Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: QYCXZfh/h/uHRpJbaXOvAWdSeIbV1wZ7pF1zcwLIHuQ=
Subject key identifier: B7:F0:51:75:86:C9:3E:B9:F1:B3:77:FE:E9:B7:AD:DF:50:9A:F7:4F
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019CACEBF930A81FE083F07646354D3491E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 05:01:11 +0000
Manifest this update: Mon 02 Mar 2026 05:01:11 +0000
Manifest next update: Tue 03 Mar 2026 05:01:11 +0000
Files and hashes: 1: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: MKHzpOfcXKtfKGggNoqLyQJUAoIzbMdjfPbGETEXiTA=)
2: kghyh_nxdTf25rPoKF6M0zemjIY.roa (hash: ngurKcfdQu5xMulMoMEszSDNjnNbW5VunkobEE1hVdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f9:30:a8:1f:e0:83:f0:76:46:35:4d:34:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Mar 2 05:01:11 2026 GMT
Not After : Mar 3 05:01:11 2026 GMT
Subject: CN=b7f0517586c93eb9f1b377fee9b7addf509af74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:16:0f:fb:bc:17:b8:5c:0e:65:69:7e:87:
35:17:58:88:c2:94:70:0b:7e:57:b4:59:5e:3b:e3:
9c:70:77:fc:78:cf:b4:9a:b7:a6:41:3c:67:1a:b6:
82:10:d9:4e:b8:ae:1a:29:c9:cd:de:58:cd:c5:a7:
33:81:79:0a:13:f5:33:6b:05:ee:cd:b0:d2:ae:45:
41:2d:c3:bd:0d:f6:fe:85:ac:8e:8c:ff:2c:5c:62:
1e:c3:6e:98:03:5d:33:55:e3:77:61:5b:6c:96:6b:
ac:ec:1d:34:0b:5c:14:8b:1d:ae:60:55:84:bf:b0:
a8:31:04:b7:47:bc:34:78:b4:20:8c:c4:8c:8a:7a:
84:c7:6a:d1:a0:c9:98:73:be:54:56:b4:b5:e9:43:
05:ea:84:d7:c3:27:47:29:cd:99:f0:f8:0c:b5:b4:
d3:7e:bd:37:c5:a5:ab:01:c6:2c:fe:2f:f7:52:5d:
3e:9f:70:0f:c6:55:2a:61:17:15:a2:01:39:5f:21:
f6:f3:65:d8:2c:db:b9:72:d5:36:1e:2a:00:00:0c:
e3:1e:d5:c8:73:b3:f0:a9:ec:85:fc:44:66:18:70:
8d:e5:da:b3:b3:a1:e0:42:c9:8f:15:2b:e0:e0:1b:
8c:1a:0c:a8:df:0c:f6:90:96:33:6a:4f:f0:8f:93:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:51:75:86:C9:3E:B9:F1:B3:77:FE:E9:B7:AD:DF:50:9A:F7:4F
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:5a:53:6d:7c:46:5f:cc:d9:47:eb:d1:bf:fb:fe:a0:e4:
70:ab:4f:05:26:51:cb:a9:97:17:24:49:32:22:4e:46:84:f9:
78:2d:fd:d2:ff:89:19:3a:58:92:f1:a5:0d:a9:81:20:13:02:
3f:d0:4a:d5:83:5c:4c:6a:5d:12:97:30:35:3c:21:28:9e:a9:
e7:b7:29:01:59:0b:30:ff:62:48:2b:78:7d:f9:45:26:61:8f:
5e:99:e2:1a:35:b3:d2:c8:01:10:6e:71:18:1b:d2:2a:01:bf:
1b:48:4b:4b:ac:b2:d9:f9:4b:80:ea:03:05:53:1d:60:35:65:
75:be:16:c0:f6:d7:60:ac:08:57:f4:19:29:b0:57:10:ed:9b:
2b:39:c4:10:54:db:f5:39:71:40:8c:ca:32:e5:c5:2a:61:19:
b2:16:58:13:94:39:a2:1f:11:24:f6:fb:52:e7:25:a4:9a:00:
04:ab:62:8b:70:4e:e8:e3:fe:bb:0f:6c:dc:76:bf:8d:17:d5:
40:a6:d3:b3:c5:f0:14:f9:2c:f1:ee:ad:41:34:74:2d:79:8a:
f3:18:eb:39:71:7b:c7:dc:82:40:13:fe:9c:e9:50:7d:c1:f1:
78:7a:94:b4:6d:a4:4f:c4:6f:26:8f:f0:15:e3:e8:d0:6b:84:
fd:6c:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:20 2026 by rpki-client