Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: LMKtq8/LkQ9KlmdxL14g5aZELzHwYmUiwKEa5k8ptg0=
Subject key identifier: 18:7B:B9:DE:A3:D1:BE:4F:5B:06:2E:8B:D8:68:0B:A5:01:B7:B0:10
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 019CAD22D35FA359F463D3578EF0066E7911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 0322
Signing time: Mon 02 Mar 2026 06:01:06 +0000
Manifest this update: Mon 02 Mar 2026 06:01:06 +0000
Manifest next update: Tue 03 Mar 2026 06:01:06 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: IsThl/tC56Bp7PaC8kLU0LljCQtkbpCKPtM9Vuzm5GQ=)
2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d3:5f:a3:59:f4:63:d3:57:8e:f0:06:6e:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Mar 2 06:01:06 2026 GMT
Not After : Mar 3 06:01:06 2026 GMT
Subject: CN=187bb9dea3d1be4f5b062e8bd8680ba501b7b010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:c5:0b:e6:8b:e4:90:35:50:ef:db:cb:40:
e0:a2:67:83:21:bc:09:f3:b7:d0:80:f7:2c:aa:89:
60:71:15:d0:a7:9f:70:f8:d0:63:33:74:59:e6:9b:
fe:af:fd:28:7c:23:63:3c:d0:92:d2:f6:c6:82:5e:
24:39:d4:ca:68:87:43:52:e8:76:92:2d:ba:2a:08:
1f:9f:66:bd:f8:d7:d2:4b:bb:56:27:84:3d:a6:8c:
e4:50:5e:ec:d9:92:31:f6:3f:e5:2d:18:bb:4c:b0:
8f:95:4f:6d:58:44:1b:54:fb:8d:ad:4e:6c:49:e8:
29:55:59:48:31:28:5c:9f:f7:53:75:4a:c5:12:9f:
3d:e5:29:96:32:28:1c:2a:62:a3:a8:d9:b5:6b:45:
69:20:65:c5:4d:c4:ea:30:b1:b8:2c:76:e3:5b:36:
19:1d:1a:1d:31:dd:3a:05:fb:20:42:49:f8:4d:22:
ec:48:20:0e:65:bf:03:2a:75:10:a7:4a:9d:fd:ca:
9b:64:0e:fb:e0:ed:ef:ce:c7:d9:db:82:df:4c:2a:
d8:96:38:37:97:24:97:b1:7c:f7:00:8a:66:74:28:
e0:e1:a1:74:9c:ad:9b:45:ab:67:e5:d4:19:7d:bc:
e7:a2:4b:f9:1d:4c:00:81:3a:b7:ac:50:1d:fb:b6:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:B9:DE:A3:D1:BE:4F:5B:06:2E:8B:D8:68:0B:A5:01:B7:B0:10
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:33:eb:82:94:8c:56:8e:f4:2e:21:96:4b:35:2a:1a:d3:
e2:c5:03:77:ed:41:0d:37:62:11:71:bf:8e:40:8f:41:b6:4a:
ad:c3:0e:48:c6:8d:ca:83:9f:cf:75:39:e3:88:f7:d9:12:70:
7f:19:9b:2f:89:8c:69:48:0a:4e:89:fc:e0:94:1a:d6:75:4d:
d7:c6:3f:c8:37:0e:e3:8c:89:33:a4:c5:d2:a0:2e:7e:f5:be:
74:80:2a:f7:83:5f:9e:c9:10:c1:fb:39:06:a7:ce:51:e5:f0:
2f:25:14:f4:1b:13:3a:58:83:07:7c:18:1e:30:06:a0:88:fc:
62:c5:3e:03:82:0a:6e:93:ff:29:ee:5c:85:3c:f4:3c:ee:27:
98:fc:4c:e0:55:99:19:a1:21:fa:f9:ed:11:f1:43:41:74:75:
4b:8a:4c:c0:f4:75:36:5a:95:89:08:81:a1:9f:84:0a:a1:82:
90:13:04:ae:ce:81:81:fa:4d:10:1c:ba:27:d3:c9:b3:4f:50:
2d:f6:6e:d6:04:1c:7a:b0:30:c2:2c:ab:7f:75:d7:ea:f8:6e:
28:f1:44:83:2f:80:7f:ef:c4:a2:db:ae:66:f0:f5:75:e2:bf:
c0:94:72:f3:ad:27:42:52:a1:5a:1e:34:49:c0:1a:57:9f:78:
d9:fd:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:04 2026 by rpki-client