Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: 3+FRGAOgDO9YW4dUg+PPh3Ve3y01R91ytG5qQ9uZdkM=
Subject key identifier: 1C:D8:11:58:2D:61:E3:01:10:73:19:F3:CE:9A:50:EA:CD:5A:57:60
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019D2A727AF7CE79CAAEAAD2361FAC55CD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: qji+uOJi+/T82FozFqwbjkkAB3dFWMP8apXHrGSwNXE=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7a:f7:ce:79:ca:ae:aa:d2:36:1f:ac:55:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=1cd811582d61e301107319f3ce9a50eacd5a5760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:40:30:f4:1f:23:0d:57:c3:0d:c8:47:62:
26:4e:25:0b:90:89:bf:8a:eb:40:1a:ab:30:bb:cc:
44:50:d2:39:b1:6c:1c:3d:ba:87:9a:a5:c3:78:05:
a7:b3:1d:cb:70:42:39:dd:51:e4:1a:ae:4a:86:6c:
5b:cc:16:0e:db:9c:fc:35:ec:fa:87:a1:ee:46:10:
4b:76:9e:64:d9:69:34:97:0e:71:0e:38:61:fb:da:
49:3f:f8:f5:6d:ed:ea:3d:ba:1f:ef:85:3e:d6:e0:
0b:e7:2a:c2:42:06:d1:99:ac:b7:ab:48:c6:87:9e:
41:bc:79:99:d7:51:ce:3a:8b:37:d1:b5:31:46:4f:
84:79:23:78:89:c4:14:d9:b4:46:2a:fb:b4:c1:9e:
cc:05:17:a0:b1:d2:b0:70:cb:47:56:16:64:e5:2f:
92:23:5e:5e:7a:9c:6f:95:e9:32:08:cd:e4:e9:01:
7d:21:44:85:c4:60:6c:f7:ef:33:99:9f:1a:1e:42:
af:d6:bc:1d:e7:89:fb:18:2e:7a:b0:8d:09:56:f8:
70:20:0e:7c:22:fe:91:d9:58:14:e1:b1:19:a0:e4:
08:3e:d7:66:10:90:1a:e2:53:22:14:39:cc:42:6a:
f0:45:02:84:7a:0c:3b:f5:1b:ea:a0:3a:12:b8:9f:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:11:58:2D:61:E3:01:10:73:19:F3:CE:9A:50:EA:CD:5A:57:60
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:14:83:cb:ba:61:88:48:f7:14:2b:f0:00:eb:23:8a:7b:
8a:df:72:d6:cc:ed:c9:92:c2:e0:df:b6:81:b8:fc:ba:16:18:
1b:d7:43:33:f6:f7:8b:aa:3d:6e:47:d5:fe:56:9b:f0:5f:86:
7a:8c:a9:1e:cd:f2:84:46:a6:1e:44:0c:3d:89:c5:1b:09:94:
7f:e8:95:39:96:0c:f2:5c:5b:4a:73:c4:ef:dd:33:52:03:3a:
8e:5e:05:d8:fd:cc:0d:90:fa:82:8c:be:58:78:21:51:0e:38:
f9:3b:5c:8f:98:dd:49:b2:23:74:0a:bc:05:6d:48:f5:cb:0d:
0f:dc:bd:ad:f4:e3:e9:fb:25:8d:4e:5c:d3:b4:c2:1d:c8:45:
a2:a5:8b:57:6d:a1:82:2c:f4:75:70:66:e0:32:5c:53:a4:2d:
49:2c:d6:dc:2b:5c:27:74:d1:03:88:a7:0f:b1:79:ce:73:3d:
c6:7a:18:7f:36:85:87:96:a5:d2:4b:7e:77:12:54:7a:8f:c5:
3b:fe:dc:d6:d9:24:c8:e2:44:ce:3b:22:43:7e:08:3a:1e:27:
13:45:a3:71:1e:fe:cb:de:62:dd:3d:e1:08:34:3a:b1:82:f7:
20:fe:f8:17:90:c1:89:79:e2:c3:94:97:26:32:a4:52:22:b8:
af:16:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:40 2026 by rpki-client