Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: t9R0xaSVLYtzg03BfJwG22mO1Xx3JCLynw2TtgTHPbQ=
Subject key identifier: DC:A9:88:0F:D7:D2:FA:1A:60:86:C9:7D:03:29:A8:6E:35:93:94:51
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 019CAAFD7EE21045C54A1776155B528B4874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0FE1
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: 7VEEcncJWd617kyIOwEvs30/vJUPzXLiegDoulTJYEk=)
2: zbGnMHvperUTVfkkQ2o3OIxLJb4.roa (hash: yA4AYsSS3JozPB6SQxRvVSqD1ZvucRznxAMaRPbA/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7e:e2:10:45:c5:4a:17:76:15:5b:52:8b:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=dca9880fd7d2fa1a6086c97d0329a86e35939451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:62:1b:06:79:f5:7e:f0:a8:20:ad:d8:5d:
75:0b:8d:c8:11:e4:35:01:a2:5a:c7:f4:18:d5:61:
01:9d:12:30:bd:e3:43:0b:47:8f:c7:1e:e4:c0:e5:
be:77:19:39:b2:f4:54:30:73:f7:4f:63:fc:dd:c0:
2e:75:1b:6d:bd:25:ec:c8:27:ba:55:46:c2:ba:2f:
a9:05:ae:35:15:cd:ba:97:81:3c:ec:f5:f4:a8:9f:
a5:dc:6d:99:0e:40:16:57:21:75:f6:2b:d7:55:d0:
f2:97:53:6a:12:f1:7a:a2:f7:d4:de:79:68:55:7e:
2c:b8:a2:7b:23:10:e7:83:6e:e0:4c:64:da:af:29:
21:e5:03:62:c9:cd:f8:ec:13:35:2a:2a:64:e5:17:
83:69:44:50:ec:6a:fa:f1:16:3e:37:e8:14:b6:85:
22:b0:ec:37:ab:f4:91:f3:16:3b:8b:2c:5b:45:97:
3a:7e:e5:b4:46:0a:a2:39:29:18:a9:e7:98:7a:98:
49:d7:66:8b:b9:eb:25:ac:87:19:e5:34:3d:9b:7d:
a4:9a:68:ca:95:c1:a8:a2:e6:e0:c6:c2:bd:6b:a7:
96:78:2e:72:a6:22:78:0d:e6:65:0c:cc:32:eb:d1:
f0:a8:60:0d:97:ac:7b:0b:d0:34:13:31:aa:59:79:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A9:88:0F:D7:D2:FA:1A:60:86:C9:7D:03:29:A8:6E:35:93:94:51
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:9a:74:6c:e8:a6:f3:35:c6:82:7d:51:15:2e:c1:b5:e2:
c6:0c:71:6f:b1:a0:a4:9f:31:75:10:30:e0:c5:00:ca:be:19:
70:5d:4b:ac:bf:12:10:62:38:f6:5c:4d:81:7a:c5:29:03:27:
1c:65:4f:4a:e9:46:03:fd:c4:95:36:e9:fc:b5:d9:6b:7d:56:
73:b0:59:ba:3c:18:02:8e:e3:28:0d:b4:5c:f4:f6:b0:c1:c3:
6b:82:07:ba:f3:da:22:6d:3e:5d:3b:fb:e5:fa:c7:5e:ad:b9:
45:c1:24:2c:ca:84:27:7d:b0:60:eb:4d:08:a9:da:e8:c0:1d:
0b:bd:3d:bb:ae:8f:e7:36:22:b8:f5:ce:0a:b4:82:f3:ae:06:
e1:94:93:19:3f:4f:07:49:8e:34:cd:dc:5f:5c:ba:5f:46:17:
ca:0f:4f:76:32:52:86:d1:27:09:13:0d:57:1d:ce:d4:8b:03:
cb:06:56:a8:bf:6d:f7:6f:70:dc:8f:d5:7b:aa:ec:f8:a0:6b:
3c:ec:56:78:ef:28:33:1c:56:4c:0d:6c:ce:94:c3:a5:ab:04:
17:69:bd:b6:20:3a:bc:b4:71:95:38:db:b2:57:4a:0f:92:e2:
81:d1:27:76:57:c5:c1:39:a5:0f:3d:cc:37:98:f8:b7:c5:12:
ef:30:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:31 2026 by rpki-client