Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: DmULNtlC3QWP/KTM5XIUanxhwKKA2rGEzBNkQCxfdkY=
Subject key identifier: 5B:B1:F1:00:94:4B:4F:58:C3:27:DB:97:EF:BD:EC:F6:32:2D:AA:2C
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019CACB46AF137CA5E4542B4273F9AD797C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:00:30 +0000
Manifest this update: Mon 02 Mar 2026 04:00:30 +0000
Manifest next update: Tue 03 Mar 2026 04:00:30 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: J0SUlq0CqTljw1T9QYxTO/1P6afYPPIxbpeYUqi48YA=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6a:f1:37:ca:5e:45:42:b4:27:3f:9a:d7:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Mar 2 04:00:30 2026 GMT
Not After : Mar 3 04:00:30 2026 GMT
Subject: CN=5bb1f100944b4f58c327db97efbdecf6322daa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:6a:cb:8d:0f:8d:c6:45:25:da:11:9f:29:
e6:2f:52:73:63:67:e0:4a:d3:e4:a3:d1:3c:ca:15:
ff:e5:3d:08:02:5c:3a:cc:89:e9:11:99:f6:f3:02:
66:c4:84:c9:2d:7d:d3:b9:d2:6b:2f:33:15:5f:4c:
ed:65:00:b0:97:2c:d2:02:38:8f:47:2a:ae:58:36:
ea:f4:09:d5:95:91:63:85:bf:de:55:59:39:4a:68:
0b:68:80:27:94:00:f9:ab:41:9a:cd:b6:1a:54:ac:
48:a1:b2:b7:b4:d3:ae:85:d1:7d:cc:b9:7f:09:47:
06:59:e4:19:cf:fe:78:fa:44:72:36:15:48:a0:45:
bd:02:ac:46:c6:91:90:b3:99:74:40:1f:e6:f1:56:
c6:7a:61:6b:b7:4e:dc:63:60:e0:53:76:a9:8f:71:
43:f4:ae:8f:b0:c3:d7:1b:fe:ce:9a:51:8c:cb:70:
0b:c2:5f:61:14:70:39:29:bf:42:71:ff:aa:96:d7:
5c:ce:41:67:4b:55:8b:18:99:d5:93:15:d3:2f:8b:
8e:ce:11:71:30:b3:7f:5d:11:66:2e:53:3d:de:05:
d3:b3:44:32:c0:2f:c7:35:5a:f4:b4:58:a0:a1:9f:
ea:70:6a:fb:fe:1c:82:ff:a2:39:70:ca:43:50:52:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:F1:00:94:4B:4F:58:C3:27:DB:97:EF:BD:EC:F6:32:2D:AA:2C
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:f8:4b:06:40:78:b6:7e:3c:6f:65:20:92:72:5e:27:f1:
63:6d:a4:87:7f:e8:c9:53:8d:93:ce:38:50:2b:1d:e9:3f:f5:
d0:4f:df:f2:94:f6:9a:30:46:47:b1:bf:ae:03:7e:7d:bd:cf:
cd:b8:ca:c4:98:5b:88:00:59:6e:73:cf:3c:aa:47:57:94:77:
08:40:61:9f:fd:ee:31:03:48:60:dd:48:c3:25:32:00:53:b3:
20:19:31:85:54:12:20:6c:a0:ba:06:53:6f:a2:df:63:be:30:
cb:56:1b:5d:c5:1a:f4:fc:c1:78:59:d2:38:f0:fc:00:ad:4d:
60:e9:c2:cd:dd:09:a9:dc:37:c8:8e:06:8e:1c:0c:e1:8c:5f:
fc:00:15:9b:d4:14:70:67:5f:8d:95:a5:9f:45:8e:14:ac:98:
71:66:2e:3c:5c:0e:6e:40:f0:4f:05:ba:d8:bb:aa:09:24:1e:
fb:79:90:66:05:0c:f8:3e:41:c3:76:fe:79:c0:69:af:88:da:
b2:98:5f:61:3d:20:c7:4b:c8:ae:97:16:ff:7d:fc:c6:53:ab:
7f:93:ed:b3:d6:ea:ca:a5:51:5e:67:39:da:31:b8:d4:20:bf:
7d:8c:a1:34:9a:2b:0c:8f:1d:5f:0c:7e:10:76:39:df:93:5f:
bb:1a:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:32 2026 by rpki-client