
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: UxzZtV3bGjU3UAxRU/xINQMo0XICezi93BUlnOanJ/c=
Subject key identifier: 26:81:6A:DC:61:C3:4A:14:6C:BE:51:4E:0C:3B:97:FF:5A:9A:B3:50
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019CAB343BE5E858BB6DF8E8875ECCDC81EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 05BC
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: U4CM+ZjST64I6dEmSG5gTVmy9Chw4br1ttlKwjchmbc=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:e5:e8:58:bb:6d:f8:e8:87:5e:cc:dc:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=26816adc61c34a146cbe514e0c3b97ff5a9ab350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:ed:fb:d1:09:cd:50:61:dd:ea:fb:c4:f1:
8f:50:3f:0c:a5:68:50:48:9d:fa:69:ea:65:79:fe:
30:81:3e:6a:4c:a4:a0:e4:19:e8:f3:92:ff:5e:af:
e6:fb:d3:65:dc:53:85:44:e9:ff:14:20:9b:fc:a6:
f1:03:a7:90:2c:6d:26:c0:28:f3:70:33:66:fc:4b:
3f:7c:3f:f6:6e:94:dc:32:ac:04:36:1f:f2:6a:30:
78:f1:6b:8b:46:d2:33:4e:4e:99:31:3b:2f:97:e2:
4d:29:63:d7:a3:9a:4c:70:5e:ab:73:1e:bb:d7:73:
77:1b:38:36:6d:07:7a:78:26:ff:69:1f:50:50:ad:
85:81:d8:bd:86:e8:61:92:39:83:7f:b6:58:0b:7c:
23:32:62:b0:a4:b6:20:30:67:71:70:84:b4:25:8b:
8b:3d:b8:84:95:da:a6:c5:af:c8:a4:ef:0c:69:23:
c0:31:95:7d:59:d5:84:1c:70:dd:64:0d:95:66:9e:
d7:c2:b1:4e:8b:e9:e3:8d:d1:32:b4:6a:35:af:7a:
d4:00:90:b7:79:44:5c:6f:2c:97:ed:d6:69:d2:39:
02:0e:32:0a:e4:01:dc:97:57:36:91:35:59:f2:ae:
e3:2a:f2:33:d0:70:43:36:ae:3d:09:ff:fc:dd:7f:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:6A:DC:61:C3:4A:14:6C:BE:51:4E:0C:3B:97:FF:5A:9A:B3:50
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:56:76:0a:a1:e7:ea:02:6a:fe:8a:e8:42:26:56:df:9f:99:
14:a1:4e:3b:6a:c0:15:7e:9b:3e:46:30:01:fe:33:9f:10:06:
cc:6a:b2:35:42:c5:29:33:61:1c:66:dd:9b:3d:62:22:02:bc:
13:1d:a1:56:5b:4f:2d:8e:bd:11:a0:8a:fe:f8:eb:db:56:b6:
c5:08:e7:8c:ac:b6:00:57:a0:36:4a:0d:bb:0b:c2:99:c4:e8:
d6:2e:66:b7:76:a6:63:bb:95:ca:9c:b6:46:b8:91:5b:7b:35:
4c:2e:49:79:9a:84:31:a7:c3:dd:a7:4f:6f:74:99:ba:7c:29:
b3:dd:e3:67:fd:f1:d4:ac:f1:3c:48:36:41:0a:94:60:09:95:
63:df:7a:88:4b:c9:c4:72:7e:b0:40:61:f7:3b:b8:ac:1d:e7:
e5:c9:97:68:de:55:e1:a5:a1:97:9d:a9:ef:87:62:3e:c2:cf:
cf:57:07:54:89:86:58:81:b2:00:dc:da:37:a6:a5:8b:86:f2:
21:69:2b:c7:3e:25:d0:81:42:b7:9a:40:22:61:98:f3:0c:a9:
cc:bf:0c:e4:b2:ab:62:0c:bb:c6:30:55:1a:32:37:72:4a:10:
62:6b:c8:e9:66:5c:1c:34:98:46:d7:49:99:d7:90:10:cc:79:
f4:5b:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:32 2026 by rpki-client