Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: TiAtVlje8FAhwLQAz82cqb10KVyuDd7Y3LJRGekrXEs=
Subject key identifier: 68:B0:B8:DF:EA:EE:EE:5E:6C:D8:A9:6F:87:5D:86:AF:64:3A:B4:03
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019D27048E137639AE99C3AD0DB3F3830F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: nGh3S++/83gGvn/DozKIMYMYC7USJioDg6xE/I/V9Eg=)
2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8e:13:76:39:ae:99:c3:ad:0d:b3:f3:83:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=68b0b8dfeaeeee5e6cd8a96f875d86af643ab403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:de:9f:bc:32:0b:c5:51:1a:97:27:c8:1b:
a8:5a:b7:1c:e2:1c:eb:93:f4:32:a1:3c:66:4d:85:
f1:ab:16:eb:c7:fc:fe:08:c3:04:fd:c7:85:78:d7:
cc:26:5d:93:b1:02:a9:6b:68:f4:21:41:08:9b:46:
b1:e1:66:2a:15:f3:d4:97:c7:09:62:40:d7:4d:6d:
ea:20:4b:5f:f1:6b:17:35:f4:97:6e:c0:cd:20:f3:
17:e9:c2:19:a7:b0:ec:32:82:69:b5:3b:7d:65:aa:
85:53:b0:4e:2d:7a:ce:0b:49:0a:fe:b0:08:66:bf:
fe:5d:7c:76:29:c6:67:76:36:b4:65:5a:f8:0c:a8:
72:06:7e:9c:3b:5d:eb:fb:20:10:a8:16:69:b0:e3:
f4:66:a2:83:67:40:71:0c:1a:d8:da:1b:6c:26:1b:
c0:e6:c6:16:2c:84:5a:52:af:82:f1:c3:dc:72:f1:
15:e2:eb:a6:ef:24:f6:1f:36:a6:a9:7a:42:93:57:
34:e1:3f:33:32:75:3a:b9:83:83:0f:9b:cd:8a:c1:
fc:fb:b2:16:8b:05:d1:fb:e4:67:ed:ad:13:16:ee:
fa:9a:84:6b:47:4b:13:88:f2:f2:8e:29:ce:fe:60:
78:be:d4:8c:ad:a0:99:5d:3a:e0:2a:4d:61:7d:75:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:B8:DF:EA:EE:EE:5E:6C:D8:A9:6F:87:5D:86:AF:64:3A:B4:03
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:7f:73:80:82:ac:47:f7:49:2d:d3:3a:0f:7d:41:ce:25:
db:9e:20:97:ca:d2:6a:7b:2d:9a:07:79:3d:cb:1b:73:1f:a0:
8a:c2:98:e0:3f:51:52:7c:65:a5:ad:d6:a0:f6:ef:3c:3a:1c:
60:8c:3c:6c:2f:99:ce:f8:a0:19:d5:25:fd:e4:59:96:7d:17:
62:0f:d7:8d:fc:4c:61:22:dc:86:5c:cb:96:4e:df:8b:13:33:
87:2b:6f:47:87:44:82:c4:3b:93:36:a2:03:4a:95:97:28:4f:
1d:7e:8d:0e:5a:76:73:f6:f8:1c:ba:e1:7f:4f:12:c4:eb:8b:
df:aa:1f:c8:a2:cf:9b:17:25:f4:2f:99:2f:e4:7b:61:be:19:
8c:22:64:1e:ed:6c:04:48:a6:16:92:2c:e3:5b:fd:e9:bb:aa:
c8:1d:cb:19:d7:fb:d8:34:d6:52:d3:54:d6:e1:17:3e:8a:0d:
1a:92:42:f0:78:78:0a:fe:04:12:64:a5:9e:bb:74:f5:0d:85:
2e:32:0e:22:63:41:31:f0:06:47:dd:ba:32:4f:f5:5d:b8:fc:
f6:8a:92:63:ef:8d:a3:6e:12:a9:79:01:01:4b:d3:15:f9:c8:
a9:3e:df:00:23:ee:e8:eb:6d:4a:1e:92:2b:43:f4:c9:55:6a:
88:a4:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:45 2026 by rpki-client