Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: P8G2nDtcV4AHNIVXNk0SjEBwwaqGxyK/DCqjS985t+8=
Subject key identifier: A1:92:F1:EA:9A:96:6D:AC:A4:C3:29:20:49:D6:4F:08:F3:3C:72:6C
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019CA9EA808B9AFF48D8282CD802464F7457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:00:43 +0000
Manifest this update: Sun 01 Mar 2026 15:00:43 +0000
Manifest next update: Mon 02 Mar 2026 15:00:43 +0000
Files and hashes: 1: 4sUUJ2plPGrlHgJqJEpnOT8db0k.roa (hash: 9TkCWduhIaGb7gCxKXssPcvjYmu7Zi+zWKigf1ePUnI=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: J0aQQ6jVNwWyrgPl0pujG6fzalmbquug+WkITFaeZxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:80:8b:9a:ff:48:d8:28:2c:d8:02:46:4f:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Mar 1 15:00:43 2026 GMT
Not After : Mar 2 15:00:43 2026 GMT
Subject: CN=a192f1ea9a966daca4c3292049d64f08f33c726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:e1:8e:2b:26:2e:30:06:00:df:ad:3b:db:
4c:96:9b:82:24:61:49:ce:1c:65:ae:36:c7:82:a4:
4f:8f:94:5d:65:6b:aa:24:30:fb:70:f7:93:7f:a6:
fe:9b:e5:f6:cb:46:65:fb:0a:6f:68:a9:a7:91:ae:
27:2b:9b:c0:76:4b:a6:bb:e8:fb:e6:b8:e7:5a:55:
1d:35:08:05:52:6a:94:37:5b:a3:09:56:16:41:76:
28:7d:a7:c7:76:bb:93:5b:9a:1d:62:7b:b3:61:62:
04:cf:e8:67:0c:84:dc:08:c6:7a:0a:c4:a2:df:dc:
ea:d9:6a:65:e5:8a:eb:1e:04:61:9a:79:a9:c0:a9:
5f:31:a9:ba:89:55:d9:bf:f3:2a:68:69:4e:08:53:
a3:ad:ec:f6:e5:f9:ac:cb:57:70:32:f6:b0:a5:02:
31:c9:d2:13:99:fb:2d:a3:40:e1:69:cf:01:0c:66:
fe:4c:a6:6d:2d:86:9c:9e:d0:98:ee:5a:cd:35:a6:
40:2d:72:92:63:9d:fc:6c:84:87:d8:80:6c:f6:6c:
ca:4c:1d:80:d5:ba:ca:04:13:04:da:e1:fd:2e:c1:
56:16:2c:95:1a:bc:de:ca:53:fa:40:dd:02:6d:c6:
d8:ad:8b:47:29:6e:b9:1e:b7:0c:eb:37:a6:87:d6:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:92:F1:EA:9A:96:6D:AC:A4:C3:29:20:49:D6:4F:08:F3:3C:72:6C
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:f9:72:ca:3b:80:fc:81:6e:a3:1f:1a:f0:c9:5a:9b:4d:
5b:e2:f2:e2:44:45:5b:06:5c:7e:46:8d:b1:b0:05:37:7d:cc:
b4:ec:47:3e:7d:ef:0d:7b:c5:a1:a8:24:09:b5:20:6a:65:d8:
f3:68:7e:4a:21:fc:05:b8:37:c9:f9:c2:54:f2:2e:c4:ef:96:
3e:95:bc:24:78:21:df:fb:3f:d1:f3:c7:a5:dd:df:96:07:fb:
6f:46:77:43:95:60:f6:3f:0e:34:c5:50:e8:69:a1:ac:8d:bb:
41:59:9d:82:eb:f8:39:af:d5:7b:22:80:66:bf:51:e3:a7:d0:
39:02:72:9d:de:7b:19:32:d0:3e:07:81:e9:f0:55:0a:bb:88:
6f:54:e6:d8:70:09:95:8b:5b:2d:bc:e5:83:0c:f0:e0:fc:fd:
bd:97:5a:2d:0b:ca:7b:c4:ab:14:6f:27:f4:84:c2:2a:35:38:
93:e4:a0:c9:5a:45:65:d6:b2:bb:b3:b9:0e:b7:81:7b:00:c4:
a2:8a:10:b0:74:81:63:1f:66:62:45:cc:7c:56:68:7d:82:91:
9b:7e:5c:c0:64:d2:f1:36:73:27:32:76:5f:d4:2b:86:d8:06:
0a:3f:b0:04:9b:f4:c1:2b:77:4f:3b:52:07:ff:70:21:16:2f:
34:f2:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:37 2026 by rpki-client