Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: DjN5gCtH/ZYBNRcWTM30c68qMlnFMXT8c3UWcd4cDKk=
Subject key identifier: 66:94:69:C6:9B:4D:5E:A0:0E:30:DA:E5:36:FE:CB:0D:92:F4:5D:94
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019CAC1002EACD03F2A19BF1DA52E23D0603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 05A8
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: 30nTy9Zgslal5+rExGr18kJFrfmCNTXLOAHx3s3vDtE=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:02:ea:cd:03:f2:a1:9b:f1:da:52:e2:3d:06:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=669469c69b4d5ea00e30dae536fecb0d92f45d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:0d:2d:6c:19:be:3f:ab:ba:38:9b:07:fb:
22:8f:30:41:33:9d:1f:95:d5:c5:86:e9:5a:a6:5d:
0d:0e:f6:b4:43:12:45:d7:fe:40:fc:93:aa:f1:82:
06:9e:b7:96:05:f9:c7:90:62:41:47:b3:da:85:9a:
7f:29:43:9d:7f:bc:7e:d0:a9:3b:8b:17:99:7a:85:
69:1c:df:b2:af:90:19:f0:c4:9c:fd:8f:c0:db:49:
4f:6f:c8:49:aa:af:a9:99:da:f7:41:67:31:4f:75:
14:e6:28:19:a8:30:66:46:5e:f9:cf:99:7d:b2:04:
25:a9:bb:a3:0a:35:0a:4e:3a:d4:cc:cc:0a:78:89:
45:9c:fb:d8:f0:51:9a:14:1a:63:34:38:5d:f7:32:
a3:57:b0:46:35:c1:2c:23:da:b4:80:cf:b8:83:1b:
62:e8:a3:a2:6d:aa:a7:e9:39:a9:47:8b:a3:70:ff:
58:09:d8:69:17:d2:41:ed:d3:92:2e:74:ab:79:06:
1b:f7:fc:c5:67:cd:5b:d4:7a:2f:c1:30:df:36:09:
fd:7f:f6:3b:8b:ff:98:88:6d:4c:d3:4a:6c:83:d1:
d6:b2:64:67:b6:89:bb:2e:7c:e7:30:9b:49:3c:80:
4c:0a:2b:41:04:99:99:2c:7b:ea:6a:13:3b:ba:50:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:94:69:C6:9B:4D:5E:A0:0E:30:DA:E5:36:FE:CB:0D:92:F4:5D:94
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:09:82:9f:2b:85:37:a2:d1:48:dc:8d:9d:8d:cd:4a:c3:
e4:94:da:d0:51:76:3e:9d:75:18:67:1b:72:c5:93:ab:9b:37:
e6:6a:c4:08:5d:38:69:1f:3c:a6:05:42:e6:f4:37:f4:27:42:
c9:c3:cc:45:b3:00:92:a9:ab:32:77:c5:c3:84:44:ad:60:ae:
a7:39:d8:53:48:33:bb:a1:6c:92:1f:8b:b2:69:8f:f2:b5:c9:
e6:ac:7b:e2:64:16:0d:7e:fb:ea:ce:c9:dd:20:f0:e3:24:c6:
bc:7e:04:63:d1:1c:5d:68:45:88:9a:60:18:ed:14:6d:85:5e:
0d:94:94:e0:42:11:95:ad:e1:ef:90:f8:be:a5:aa:97:19:c7:
80:21:c5:e0:be:3c:54:66:33:84:e6:26:ba:d3:31:f9:39:8c:
b8:41:75:26:c7:ba:df:5e:10:25:cb:a6:d1:f2:7f:8f:21:4b:
ef:71:fd:66:42:52:87:f1:78:e8:66:79:91:31:af:32:f8:5d:
9b:09:97:be:8e:80:56:7e:97:23:df:88:90:b7:34:53:6c:d9:
41:2f:ee:a5:3e:77:d4:ef:48:2e:8d:61:9d:7e:35:ee:87:05:
0e:08:23:ba:a1:dd:fe:f2:d2:f5:a9:7a:67:a8:41:9d:2c:05:
12:7c:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:09 2026 by rpki-client