Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: FkkiNng0VtAd1486q2oeCC804Td0EOLpvBXS2GY6IiU=
Subject key identifier: 09:86:A9:92:D1:37:EC:E5:19:21:CA:DF:F2:75:E0:D7:C2:3E:E5:8B
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 019CAA5901A84DF6AC22C871AEFC4BBD7BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 0A2C
Signing time: Sun 01 Mar 2026 17:01:25 +0000
Manifest this update: Sun 01 Mar 2026 17:01:25 +0000
Manifest next update: Mon 02 Mar 2026 17:01:25 +0000
Files and hashes: 1: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: l+4qD99gNf91Rcvp9izHHUYpCd/I1oLxG04wCB7bxIE=)
2: uQBI9CCKkaQ15QLDKCoXQ9CMr50.roa (hash: 2DCBMNVSZ9VX6UXs8yIhflCej68SIec+3/kzpBsnYa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:01:a8:4d:f6:ac:22:c8:71:ae:fc:4b:bd:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Mar 1 17:01:25 2026 GMT
Not After : Mar 2 17:01:25 2026 GMT
Subject: CN=0986a992d137ece51921cadff275e0d7c23ee58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:a5:54:44:75:49:b8:1d:5f:3a:68:cc:65:
3f:65:14:86:62:d6:e0:ad:be:8d:e3:2a:fd:ff:f4:
8a:23:68:d1:e2:8e:a8:cc:24:1f:aa:e5:c3:90:da:
9e:80:fc:91:43:66:08:8a:77:f7:a1:02:7b:76:e6:
6e:44:34:f0:80:2f:01:0c:cc:2b:87:ec:4b:83:01:
8e:ca:81:4b:a5:9f:41:d5:80:9a:d7:28:04:a4:b0:
c6:54:a4:72:d5:61:be:8b:d5:2a:73:00:eb:34:f5:
f7:80:35:23:4c:38:a8:32:bc:a4:81:f9:79:48:c1:
58:40:62:3c:d6:81:95:8d:1a:79:0b:d3:55:31:c8:
16:1c:21:2e:cd:45:ab:41:fc:f6:7b:47:b6:f0:e7:
56:83:71:d0:7d:5d:c5:01:1f:58:f6:6e:77:25:01:
b8:a5:f6:0b:57:24:42:d5:39:25:d2:79:a4:11:21:
9c:25:87:3c:f4:96:96:48:73:c9:cc:7d:5e:34:f5:
07:0a:9e:44:e8:e2:bb:a0:0c:f1:e2:66:61:b3:96:
77:ba:6e:05:42:01:31:25:ca:d6:8a:63:20:f7:db:
b3:42:20:ea:a4:14:32:9c:4e:90:f3:f8:fc:57:6c:
7a:f4:f1:8c:09:eb:43:48:b9:c2:6a:ce:4d:1e:06:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:A9:92:D1:37:EC:E5:19:21:CA:DF:F2:75:E0:D7:C2:3E:E5:8B
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5e:fe:21:e4:ba:54:3b:b9:aa:3a:e8:7f:97:c2:54:4a:3f:
6d:76:7b:7f:c6:b8:fe:bc:df:d7:3f:19:ac:38:ed:af:6b:3f:
d1:11:6d:e7:33:b5:fa:87:92:9f:72:ff:3c:44:67:4a:fd:8b:
ad:f0:64:4e:19:0f:1d:23:f6:ab:48:df:9b:d2:ac:ce:68:cd:
3a:ca:de:92:60:95:25:e6:48:9b:2c:ec:c4:70:15:d5:e5:52:
11:4e:19:28:30:f7:f9:25:38:be:ab:f0:1b:a2:78:ae:d2:97:
93:43:b7:64:26:fc:0d:ec:96:cd:06:8a:2f:8b:02:f7:02:14:
c2:92:b3:73:fb:91:c0:66:33:49:c8:a1:8d:7d:5b:a4:93:d8:
4e:ba:13:5f:60:74:cb:55:b7:5d:c9:8f:c9:07:58:89:98:0f:
0b:0f:99:1f:4a:12:91:2e:c5:60:4a:af:78:d3:92:7e:00:3b:
da:2c:9e:75:7a:ba:a0:e7:c2:b7:d1:2d:ff:fe:ab:ac:92:6a:
3b:21:d3:8e:a1:92:39:bd:45:ab:72:d1:72:2a:d1:86:6b:43:
45:04:a9:cd:c2:e1:6a:3c:4b:65:be:32:5e:50:7d:cd:5e:c3:
b1:80:c7:fa:68:fb:1b:36:1d:c3:69:78:1c:c7:27:b4:d8:79:
11:bc:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:14:35 2026 by rpki-client