Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: rHaDNwOjnA6eR1qD++TrmUfFm3fubFKkbiRXNQSL2fQ=
Subject key identifier: 13:67:AE:D9:F7:F0:A2:41:6B:D2:38:54:B0:49:F8:9B:F3:7A:E5:A0
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019D28F30D75829A17DC36F62F454B723E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0C1B
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: I2W9+GwRyEgrzdAxSYEYPRj9y8sJNg3XY3LM3jmOPI8=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0d:75:82:9a:17:dc:36:f6:2f:45:4b:72:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=1367aed9f7f0a2416bd23854b049f89bf37ae5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:4c:0f:c6:ca:d9:e7:24:cc:30:72:e2:54:
29:0f:83:a3:a3:31:74:45:a2:6f:04:f3:f9:68:17:
50:3d:be:c1:75:81:65:0b:5e:27:18:78:4e:3a:df:
79:ed:32:af:99:da:61:64:29:cf:bc:a9:42:68:0a:
e2:80:02:91:1f:69:e1:2a:c1:ef:69:95:c6:b2:04:
bc:fc:17:2f:9f:fa:4c:9c:03:a9:ef:01:3f:56:c7:
05:3e:8a:ba:f8:2f:ba:05:9c:af:76:7a:13:42:f2:
00:a8:1a:e0:ec:0d:fd:d4:e0:47:62:4e:df:a8:3a:
59:55:50:ae:6a:e6:13:0d:11:19:39:fa:f2:b2:a7:
3b:ca:84:a6:48:a9:6e:17:d5:6d:13:b8:c6:1d:3f:
79:b0:f7:e9:88:f4:30:46:9e:00:54:1c:31:98:39:
76:e4:9a:e0:89:62:6e:85:3c:48:59:46:26:e1:3b:
d1:aa:70:b2:1c:22:80:80:99:a2:8c:e7:ba:94:e1:
e7:eb:9f:16:d3:c2:46:fb:7b:2f:6e:d0:4e:5c:1b:
5e:09:e9:b9:de:b2:5a:57:a3:f1:66:90:be:4f:4d:
cb:0d:12:a4:c7:4b:f3:a8:93:6f:c6:33:65:3b:6b:
9f:70:81:30:fa:54:78:fc:9c:6d:70:18:06:d6:b4:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:AE:D9:F7:F0:A2:41:6B:D2:38:54:B0:49:F8:9B:F3:7A:E5:A0
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:f6:93:11:a3:27:7a:32:b3:c0:e6:f0:9c:70:80:a4:f6:
7a:cd:5b:ca:52:96:09:15:11:b6:99:23:1c:2b:35:28:2f:f9:
f5:c2:9d:b9:ea:05:cf:4b:63:bf:a0:9c:88:41:36:8c:2f:5c:
de:54:d7:89:52:be:af:7a:be:51:7c:a2:ca:9f:56:16:e7:c7:
85:ff:a8:53:e0:95:8d:ea:30:13:ac:19:7e:06:d6:38:23:98:
0c:a5:9a:6c:56:eb:e9:84:da:53:f4:ac:ea:30:66:68:65:d8:
00:f7:78:1b:bd:c5:8f:80:59:96:26:f2:e3:a5:1f:4f:33:d1:
c2:61:ba:11:3d:9f:93:6b:0e:05:92:b8:d3:b2:4e:7f:fc:b4:
ca:ed:5e:0c:c1:2f:d3:c1:ea:e1:87:a1:67:0b:66:3f:9f:69:
21:a3:a2:f2:d0:f0:a2:da:6c:c1:22:bb:59:2c:21:df:3a:40:
08:2e:94:77:fd:5c:ed:8d:5c:2d:ec:0b:2c:d3:8a:33:55:52:
96:c3:e3:a3:a5:9c:a4:8a:83:22:58:99:6e:40:13:16:db:15:
cb:d6:a7:70:3d:09:6a:e7:87:49:9a:5a:5c:f2:fe:0c:7a:f7:
db:e6:c1:ab:86:d5:52:37:8f:f3:a9:98:ac:ec:df:68:bf:e5:
7f:c7:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:22 2026 by rpki-client