Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: 06vui0DRZ/ipNRd6rNxwlX2kzWh3IvTg9LwQBMK3zdE=
Subject key identifier: 94:C4:67:8D:17:47:62:28:A6:00:0A:C9:85:F0:84:8C:4C:6A:05:45
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019CA7FCB48DC4261CFC785D85E7F8AEADC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0839
Signing time: Sun 01 Mar 2026 06:01:22 +0000
Manifest this update: Sun 01 Mar 2026 06:01:22 +0000
Manifest next update: Mon 02 Mar 2026 06:01:22 +0000
Files and hashes: 1: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (hash: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs=)
2: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
3: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: ocQIeAwkzlDsFX194D9OxdYdfWdMdII61nmkddSDmU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:b4:8d:c4:26:1c:fc:78:5d:85:e7:f8:ae:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Mar 1 06:01:22 2026 GMT
Not After : Mar 2 06:01:22 2026 GMT
Subject: CN=94c4678d17476228a6000ac985f0848c4c6a0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:01:df:7a:d6:31:a2:7a:6a:22:c5:17:1b:
07:fe:36:5d:9a:cf:8f:29:9e:c6:60:ed:02:72:a9:
3e:9b:7a:95:a6:38:39:e0:6b:94:c4:58:59:14:69:
e8:48:c7:c0:1b:20:72:2c:80:ec:ae:ea:7d:1b:3a:
36:68:4b:2b:97:8b:ff:70:52:93:b5:e2:f1:c9:9b:
d5:05:b3:10:90:07:0d:45:1d:c8:a6:c4:de:ac:1f:
03:99:8d:72:19:21:07:71:05:79:a8:fb:e7:d2:07:
f3:e2:b0:e2:fb:a1:bc:2e:d7:e8:d7:c8:aa:a7:18:
2a:85:63:43:2a:68:ef:8d:f1:b8:9c:c3:e6:6f:e7:
e3:98:90:df:0c:38:d5:1c:28:0d:e0:fa:2e:46:c8:
01:be:41:61:a1:c2:59:0d:31:a2:9d:e0:8b:a0:f9:
2e:ee:cd:ee:87:10:99:f9:13:b7:12:69:30:ce:ce:
d9:db:58:07:f3:bb:bc:d5:6c:00:11:d3:62:d1:8d:
c8:39:2d:62:7d:9a:fe:49:c6:43:fb:c9:5f:b8:e5:
ad:a9:97:5b:fd:be:dd:a8:be:b6:14:a2:e1:9d:79:
c6:90:01:24:6a:9a:88:75:f0:54:2b:78:c6:30:fb:
eb:de:3c:c3:62:95:25:64:0c:35:40:bb:5b:fa:9f:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:67:8D:17:47:62:28:A6:00:0A:C9:85:F0:84:8C:4C:6A:05:45
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:31:ba:3d:29:d1:c4:76:a2:82:ab:a6:3c:ec:ae:2d:48:
86:23:fb:cb:6a:ca:3a:6f:63:63:29:ee:09:44:db:44:45:b9:
21:da:22:8d:3c:36:fe:00:ac:a9:d0:7d:46:f4:15:eb:52:b1:
b9:18:c7:ae:6e:71:31:97:e7:de:24:c7:79:ca:32:95:1e:a5:
49:5b:24:bd:ff:6c:a3:00:b7:7c:3e:06:e3:b2:a9:0a:b2:e0:
cc:74:70:e7:58:c5:cd:c3:1e:aa:e0:c9:61:43:65:cc:6f:fd:
65:f7:7b:9e:d0:8a:dc:60:cb:0c:60:0a:5e:69:a1:2d:de:09:
c1:94:49:60:3c:e8:7a:b4:d3:2f:1e:b3:0b:b9:22:9a:ec:75:
72:5b:03:91:2c:0e:88:34:af:31:e7:ca:fa:64:bf:f1:66:62:
86:35:00:dc:91:f2:ce:c8:c4:00:32:ce:4c:79:71:c0:21:aa:
f8:5c:d6:9e:41:58:39:e1:7e:b8:2a:02:92:29:ea:6a:b8:1a:
1b:95:e6:39:c9:9c:03:a2:3b:da:c2:8a:8c:f6:9d:3f:f0:cc:
58:b4:11:e3:1b:23:6e:02:9e:7c:67:88:72:1c:e2:11:6d:0b:
b9:ee:dc:59:ad:f8:4e:0f:52:20:b3:9c:07:f4:0f:22:8b:1a:
f9:5e:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:27 2026 by rpki-client