Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: EgquzP3bKYCLW5Q2gYsjdZO9NQYflWYWjKQk5T5P0Dg=
Subject key identifier: 81:04:25:49:32:DA:2E:B5:44:A6:7C:E6:99:20:88:86:77:57:E9:BE
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019CAA58BBF513509F48FA160D59CF5E31C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: Lijg31/emR9mzafpCdL4B213H4V5G5Uz/1XEKLF+Dpc=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:f5:13:50:9f:48:fa:16:0d:59:cf:5e:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=8104254932da2eb544a67ce6992088867757e9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:3b:f3:ac:45:a3:fb:c7:bc:b5:fa:04:13:
7c:b1:46:8d:5b:69:cf:d1:cb:fb:e8:af:dc:4e:60:
b4:ae:eb:0c:4f:bd:d2:5c:d7:77:7d:5a:68:54:6e:
ba:60:71:15:e7:73:0c:92:92:4a:e1:27:6c:cf:e3:
03:52:e7:9f:ce:6d:e5:30:ea:09:6b:51:7e:fa:8f:
b3:06:24:88:08:8c:c6:ed:21:43:3f:7f:ad:ec:96:
85:4e:9e:fa:fb:dc:9b:70:54:25:91:a3:70:42:fe:
60:c3:62:dd:2d:7c:ac:c4:ca:6f:6d:24:63:6c:63:
af:75:59:d0:95:d3:18:0e:e2:fe:a9:e1:02:da:e0:
7f:73:c1:32:85:01:84:ed:ca:79:82:cc:1a:3a:37:
f4:5c:c2:94:ad:18:e5:50:45:86:c7:b3:6b:54:4c:
12:9e:a1:a6:40:b2:18:90:7c:08:79:cf:a0:75:47:
f0:6e:07:05:3b:48:1e:fc:bc:c0:40:55:d1:65:a3:
f8:7d:b9:5c:93:f3:6b:7e:4f:85:42:bf:7e:00:51:
0f:d9:a3:e8:99:17:14:09:06:2d:19:4b:36:1a:cf:
4f:ce:7f:8b:c8:b3:ca:fb:20:85:76:b6:dd:dc:dd:
87:24:bb:9d:f7:db:10:29:ba:54:82:da:df:76:d0:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:25:49:32:DA:2E:B5:44:A6:7C:E6:99:20:88:86:77:57:E9:BE
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:00:d8:52:de:c4:ac:5f:8a:18:66:ac:08:47:66:89:40:af:
f5:dc:5e:66:6d:be:42:52:6d:e2:f4:0f:c1:0c:42:0c:e3:6f:
ca:10:5b:28:9e:b6:b2:c9:6e:ce:8f:95:1d:e6:b8:92:44:e4:
52:1f:c5:82:f2:f4:fb:12:0b:87:3d:11:c7:47:fd:ab:c6:14:
b0:10:a0:1e:33:7d:d7:48:73:b8:b9:89:ad:16:bd:7d:fb:2d:
fa:fa:72:84:9e:d2:13:a3:90:89:02:3b:33:e7:69:75:f4:5f:
a3:e1:68:23:50:cc:51:5b:04:94:01:d8:f6:61:70:21:38:9c:
d8:b4:f6:4a:4e:d9:d8:1c:8b:d0:e3:93:33:5c:b3:60:0d:1b:
ea:f3:89:19:f7:aa:83:d9:58:18:b8:40:f0:d4:85:84:24:2d:
3d:96:3a:f0:4f:42:40:07:50:7e:e1:9b:18:ce:4e:01:d3:ed:
43:0f:f1:70:ee:69:ce:29:76:16:69:bd:cb:ac:91:d6:90:54:
24:aa:df:1c:a7:0c:24:67:d9:59:28:f2:2e:6a:63:52:b9:18:
6b:70:30:fd:90:74:91:1a:9e:5a:e8:74:d6:4a:16:4d:88:57:
95:e4:ea:75:44:a8:a4:59:99:60:09:a5:7f:4e:a8:98:23:8e:
a1:6d:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:19 2026 by rpki-client