Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: Lf2+N+zPuLlenKX98A4sTzj/3fxJJLZxOtgs39lgTK8=
Subject key identifier: AE:ED:F5:8E:43:D3:0F:CD:D2:4C:36:95:1E:F5:BC:28:00:8E:1E:9A
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019D33ACBAED4055C193D19D8212CD95E770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 157C
Signing time: Sat 28 Mar 2026 09:00:50 +0000
Manifest this update: Sat 28 Mar 2026 09:00:50 +0000
Manifest next update: Sun 29 Mar 2026 09:00:50 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: So8VBNcdo5TxieR2EqnBnsIbvqM7UZqXkoXKmReciuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:ba:ed:40:55:c1:93:d1:9d:82:12:cd:95:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Mar 28 09:00:50 2026 GMT
Not After : Mar 29 09:00:50 2026 GMT
Subject: CN=aeedf58e43d30fcdd24c36951ef5bc28008e1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:73:aa:69:4c:b0:9a:ff:87:86:ea:86:09:
23:43:a8:27:ad:3f:4b:b6:9f:3f:ca:30:df:82:b8:
e3:95:db:81:62:42:7c:44:98:16:14:5f:67:cd:ec:
ce:bb:06:a0:99:15:63:a8:18:3b:82:cd:72:4e:48:
a3:a0:05:cf:c2:15:1b:8a:f5:a4:7a:ae:7e:83:fc:
b1:c1:15:12:99:da:44:48:50:fe:2b:ca:d8:4c:a2:
cc:a6:50:fc:de:00:d1:2a:49:85:a7:e2:7a:ab:eb:
20:a0:e4:58:6f:be:0c:fb:ef:05:81:bf:78:aa:5f:
a6:1d:e8:6d:10:a0:c9:3c:d7:c7:ba:a1:b0:82:ae:
f2:2c:60:b9:29:3b:63:bc:0c:95:d8:8b:96:b8:33:
c0:9d:bd:06:fd:76:a8:c6:8f:e1:09:ea:f4:5a:25:
3f:a2:ef:f8:a9:01:0e:be:12:61:ba:77:04:2c:8b:
55:e8:72:e0:7b:f1:d0:74:d7:0b:5f:c3:51:f3:f9:
e7:d3:f6:33:3d:b1:69:c4:6b:b8:df:ab:18:2b:73:
98:a5:6a:7a:60:ec:28:cd:ed:a3:60:f5:f8:f7:f4:
ac:c4:4c:58:6b:fd:c2:97:af:d6:2d:0b:18:1e:6e:
71:c0:b4:40:4b:3c:9f:36:96:12:00:21:f5:0f:ab:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:F5:8E:43:D3:0F:CD:D2:4C:36:95:1E:F5:BC:28:00:8E:1E:9A
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:12:07:87:4f:b7:1c:ca:e1:3a:47:a9:4b:35:6d:5a:b6:
57:c9:a2:d7:65:5f:2f:0e:8e:a6:39:9e:32:ad:ba:d8:e1:f4:
6a:d6:25:7a:39:05:e4:1a:b8:72:64:74:e1:7c:49:16:bc:4a:
1c:f2:0d:13:0a:6f:84:09:5d:d9:54:22:09:48:6c:bb:30:33:
c9:95:34:fa:34:e6:2f:02:97:a6:c7:7b:8b:6f:25:8e:7f:03:
50:91:bb:32:26:d2:d9:bf:c4:7e:73:9c:13:8f:ce:60:0e:57:
e5:ab:db:92:f9:e8:d6:2d:a7:8b:eb:ee:b5:f9:b3:7b:21:c6:
a0:52:73:f7:ad:e1:2f:da:a6:a4:48:e5:4c:ef:fc:17:0e:4d:
97:a4:13:07:89:33:3a:97:0d:86:b1:c1:5d:5a:51:a8:a3:d9:
fa:25:cf:f8:d1:19:8c:19:39:39:39:e2:b4:46:d8:85:e1:fc:
05:c3:37:9c:e7:66:cb:2f:fc:aa:1c:f5:80:67:cb:b2:83:bf:
d6:a4:92:c9:d4:c9:5e:d0:33:5c:b7:27:51:4f:7f:68:a5:b6:
0e:cd:52:92:2b:29:94:c6:ed:50:82:a1:7d:6d:8f:10:b9:af:
92:2f:9a:19:f4:4d:b6:de:f5:70:fc:69:cf:6d:59:20:d7:00:
ac:08:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:29 2026 by rpki-client