Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: st0s6mQ93xaop9tkJhC2b9rvITJ/LKCBgRksh+mkZ6g=
Subject key identifier: 10:D6:0F:C2:BF:6F:18:BE:E6:B2:00:9B:06:41:3B:C5:80:E6:B8:9F
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019CAB6B309C40DAA7C3CEC62E964A8E1612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: q67y0keMlvFG/+hT5I/zxdhbva0P+DkSLUIh/GS8VUQ=)
2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:30:9c:40:da:a7:c3:ce:c6:2e:96:4a:8e:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=10d60fc2bf6f18bee6b2009b06413bc580e6b89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:5c:a3:27:18:cb:f1:50:6b:5a:5f:5d:54:
12:87:61:d4:b4:d6:40:26:a8:4d:b4:b3:5c:bc:ea:
cf:77:ac:0b:37:3f:e8:fc:35:34:64:1f:98:27:b2:
dd:7e:77:0d:e0:3b:73:9e:bb:38:54:f8:c6:99:98:
3a:8f:fb:a8:34:9b:88:9a:d3:a3:ff:39:28:44:3d:
c9:45:eb:4a:97:82:a5:f3:bb:fc:75:ea:4b:3f:1e:
01:90:46:29:97:d9:5a:58:c4:1a:f9:c9:30:ee:80:
c1:c1:0f:cb:bf:d3:31:d2:7d:15:4d:a3:f0:0d:65:
ff:89:ca:16:a7:8d:f9:b2:1c:06:a0:4c:a5:cb:6c:
99:c6:ff:97:26:79:d9:7d:07:bf:e1:98:95:bf:aa:
a1:a8:82:70:30:51:15:58:34:61:a1:98:94:04:8b:
69:d8:73:e1:50:02:95:ae:a7:2e:ce:3e:86:08:01:
94:d0:0a:23:e9:8b:64:00:9e:e5:e9:01:b1:51:d4:
e3:07:d7:72:69:03:78:19:f8:9b:af:20:60:95:a7:
54:0c:98:3e:99:c3:43:61:bd:72:d9:3f:d8:35:6e:
75:5d:98:42:f6:2a:09:eb:eb:78:b9:4f:53:6a:5c:
f4:6d:bf:01:03:31:02:72:25:87:08:0c:a7:d7:1e:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:0F:C2:BF:6F:18:BE:E6:B2:00:9B:06:41:3B:C5:80:E6:B8:9F
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:26:c9:b7:67:3b:45:39:86:a1:8a:e3:1f:8f:2d:66:f9:
d9:e6:72:f0:d2:bf:90:c8:a6:9f:0c:85:d7:f6:c2:71:90:e4:
a3:43:01:eb:ef:09:2c:dd:76:7d:b0:da:fe:0e:2e:43:67:5a:
6f:5c:c3:fc:9e:24:48:06:9c:cf:9a:80:c5:dc:ae:c6:27:e2:
4e:a3:9c:4f:a9:22:8c:d2:db:02:50:82:f8:0e:93:94:27:32:
3b:43:ac:5c:b0:cb:0b:4a:96:12:07:13:7f:d8:3e:b9:41:87:
82:96:49:bd:ad:ab:6f:6a:39:02:1c:e4:e3:68:4c:3f:a7:65:
59:ec:18:7c:b8:90:0c:c5:15:1e:68:a6:78:cf:33:3f:42:1c:
33:9e:42:4f:1e:61:09:2a:be:b0:b9:dc:16:09:a4:ac:85:7a:
da:f0:c7:4c:48:aa:fc:ca:bf:e5:2b:a1:06:50:ed:dc:47:65:
cf:62:19:96:d5:b9:57:25:92:5a:65:cb:5b:7e:55:65:38:dd:
ed:61:a3:20:d3:55:5f:c5:56:d8:92:a1:5d:15:d9:5d:fa:73:
b8:c8:3c:d8:66:a0:41:c3:91:87:dc:46:bf:fc:5c:f8:ec:38:
cc:28:ef:1b:f4:83:bb:ec:10:79:2c:59:ae:57:95:a1:eb:59:
bc:2f:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:57 2026 by rpki-client