Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: E5NUTfmiJg0vgQGVg3VCuCxaM9PXLEW67YUnGQYgi+E=
Subject key identifier: 0C:37:49:63:14:F0:EF:EF:7B:44:59:1E:1F:40:6D:4A:00:28:DA:BF
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 019CAAFD6068302CD5845716CC362853DA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 17B6
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: mEz5LK9SJJtevPecdRAYRvh4YMUSyMCBdsA9tgKZVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:60:68:30:2c:d5:84:57:16:cc:36:28:53:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=0c37496314f0efef7b44591e1f406d4a0028dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:7d:9e:d8:7a:9d:16:a0:96:5e:e2:c6:5c:
4d:35:7b:1b:21:28:7e:87:70:4b:fd:64:83:4e:6d:
2f:5d:11:95:8f:14:c3:b1:f6:eb:ca:bf:e7:e1:a0:
0a:3e:c5:11:d8:4d:ff:37:95:91:c2:e3:dc:c5:88:
f5:88:45:4e:f3:cf:44:e0:76:46:32:fd:54:8e:66:
55:ac:3c:9b:e9:93:2b:26:c5:ad:28:a3:de:68:bc:
6a:05:a6:84:d5:5b:4c:4f:11:91:5d:11:15:fe:63:
0c:b4:12:9b:cb:a8:2b:02:c1:d7:70:02:ae:a9:ef:
ca:e2:1c:58:9c:52:20:f2:64:41:1d:3d:d4:9e:99:
db:7f:b4:54:ac:45:58:ce:e2:5d:e5:a6:df:1e:fe:
26:3d:9a:e3:5c:a9:ab:4f:35:f9:d4:c3:74:06:70:
ee:b8:d8:e8:93:0c:fb:6d:73:c6:32:c9:e5:ba:aa:
47:8b:12:8b:35:70:52:77:07:e1:cc:3a:2e:90:f8:
de:f5:5b:4c:58:05:13:7c:ec:b4:48:c8:07:e2:40:
fd:62:ae:51:9f:89:ad:0d:20:4a:28:93:92:f9:c7:
ee:2c:f6:74:55:fb:1f:cc:68:db:50:e2:00:12:9a:
f5:54:f6:d3:20:c4:2f:d9:60:ac:9c:24:8e:83:12:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:49:63:14:F0:EF:EF:7B:44:59:1E:1F:40:6D:4A:00:28:DA:BF
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:aa:60:5b:c2:46:80:57:df:f3:33:3c:de:7b:fb:d2:57:9e:
c4:7b:98:7c:6f:6b:8f:28:2e:f3:d5:d7:b4:4c:92:9e:08:3c:
02:f6:ff:a5:6a:ca:6d:a2:78:57:7f:1c:a7:69:d0:ed:eb:fc:
b2:35:6e:22:ae:02:ca:01:6a:88:7d:03:34:dd:d8:04:96:88:
41:df:67:8c:d2:72:8e:35:c5:a3:e0:ea:d5:f9:44:8b:da:3e:
bb:42:ac:2e:06:7a:b6:de:ae:32:8d:b7:0f:70:33:3b:b6:86:
4d:a7:50:a4:56:d4:77:46:f3:33:1f:36:08:f8:37:33:4b:c5:
4f:93:3d:e9:a2:86:7a:75:2b:e1:63:81:c3:f6:dd:4e:3c:d8:
3a:9d:71:8d:a7:46:71:18:56:a5:b1:00:35:f0:6e:4d:66:ff:
5e:db:28:03:db:5a:1a:38:62:81:4e:ab:e7:45:73:00:67:7d:
33:96:bb:d3:f7:bb:69:e5:c5:56:fb:6a:8a:50:e9:28:5b:de:
a2:2e:21:bb:97:8d:aa:a1:4f:b5:78:77:3a:ac:ea:21:41:5e:
15:ec:3d:38:97:2e:d2:15:ca:1e:d4:4c:ec:e5:5c:8f:96:e0:
98:1b:a3:7b:ef:53:00:a9:c8:c4:4b:fa:42:a5:79:40:8a:58:
7f:54:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:34 2026 by rpki-client