Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: CmpTEzdBYk77auaWmuJkBJeZ+9O2XOY8/47v6kkqrIA=
Subject key identifier: C9:66:04:EC:13:C6:1C:DD:7D:01:81:3D:38:68:2E:8E:0C:E1:A5:E4
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019CAC7E54F23771D6932541E604392040E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:26 +0000
Manifest this update: Mon 02 Mar 2026 03:01:26 +0000
Manifest next update: Tue 03 Mar 2026 03:01:26 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: VQKrD0Sqlen4fvpy++EMnyoiP0hWJjjeKX3ns5KJIn4=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:54:f2:37:71:d6:93:25:41:e6:04:39:20:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Mar 2 03:01:26 2026 GMT
Not After : Mar 3 03:01:26 2026 GMT
Subject: CN=c96604ec13c61cdd7d01813d38682e8e0ce1a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:a8:fd:a4:8a:8b:4d:99:7d:20:3a:62:c1:
87:28:6b:1a:db:2e:ca:f0:59:b1:e6:98:f4:c4:b8:
51:6a:e5:9e:b7:a7:71:1a:d8:9e:f5:e8:0d:83:20:
fb:6c:54:d3:64:91:51:d1:f9:28:18:86:bc:46:5b:
7a:68:97:b6:c7:b7:12:cf:92:78:74:b4:a0:5d:28:
c3:24:57:ce:fd:c2:b0:1b:f0:40:34:e2:38:78:06:
ae:40:d6:3f:9e:72:ec:63:26:be:f8:06:fc:11:86:
54:27:9f:b0:53:f0:4d:9a:4c:66:a3:8d:34:08:ac:
f7:70:08:94:e1:ce:12:f6:ea:6c:c2:43:f9:9f:b2:
e9:dd:85:d0:60:fc:de:8f:e1:73:a7:44:b0:a1:7e:
ee:61:fb:b1:fe:b4:49:91:92:1a:31:d5:56:c9:59:
c1:a6:90:83:af:c8:98:a1:4a:34:d8:74:77:12:2c:
f1:60:a6:5c:93:11:30:8a:82:d0:f9:69:71:74:23:
f6:11:29:00:1d:5a:a4:4c:de:cc:33:13:7a:79:25:
fa:f8:ea:f5:64:ef:63:95:4c:5d:eb:5c:9b:ab:bd:
58:8a:15:e7:f3:14:c4:70:ab:7d:be:c4:25:64:31:
a4:17:80:5f:9d:98:d1:a9:36:ee:eb:66:e2:db:9b:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:04:EC:13:C6:1C:DD:7D:01:81:3D:38:68:2E:8E:0C:E1:A5:E4
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:57:cb:df:e7:be:5b:42:8c:f7:85:4b:30:03:40:2e:1b:
53:87:0f:f2:84:96:02:7b:10:03:e5:25:40:2a:4e:e9:de:b2:
10:9f:6c:08:4d:36:68:da:60:83:73:bd:11:b8:cf:c0:7b:f0:
0a:f2:1d:69:28:fd:04:fa:76:a2:ac:87:15:b9:40:a1:d2:66:
02:4f:3a:f0:58:d0:b6:0b:89:27:5d:8b:ef:ed:48:3f:bc:f8:
67:ab:e7:87:d7:a8:ba:de:11:c2:d9:bc:7c:c7:e0:88:a2:2a:
1c:f9:11:17:90:94:c5:f7:3f:e6:0d:62:86:77:95:ab:8a:92:
91:c7:23:69:22:d9:ab:b7:c6:27:6b:f5:c7:c4:a2:b9:da:5f:
4a:1e:2d:80:52:3a:04:3a:5c:84:50:0a:0e:ca:e5:f5:f8:cd:
7c:fe:f5:c8:f6:83:2c:ba:1e:31:3f:70:9e:f4:ce:b8:de:d1:
05:b5:a7:35:08:8b:bb:6f:fc:2e:31:a5:ff:2d:86:33:68:4e:
79:6d:a1:59:72:f3:46:26:cc:03:ce:89:6f:20:4d:cb:a3:ef:
f5:87:f8:dc:68:24:ea:6f:76:53:11:f9:c6:a3:ac:e5:0d:94:
3c:ed:43:03:02:67:5f:7c:97:fd:4e:f4:b5:f0:e4:4f:74:bc:
c9:1b:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:52 2026 by rpki-client