Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: HD+KDxovhtz6hDzlKmLnBL+2gjAJUMj09HgU6mHa8aM=
Subject key identifier: C5:86:46:D4:97:E6:E3:FE:2E:C2:89:76:28:1C:0C:01:7E:79:98:3D
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019D26CCAA5C461CD6A3A4E63E97A9B9ECA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 14A0
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: rSM2aArQz0KhVLfS/xLiLKtbxdhsXV9bncKWozE/1k4=)
7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:5c:46:1c:d6:a3:a4:e6:3e:97:a9:b9:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=c58646d497e6e3fe2ec28976281c0c017e79983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:00:81:00:96:2e:56:b8:f9:bf:0e:f1:17:
62:74:c5:b5:27:14:20:7f:74:4e:2c:09:cd:a0:4a:
3d:ba:3a:9e:97:26:87:28:ca:ff:1a:be:e6:6c:00:
4f:c3:2c:03:04:da:9f:61:06:a3:da:33:f7:07:d0:
bd:f1:f1:3c:14:da:59:78:8a:71:72:6a:03:79:0d:
ee:50:b8:31:de:75:2f:f1:85:e0:b2:e0:2a:d0:b6:
79:8c:4c:d8:42:6c:b5:77:44:f4:cb:32:b6:60:d6:
b8:c8:4c:b6:73:01:cf:50:9b:4c:04:9a:0c:29:c8:
6b:c0:25:ab:f3:a9:7d:15:4c:7e:36:34:63:d0:24:
60:86:32:b4:8b:15:a2:bb:e1:54:da:22:d8:95:0b:
bc:7b:6c:a6:1c:1a:b1:0d:90:b1:f0:10:07:88:6a:
d0:3e:03:52:40:48:f4:05:63:0b:86:6c:6a:cb:a8:
2c:5e:31:dd:cb:f8:d0:22:b0:3d:38:2e:c6:fa:3d:
48:6d:af:fa:33:c4:b7:70:26:7d:6b:ce:cb:21:44:
0f:ab:8c:1a:c6:71:30:65:2c:ba:07:00:34:d0:0b:
56:16:4f:59:d6:e2:9f:db:33:2b:a1:82:2a:58:f7:
43:aa:fa:d5:59:cc:67:f9:4d:43:0d:bb:82:0a:d7:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:46:D4:97:E6:E3:FE:2E:C2:89:76:28:1C:0C:01:7E:79:98:3D
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:d0:b9:9c:e5:d2:57:65:31:d5:f3:b5:3c:32:8f:fd:75:
dc:90:02:13:8a:cf:51:99:d8:3e:24:75:0b:4d:c0:bf:72:a9:
64:f3:d7:cb:10:84:3a:3b:ee:e1:fd:36:a3:3c:f4:ed:73:78:
f0:61:34:fd:fa:df:e9:39:eb:b0:0e:ea:d7:69:f7:3a:ff:08:
c1:98:7f:26:b8:dc:73:49:5f:0e:7b:8f:fd:6e:10:69:b3:09:
11:17:38:b6:c9:43:96:9e:92:cd:74:0a:35:86:31:4d:5e:f6:
b5:9b:a9:ce:e3:53:f6:d9:ac:6f:15:cc:99:f2:60:bb:28:f1:
8f:ed:6c:3d:a3:bd:4d:8d:2b:18:49:7c:39:87:ed:50:d4:cf:
62:10:7e:22:10:4a:12:9d:6c:b2:42:a1:aa:55:c1:f9:ae:d2:
9d:93:e9:37:ff:0f:a6:0f:bf:33:5e:c0:f7:57:49:d2:42:bf:
f8:cb:60:32:11:9e:f5:8e:15:ed:c0:e8:d7:ae:40:65:06:7d:
ab:4e:78:87:f2:ff:91:4b:3c:d5:8b:37:42:2c:26:05:e9:b2:
c1:ab:35:c2:e5:45:f8:c1:ea:d6:ca:3c:2a:94:77:8e:cb:0b:
a2:ff:b9:ec:ce:3c:8b:85:9f:5e:08:71:de:f7:bb:a2:a4:4d:
5d:ee:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client