Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: nqYAEB2eTANuAASzJRH9MsRfMjQWGK+8NX7S27rtldY=
Subject key identifier: 09:78:B1:0F:C1:F8:9A:60:EB:15:F8:0B:63:85:54:66:F2:83:81:73
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019D28BBD29BB716FADA58A7201E886D9F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: 2sWQC1mFkrz7ddzOvc6VgyhXkexBYMNiScUch4eeuJM=)
3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d2:9b:b7:16:fa:da:58:a7:20:1e:88:6d:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=0978b10fc1f89a60eb15f80b63855466f2838173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:53:f7:d7:8c:33:cd:b7:5d:8a:1f:f8:26:7d:
2f:59:98:28:a9:df:1b:73:76:70:c2:a2:62:31:69:
95:6f:36:75:e8:ba:e5:ee:58:98:52:2a:a1:4a:b4:
5a:c3:63:dd:31:ea:84:16:6c:1f:9c:af:98:7e:a5:
c9:d8:02:10:98:d3:6b:16:33:f3:51:ae:15:7a:16:
6d:c6:3f:cf:71:fb:53:af:73:8b:97:e1:60:10:47:
68:df:98:bf:33:f5:de:c7:72:91:fe:ba:96:cb:5c:
5f:c6:39:8a:4b:ba:14:03:81:c6:05:10:9f:e6:1d:
0c:04:ea:78:7e:6f:cc:f5:49:56:a5:11:8d:8d:d5:
22:39:31:ce:7d:c3:22:14:da:16:69:88:61:ff:bf:
22:82:80:a1:f4:b3:54:a2:8e:34:f0:cc:10:d9:0f:
71:9f:bf:ed:2f:3e:4d:bd:53:7b:52:a5:51:42:86:
7f:c2:0a:52:d4:1e:b3:ec:4f:9f:5a:00:a0:50:bd:
f1:58:c0:9a:ba:fd:75:c2:aa:39:49:1f:27:9d:c5:
46:2e:62:13:5e:9d:3c:ee:f6:b7:7f:ac:ff:1f:14:
b4:8f:05:6a:83:b7:b6:4b:d5:87:17:7f:21:12:e7:
86:90:73:a9:56:72:04:94:a2:1c:7d:b1:0f:6f:69:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:B1:0F:C1:F8:9A:60:EB:15:F8:0B:63:85:54:66:F2:83:81:73
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:38:68:3c:d3:2f:41:15:a8:c6:71:0a:94:75:79:07:e2:25:
1f:b7:07:d4:3b:bc:09:5e:2b:22:f8:b4:8e:3f:ea:12:51:d4:
b1:da:8f:6c:1e:c6:f6:84:44:9f:da:2c:f6:8a:1f:58:4c:c6:
25:fb:17:a9:b0:26:19:ef:ea:a4:f1:f4:c9:7f:fe:2c:99:49:
b7:0e:c3:5a:ea:af:05:b5:4e:78:fe:54:bb:d4:b9:66:90:e1:
f6:17:af:c3:82:b0:02:81:5b:fd:90:84:af:81:f8:9b:15:a0:
dc:83:ae:5c:31:3d:1c:70:87:70:0e:d4:30:08:4a:10:60:82:
65:da:4e:c2:22:50:a2:05:ff:77:71:3f:35:7f:e8:d8:83:9d:
bc:67:6c:41:6e:3c:d9:b0:c7:98:6b:83:16:4f:8c:d7:eb:71:
69:fc:be:6d:ce:26:46:64:45:a9:38:9a:1d:01:14:3b:08:0a:
39:ac:24:14:de:22:f0:46:d0:28:bb:58:ae:12:03:3f:28:cf:
80:9d:48:56:9e:b2:97:0c:86:8c:27:4f:65:d1:6c:d3:ae:dd:
e7:5c:60:32:de:76:d1:4e:de:e3:5d:35:3e:47:f1:d3:0b:b3:
9b:36:65:7f:97:4c:ae:3b:23:57:71:9b:aa:5f:b3:d3:82:ab:
f3:48:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:12 2026 by rpki-client