Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: WmBcMcgusT9KVx8gMwUtCJy1WSWvrjWDrjO2CgcPWwM=
Subject key identifier: AC:B4:BC:08:7C:5E:DF:CA:5B:D9:FF:BE:A9:51:1F:92:4C:C8:D9:95
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 019CAC46F3425E4D414C812965BB23811DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 1663
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: PwQvETm7cRPxaiSCl5RIXoxMRHo.roa (hash: LgW22oFTQfKbq8qvGxkyVXGKtUsCBhBLz4XP/aisFIs=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: 52eTkjT9rnoWlYHGWULkbsKaVJXl/hR54BIQTPQgPvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f3:42:5e:4d:41:4c:81:29:65:bb:23:81:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=acb4bc087c5edfca5bd9ffbea9511f924cc8d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:6d:2a:6e:10:b3:69:cc:f9:8a:2f:e0:56:
6e:1e:7e:a6:21:7a:92:81:38:f9:b3:51:2c:81:0f:
fa:24:ab:40:37:24:5f:ed:9f:f7:48:59:55:1f:4d:
b4:11:c1:20:83:95:66:d6:35:3c:ba:89:c7:d2:4e:
6c:a8:df:fb:12:56:f3:f0:45:8a:6d:44:1d:7c:83:
5d:b5:bc:12:e0:a2:0c:a5:a6:49:bb:1d:15:6e:c7:
88:26:f4:9d:04:fa:9d:71:c5:a4:21:87:54:04:54:
f0:63:65:d4:25:45:00:69:ed:d1:05:ab:2b:a6:75:
8a:90:3e:a3:3c:71:e3:64:41:bd:50:c6:e9:50:ed:
7f:7a:f6:d8:4a:1b:4b:5b:21:34:da:81:d2:59:1b:
3c:c7:d0:56:ac:19:cc:cb:34:e4:e7:b9:45:14:49:
ed:66:30:a7:52:1c:89:2a:14:8e:61:3d:a1:a2:02:
40:dd:a1:19:52:ac:95:00:d3:04:94:6b:3e:ea:d0:
38:aa:b7:86:0a:1a:dc:3b:39:04:2b:2c:05:45:16:
f1:e3:37:6f:e2:a6:53:00:9e:47:72:2f:59:d1:cd:
cb:b3:a5:37:f4:f6:3c:ca:40:af:71:b1:e0:21:3d:
03:de:a4:97:8f:f8:64:ca:5a:3b:b8:01:45:aa:74:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:BC:08:7C:5E:DF:CA:5B:D9:FF:BE:A9:51:1F:92:4C:C8:D9:95
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a9:70:d4:a8:80:73:b3:7e:89:47:e9:6c:f1:95:53:50:2b:
62:d8:2d:f3:25:e0:2a:d9:99:45:23:7d:4d:76:7d:6c:3b:86:
c7:f8:17:fe:eb:73:7d:dd:79:07:06:1c:f2:fa:7b:e9:45:ff:
b8:e6:c0:a2:24:4e:90:98:eb:2b:ca:da:e2:f3:45:56:fc:74:
23:20:26:a0:bd:53:d4:8d:b1:fa:32:40:f0:42:e0:e2:8f:9d:
9c:96:16:30:18:5c:cb:43:da:0f:6a:de:c6:78:e4:8d:da:32:
aa:e1:d5:f4:2f:29:e0:e1:c9:d8:ce:62:6c:dd:f1:22:09:2f:
33:26:a9:0e:48:28:05:25:b6:91:d9:12:82:44:31:83:8b:9c:
62:d4:56:85:17:f3:11:fa:48:39:cb:c4:a3:fd:b9:01:c9:b4:
ea:5e:05:ad:2b:58:86:31:04:32:60:d6:db:7e:a4:06:92:4f:
ef:24:ab:37:e4:63:3d:d3:c6:4f:5d:21:14:47:3d:6c:8d:3a:
68:ea:39:9b:21:65:5e:4a:30:95:ce:c7:46:f2:3b:03:e5:1c:
41:2c:16:8b:87:6b:94:d2:2f:3c:ee:1a:59:5b:98:e2:1a:a4:
45:d4:d5:a3:5d:49:5c:01:af:1c:fe:6f:ae:4c:77:f6:37:f6:
8b:63:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:33 2026 by rpki-client