:77:34:d4:0c:b7:2b:05:cd:43:36:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:AF:5F:A9:88:BF:63:7F:1D:3D:3E:BA:0F:58:B7:9F:42:56:17
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ee:78:67:79:66:8e:47:7e:a6:4b:ec:ce:e8:a4:04:de:30:
52:e1:53:95:ad:31:e3:da:09:d3:38:bc:5a:73:96:c8:7b:89:
c4:67:62:42:4b:16:91:4c:a7:c9:8e:da:33:26:0d:13:c9:d7:
66:5b:f9:f3:1a:48:51:02:3f:aa:e9:fe:39:cc:61:51:ea:94:
98:c3:44:73:4b:ad:ac:b6:77:67:98:55:89:de:30:b7:ea:13:
56:2c:1f:58:08:21:87:77:92:af:dd:16:bb:ca:f8:38:b5:5a:
e6:b1:8b:87:2b:97:9a:76:cf:9b:78:b6:7d:14:75:14:a6:c9:
da:8b:99:53:39:87:49:00:f2:c5:37:c4:87:80:70:49:62:e4:
34:f8:cd:75:e0:bb:7b:8d:a5:1e:35:d7:2b:0e:65:a9:99:91:
45:80:43:6c:98:a3:25:95:09:23:fa:d6:73:ec:e3:e9:49:1c:
91:23:15:6a:76:4e:11:c8:79:25:b2:6c:4e:80:a1:ec:78:7b:
55:68:29:aa:98:79:d9:27:d5:83:56:ae:e6:04:5e:60:be:d7:
5c:6d:30:a9:2b:51:45:3d:45:06:38:aa:db:87:25:67:30:1b:
36:87:20:4c:04:2f:b7:64:1a:ed:8b:9f:3c:5d:0b:37:c9:d3:
27:18:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:54 2026 by rpki-client