Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json)
Hash identifier: JCwcCtVQ9sUaNL0aumbRWATE7wkGcMyVbKS0bdLq7pU=
Subject key identifier: 08:1F:E1:0A:38:07:26:75:C7:58:54:F2:A4:40:04:8B:E8:CB:EF:1B
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 019CACB560D49C1D6E15A08331A91B345000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:33 +0000
Manifest this update: Mon 02 Mar 2026 04:01:33 +0000
Manifest next update: Tue 03 Mar 2026 04:01:33 +0000
Files and hashes: 1: 6jv9jlHJmC7k64rvSsealEF_Ys4.roa (hash: crUEU6To7tUPJ210jDOrFjZwtJRVZ4icX9N2S6uxoc0=)
2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: aBS0/t0ENsefV+e3Q/O2mir5ptrOfx38NhZ+a3p/dR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:60:d4:9c:1d:6e:15:a0:83:31:a9:1b:34:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Mar 2 04:01:33 2026 GMT
Not After : Mar 3 04:01:33 2026 GMT
Subject: CN=081fe10a38072675c75854f2a440048be8cbef1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:7a:0a:48:3f:c5:e5:96:14:33:be:07:0c:
26:f8:4c:f0:d2:aa:9f:62:22:57:16:80:1f:8e:52:
76:f1:ca:c4:b3:db:c3:73:73:e3:05:25:1c:fb:f6:
88:09:0c:d1:f7:aa:54:3c:c1:64:cb:12:86:dd:62:
eb:30:66:ce:bc:93:58:94:af:d9:40:c7:25:9e:67:
07:81:46:78:25:aa:68:ce:0c:20:b6:3c:5e:f6:58:
86:57:7c:9c:e0:97:df:8d:79:26:db:0d:b8:83:96:
93:10:a2:80:e5:b4:b2:d2:90:df:a8:f9:43:b5:03:
48:ea:f5:5e:ec:2c:c9:6b:75:14:78:a8:22:a8:08:
7d:42:f5:d3:1b:18:4a:51:0b:ad:14:fe:a9:1f:95:
4d:cb:8a:96:9a:ba:9a:49:ac:86:ac:51:61:1e:a6:
cb:21:0d:d6:45:06:17:0d:79:a9:46:1a:c3:c6:d2:
02:07:21:5d:1a:b0:78:0b:cd:aa:53:e1:38:23:22:
92:94:ae:61:66:d8:7e:9f:9b:2e:f8:70:63:7b:28:
fd:24:48:36:d6:b0:00:f7:26:2d:56:c3:e0:52:8b:
48:78:3f:74:95:ea:94:9c:46:d4:17:b4:db:a2:f1:
97:62:74:8d:7c:6a:05:02:9b:b6:0d:61:d9:50:31:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1F:E1:0A:38:07:26:75:C7:58:54:F2:A4:40:04:8B:E8:CB:EF:1B
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:34:ef:5f:3b:16:0c:af:e7:a7:bc:dc:9a:a1:f9:9f:c9:
d9:13:0e:9f:94:0f:05:39:6c:2a:de:01:ce:1e:45:eb:8d:f9:
9e:e5:67:1c:b4:87:3e:c8:bf:63:9f:84:8a:72:6c:72:2d:19:
10:34:1d:f7:6b:e9:4b:11:ff:fa:18:94:4f:7e:04:c8:8f:04:
e4:49:af:89:97:86:cf:5a:62:20:8f:0b:d7:2f:da:05:04:08:
58:86:d9:fd:f5:12:f5:d5:0d:af:1b:72:b6:a2:54:75:de:24:
31:2e:f4:8b:4a:8c:1b:99:57:5c:5e:43:2c:d2:d4:6f:08:0f:
fa:5e:fd:11:da:2c:9a:b1:62:c1:ab:0d:dd:f2:64:3b:4f:65:
6a:22:a4:c2:97:7c:d1:7b:f9:7d:4f:93:cc:b4:1c:e8:c4:8b:
0e:fc:d9:5e:36:2f:36:9b:9e:08:77:c3:26:7d:c9:79:a0:27:
77:23:4d:3f:b7:79:8f:4e:54:64:ad:4b:91:1e:be:97:47:6b:
c0:b1:21:3d:de:4b:9b:93:59:cc:34:81:00:97:30:2a:c0:47:
ca:6b:b2:9d:4b:5c:93:ca:cb:6e:c7:33:94:aa:6d:51:86:de:
67:1c:4a:88:27:f6:2d:0f:54:95:2b:44:c5:ef:cb:2c:ea:69:
41:45:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:27 2026 by rpki-client