Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: aE/LF+H84RpJjyiTcNExRuiW/TGltOqCW/z3oim87Zc=
Subject key identifier: 9F:A8:83:F1:3B:61:D7:9F:F9:70:5D:C4:66:F6:F2:6C:44:A5:65:8A
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019CAD90AA00E7040CDAE0D5CEB5A3296C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 029D
Signing time: Mon 02 Mar 2026 08:01:04 +0000
Manifest this update: Mon 02 Mar 2026 08:01:04 +0000
Manifest next update: Tue 03 Mar 2026 08:01:04 +0000
Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: E3YfYmu5omXPqbsw/shZWtjom2/TjMT160fey/pjaUc=)
5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:aa:00:e7:04:0c:da:e0:d5:ce:b5:a3:29:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Mar 2 08:01:04 2026 GMT
Not After : Mar 3 08:01:04 2026 GMT
Subject: CN=9fa883f13b61d79ff9705dc466f6f26c44a5658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:00:2f:57:fd:45:9f:23:aa:4d:d6:f4:0b:
44:5c:ff:64:10:53:03:f1:8c:a8:6a:7a:8f:84:7f:
c0:c7:6a:14:6c:bb:54:0a:17:48:92:18:51:2d:9d:
44:eb:8c:1d:2d:50:85:49:8b:e0:20:b2:54:11:40:
c0:f9:42:36:50:02:4c:01:63:4f:74:fe:22:9b:4c:
8b:02:ba:97:1e:f4:a3:9b:ed:96:3b:75:2e:28:ef:
84:bf:b9:7b:e6:49:8f:9b:44:a6:0e:e1:dd:9d:0d:
77:0b:02:c4:30:1a:69:20:83:5d:4f:29:8d:fb:91:
35:89:87:10:aa:4b:da:4e:83:26:a4:53:88:a8:6d:
aa:30:be:d0:1b:84:d0:0b:64:88:7f:16:e9:ce:ee:
f0:31:d6:c8:5c:9e:07:49:28:2e:92:06:94:22:0f:
1c:b6:b0:7a:5c:0e:69:c2:5d:ba:51:87:0f:71:d7:
00:a4:86:65:60:a7:a3:6c:b0:7d:13:ae:ce:8e:03:
81:4a:f2:1c:5c:50:25:32:14:b8:80:d4:82:70:a9:
8c:54:44:36:5f:7c:39:82:47:1d:9d:ba:08:57:1b:
f4:07:d4:d9:05:08:f4:82:a3:e9:1a:a4:d0:00:d4:
39:21:e7:4e:b1:40:05:0b:8e:36:d0:9d:16:50:e6:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:83:F1:3B:61:D7:9F:F9:70:5D:C4:66:F6:F2:6C:44:A5:65:8A
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:a2:00:0c:1d:19:5a:28:8d:5f:39:bb:09:d4:a6:d1:7e:
78:ef:81:bc:40:2d:21:05:0e:1d:4b:cf:7c:93:f4:46:59:cd:
ac:03:c0:5e:f9:85:8b:5d:d9:65:1f:c5:0c:9c:ab:f9:67:31:
7e:66:e6:c5:12:94:fe:57:b3:bc:57:a7:f9:fa:c9:ff:4d:15:
21:f7:3b:62:00:1d:ac:d1:6a:1e:55:6e:8c:0d:15:3c:7f:a3:
fe:f3:6a:02:64:e8:2a:f3:84:8d:1d:8b:be:1a:f0:75:5d:4f:
f5:bf:fc:a9:bf:86:9f:01:24:4c:d8:db:b4:25:66:e7:91:b6:
a4:13:d1:7c:12:a5:20:ad:bf:ef:8b:11:0d:b8:34:e5:39:85:
4c:b1:8b:9a:a1:f1:d0:2d:ed:af:3b:de:1c:e4:86:f2:1b:18:
c3:7a:e9:6f:43:7f:34:99:9d:69:e5:23:f3:10:8c:4a:22:80:
d1:0e:1a:89:c3:45:7e:63:c0:ba:fd:c7:54:85:78:45:79:00:
d3:94:5b:8f:16:33:a2:01:76:73:38:39:01:c8:eb:2b:a8:b5:
57:94:0c:eb:6e:8b:d1:38:18:f9:2f:f7:2f:83:da:63:c6:d1:
70:56:a1:2b:c6:8b:b0:98:88:50:86:3a:65:ce:e1:45:d6:9e:
64:11:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:23 2026 by rpki-client