Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: vOGCzuqw9yU3SvyZ/RhLsMWwlfmdYFq0XfDXG20XYL8=
Subject key identifier: 68:53:E7:4C:26:F9:2A:43:9A:2B:D8:C7:2F:2C:B7:31:1B:19:BF:66
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019CAB3471B71B8C0ADCB8DBB49F7F257E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: R/1d7/V2AvUrt1dBnDRx+mMou3GMEjWir37tSve4RsA=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:71:b7:1b:8c:0a:dc:b8:db:b4:9f:7f:25:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=6853e74c26f92a439a2bd8c72f2cb7311b19bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:9b:46:8c:9a:f0:7e:07:66:1a:f0:3e:c0:
26:ac:22:a3:af:c3:68:f9:94:46:f3:af:e6:c1:d8:
6e:c9:6a:ce:7f:d2:30:0a:30:84:eb:22:ef:9b:32:
8c:c6:28:b0:60:53:be:25:57:cf:57:f0:f3:54:7c:
5f:2e:b2:bb:76:9e:b1:98:96:d6:84:c3:85:c0:85:
7c:c0:0b:6b:f9:80:f5:2c:f4:00:c5:be:ed:32:a3:
a9:61:2a:03:ef:15:4f:ca:5c:bd:8b:55:95:a5:2c:
62:3b:12:de:b9:24:d3:37:52:0e:5a:a7:32:52:f7:
6b:c6:b7:44:1c:74:1a:e2:ae:b2:f8:d8:68:33:c0:
3c:69:46:99:b4:4e:30:fb:5c:d7:1d:f8:cf:18:81:
73:9f:26:90:cb:07:bc:41:90:b5:ab:f8:b1:ce:12:
30:38:26:59:06:24:cf:8e:36:fa:a5:72:42:b6:af:
63:eb:f4:0c:92:55:26:38:92:6f:36:ce:50:86:0e:
75:8d:78:f0:4d:24:2b:21:99:38:83:4f:0c:5a:f5:
50:0c:c4:ca:30:80:7a:20:ef:b3:51:10:7b:2f:9d:
f2:fd:a6:74:d8:30:1f:e9:98:7d:49:36:a4:7a:d0:
eb:d6:a2:04:fc:d7:26:82:c0:d9:14:e6:16:7b:fc:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:E7:4C:26:F9:2A:43:9A:2B:D8:C7:2F:2C:B7:31:1B:19:BF:66
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ed:bd:cb:c2:ec:8b:93:3b:6f:3a:9e:6a:c3:a7:60:8d:29:
f9:b2:43:fa:34:e0:15:28:d7:1b:f9:25:ed:89:fc:b8:73:fe:
d7:dc:91:13:fd:b6:a0:20:1a:18:8c:86:07:69:2c:82:c2:68:
5b:67:b7:44:2a:71:9d:f1:16:d5:02:21:51:65:24:e4:92:62:
9e:45:34:4f:50:ee:78:45:a2:32:5e:ca:8c:ea:01:d1:cc:1b:
b4:76:54:58:55:ed:b8:f5:7b:f1:c2:e9:4b:7b:63:b0:7f:24:
54:52:71:2f:1c:88:e2:8a:15:25:0b:a9:e2:60:c5:cf:af:ed:
a2:25:1b:4e:d5:e0:66:ab:89:32:ac:01:b3:40:68:e9:82:2c:
b9:73:7e:4b:53:f3:46:2a:1e:46:33:0a:9d:f2:4c:e0:cc:bf:
0f:0d:6f:09:77:65:d0:24:51:54:9d:3e:f4:49:c4:fa:eb:34:
90:e6:2f:46:a2:2a:4d:cb:59:aa:6a:3f:6e:91:f6:9d:af:3f:
11:36:9b:b4:0f:2a:5e:53:7b:86:a0:43:f7:ef:59:89:70:66:
10:46:df:a4:80:61:a9:b1:2a:2c:6a:e6:77:ac:fd:7c:eb:02:
b5:b5:36:5c:a8:32:5b:dd:8e:37:16:87:b3:23:5d:f7:40:cc:
39:6e:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:58 2026 by rpki-client