Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: lMxwmYgAcpgfKOV8pU9xgH97KzugqJwGZcIs/uF6mNc=
Subject key identifier: 94:62:0A:51:39:AD:7C:8D:E7:38:58:B6:32:77:0A:A3:6C:C5:9B:CB
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019CABA211EFC082DDBBAA384801C89BC505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: _4gEdkIozsQL-TWVwZR3ioaNfxk.roa (hash: ofd30ZN0wNQTf8/vD9ThRnfPhfJvZujQAS6qzYzazNg=)
2: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: ua4ZM2YXBSRPNDLdF91ZdxXI7LUlM/fSuz3EyCVtc4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:11:ef:c0:82:dd:bb:aa:38:48:01:c8:9b:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=94620a5139ad7c8de73858b632770aa36cc59bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:31:09:61:70:82:f6:9d:8d:c1:08:cf:e7:
21:cd:eb:54:cb:f6:89:1e:8c:46:17:a5:02:f9:a7:
fb:0e:01:31:43:3b:bf:96:fd:16:4f:a7:93:ef:8f:
e0:ea:9d:21:05:78:28:78:14:2a:10:dd:78:3d:f3:
e6:0b:30:82:73:b8:59:3d:fb:cc:cc:79:2b:5a:37:
a6:f9:f4:d6:a8:1c:c3:7e:a8:8c:3e:17:b2:08:c2:
3e:03:8e:65:98:b5:2e:b0:4d:e1:0c:ad:09:56:fa:
e3:c6:04:9d:89:73:cc:dc:3f:e6:b8:fd:39:f6:d1:
83:f1:39:3b:41:d2:ee:21:b3:b2:33:33:9a:c8:63:
26:cb:8a:4b:5d:4e:37:7c:aa:45:2b:4a:9f:91:46:
70:6e:8e:1f:92:62:bf:6e:57:06:ab:6c:80:2c:20:
57:70:60:8f:60:d8:d3:e7:79:85:26:3b:d9:d8:7b:
93:8f:3f:f4:d0:ea:32:3a:65:e7:47:86:51:73:a2:
f0:fb:28:cf:e3:6d:b5:3a:c9:cc:f6:35:f0:fb:d4:
de:60:43:8a:f3:c3:25:0b:2d:95:ae:0c:62:f8:75:
9f:35:5b:94:2f:1d:b6:6c:07:40:1e:5c:a2:38:f0:
6a:23:35:90:54:a9:0c:4d:ce:8c:ca:90:63:18:ed:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:0A:51:39:AD:7C:8D:E7:38:58:B6:32:77:0A:A3:6C:C5:9B:CB
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:11:99:3f:1b:02:6c:d6:d2:d2:fc:63:9f:fa:bd:fc:bf:e2:
ae:0b:13:96:cd:50:75:c5:4d:6a:eb:5d:62:d9:9b:28:bc:19:
c4:8f:c4:61:ef:95:26:cd:04:5a:de:8b:0f:f7:1a:ad:3f:47:
f7:8f:5a:4f:de:64:df:fe:da:79:f9:2c:ef:1f:79:8a:e1:0e:
27:ae:ad:20:22:0e:f6:5d:bc:7d:68:6e:09:1b:b3:bc:15:83:
93:29:4d:df:4a:9f:0e:eb:c8:d4:24:f8:f0:18:7e:65:e0:74:
b1:f5:ed:de:ab:20:f9:52:1a:92:13:6f:7b:22:ce:0f:72:be:
42:7e:d2:7a:02:7f:93:26:76:65:77:1b:42:35:bf:19:23:6a:
64:23:ad:9c:c1:6b:55:7e:f6:8e:ff:55:09:44:7c:93:3d:ef:
24:f1:b3:48:46:0f:16:41:dc:5d:1b:06:1e:09:e9:7e:9d:c8:
e4:ef:7d:f8:f9:5b:e5:84:33:2b:e1:8e:54:dd:6c:be:5e:f5:
5c:81:42:02:89:2e:1e:3c:eb:08:75:96:90:88:5d:61:f5:1d:
5b:e9:c3:7b:fb:35:9b:13:70:31:9a:f1:79:b3:51:58:9c:32:
c8:c5:2e:cf:f1:ff:d1:d6:fa:f2:57:1d:a8:35:b0:60:2f:ad:
d9:13:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:57 2026 by rpki-client