Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: XEWJH/h7O9MjPGKxcCFl0s3DGoJx/StG7E5mJOzhBpQ=
Subject key identifier: E0:71:FA:5C:BD:5C:44:17:6C:E3:F7:6A:32:27:BE:73:AC:65:B2:15
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019CABA25F7679EDFF7BC1BE2EB934D30216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0C85
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: QI6mx8rrfx1hcaRd4CKcgsJWeDcJO09vGefgKS4aJ4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5f:76:79:ed:ff:7b:c1:be:2e:b9:34:d3:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=e071fa5cbd5c44176ce3f76a3227be73ac65b215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:9e:28:fb:09:51:90:b6:db:bd:22:60:f4:
bd:5a:1e:00:05:55:97:28:1b:98:16:6e:d9:b5:d2:
03:40:b6:f2:7a:f0:be:de:f6:97:2b:d7:1f:16:d6:
89:71:97:8b:63:e6:7c:a2:ce:9b:76:f9:88:2e:f0:
de:10:5c:63:83:a5:18:06:43:dc:0c:80:bc:1f:f3:
b9:22:d5:a5:eb:b3:9b:6c:49:bf:2f:47:c0:3f:a0:
cb:f1:5f:a3:82:38:74:b5:65:2b:ca:06:65:a5:01:
57:8a:2b:8d:ca:50:46:25:9f:c9:90:b5:bc:71:a3:
1e:4f:61:26:57:e0:2d:3f:a7:1a:1e:19:3c:b5:87:
41:3e:ed:5f:54:36:a8:b7:38:0b:6b:55:f3:f4:29:
c1:67:ef:1d:84:6c:67:56:88:06:d1:a9:9b:f6:78:
ea:59:8d:36:5b:92:9f:55:1b:1e:2f:81:3b:08:10:
90:88:31:07:f8:84:63:eb:02:2e:12:bf:d4:a9:5a:
17:7a:6a:5e:e3:eb:19:b1:15:93:9b:5d:ad:7c:d1:
a5:22:e3:b6:cb:ee:79:57:2b:03:f4:42:2c:97:52:
a6:bb:8c:a0:26:f6:7e:db:75:5c:05:b1:d2:f3:52:
f2:a5:1e:40:63:7c:51:db:81:ed:6a:c9:2e:18:f6:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:FA:5C:BD:5C:44:17:6C:E3:F7:6A:32:27:BE:73:AC:65:B2:15
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:41:49:24:e8:30:44:22:b6:2a:d0:e5:ab:67:e5:aa:07:
83:5f:cc:7e:f4:4c:2e:67:fc:99:79:4c:51:88:b3:a2:79:30:
f8:ae:18:3f:23:05:61:3a:57:1e:cf:7d:81:6a:f3:cb:53:f0:
5e:a1:89:b9:c1:99:41:74:85:ba:e2:99:1d:01:b2:de:fb:e8:
6b:c3:62:be:9c:73:56:d5:b5:f9:03:2e:d0:79:58:56:1f:0e:
eb:ad:f3:57:a1:e2:d8:30:7b:6c:4e:05:a5:90:34:e1:9b:c7:
9b:0e:5e:0b:cd:9a:ee:78:01:2b:f6:9c:19:a7:67:c0:dd:7b:
ed:49:cd:a0:30:fa:9e:85:c1:af:c9:8d:b3:d5:e4:51:4f:57:
65:b8:31:9d:99:9b:a3:ac:ed:87:78:3e:ae:c6:17:14:2b:d3:
ce:82:1c:40:90:d9:b8:f5:e7:31:88:91:1e:2f:55:81:cc:b4:
e8:1d:8d:7d:7a:91:f1:e9:f9:8b:be:eb:c5:fc:75:56:f8:55:
5f:90:49:ba:27:5b:a2:4e:8c:e9:6f:98:f0:50:1c:a2:69:a3:
86:fa:44:d3:11:4c:43:c6:79:4c:30:73:0b:56:6a:33:2c:ac:
51:8a:91:2c:e9:e4:6b:c9:b5:09:78:53:8d:12:b1:bf:d2:ab:
8c:ce:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:05 2026 by rpki-client