Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File: Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier: VbwQ7pZxHcxiGLOQNSkRiNmkYfch/zevhX4S7cnzw+Q=
Subject key identifier: FC:C2:3C:D2:BD:F9:94:41:7F:9C:A9:F0:D1:B6:C5:13:08:7B:BD:19
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial: 019CAE6C14E226EA5C46F14A675A0BF5C1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number: 0CDC
Signing time: Mon 02 Mar 2026 12:00:44 +0000
Manifest this update: Mon 02 Mar 2026 12:00:44 +0000
Manifest next update: Tue 03 Mar 2026 12:00:44 +0000
Files and hashes: 1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: +DsanjkQ13KNOwVAKVA2WiVca3bALcE/OLiD7pEoAaU=)
2: vGbYlgAHGuxAtkX_gF1BeSRqyBw.roa (hash: AoXRDljrLO0qQScHnB2yMCrZvRd/l+376wR7c+Uavms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:14:e2:26:ea:5c:46:f1:4a:67:5a:0b:f5:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Validity
Not Before: Mar 2 12:00:44 2026 GMT
Not After : Mar 3 12:00:44 2026 GMT
Subject: CN=fcc23cd2bdf994417f9ca9f0d1b6c513087bbd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:30:86:72:c6:9f:74:86:88:d2:2e:5a:83:
4f:9f:43:6e:7d:8a:c0:4f:f6:88:c7:30:85:b2:c5:
0f:4a:35:93:1c:cc:48:e4:4c:9b:2c:a9:89:51:5d:
fe:46:d2:c9:ee:46:15:2b:a1:6f:17:7c:92:ea:25:
b3:79:e3:50:12:34:97:ff:92:90:46:1c:b0:f1:60:
61:a1:ae:b8:77:64:31:1c:84:dd:f6:1b:10:c5:6b:
98:ab:15:19:a6:a1:10:f0:f6:41:b0:e1:51:a6:62:
51:57:8e:55:2f:b7:b6:2f:33:8c:0e:aa:44:23:cb:
81:ef:b8:6d:b0:be:a9:b7:21:ea:70:c1:69:a1:1d:
4c:f4:c9:d3:38:61:60:4b:db:ae:00:c5:0a:9a:13:
16:24:9c:0d:9d:50:7a:5c:74:3d:16:a6:0f:d2:8c:
c0:14:c2:ac:fa:90:76:d0:d6:56:d6:f9:cd:e5:99:
58:10:27:29:c1:60:38:a1:b9:6a:37:c2:56:3c:71:
07:02:0d:d1:f5:52:42:d6:12:c6:30:ec:f3:0c:cc:
fe:f1:f7:88:93:ad:ef:81:84:0f:74:ab:b8:9b:a9:
2d:17:99:38:4d:f2:d2:80:77:ad:5f:2e:4f:1f:96:
81:9c:89:59:95:a5:5d:27:e7:12:a5:d9:6a:57:83:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:3C:D2:BD:F9:94:41:7F:9C:A9:F0:D1:B6:C5:13:08:7B:BD:19
X509v3 Authority Key Identifier:
keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:57:6a:d7:5c:06:bf:f1:3e:af:90:b8:6c:3d:d6:d0:f4:c6:
c5:a2:3b:e4:ce:5f:e1:ed:f1:25:b2:cb:c3:ae:a4:0a:c3:4a:
32:ff:00:ad:a6:ca:37:c1:88:b7:89:e2:70:8b:ea:af:0f:eb:
b3:8a:e0:c8:08:c5:a7:04:d5:7d:e8:5e:eb:45:07:08:53:79:
eb:f4:a5:e3:30:9c:25:03:07:f7:6d:4c:09:b2:c2:72:ba:40:
94:d5:cc:fe:ed:ad:e6:f8:3d:5e:10:00:1b:3d:1e:85:41:93:
d5:4a:1f:95:4f:96:ef:91:9b:7d:0d:44:2a:36:1d:cf:bd:59:
da:3b:8c:b9:97:77:1b:e2:e1:68:c5:b9:1f:a6:aa:9c:bc:6b:
f2:a8:92:eb:d9:0c:21:6a:2f:f5:a3:23:43:b4:2a:7d:1c:21:
98:a3:47:fa:e1:77:72:9d:28:02:46:d5:31:69:f2:15:29:f2:
f2:32:b9:af:3e:83:fd:90:63:a9:96:2f:51:99:77:50:f6:f2:
31:2e:43:81:bf:5a:47:02:8f:5e:01:26:8b:9d:60:5c:0f:3d:
22:37:3c:d6:e3:8e:31:27:e0:b5:f3:1b:70:35:8f:f1:99:94:
02:71:54:dd:df:39:b1:d0:d2:88:f9:8a:0d:60:f2:72:23:31:
92:81:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:16 2026 by rpki-client