
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: Qa4Vxn+KgWAiPjjF7+Aq6ZYJdLwAXo3mlqlWf+yOIdM=
Subject key identifier: 7C:6B:96:04:DF:71:DF:2A:53:17:99:BF:75:88:71:F2:69:85:C1:C9
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019D2695FBDFF39D6107D8867875B015591A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:56 +0000
Manifest this update: Wed 25 Mar 2026 20:00:56 +0000
Manifest next update: Thu 26 Mar 2026 20:00:56 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: nu4t3LGiemS5OvDZR9CCJkCAMCrn3M/KM7ZnvUW6aDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fb:df:f3:9d:61:07:d8:86:78:75:b0:15:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Mar 25 20:00:56 2026 GMT
Not After : Mar 26 20:00:56 2026 GMT
Subject: CN=7c6b9604df71df2a531799bf758871f26985c1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:ca:38:f4:76:b3:84:47:3e:14:31:95:f9:
07:ac:37:9b:33:42:e4:09:17:5b:67:96:74:00:44:
c8:f7:c0:40:4b:9c:00:dd:a7:92:56:61:2b:25:d7:
36:87:5c:9d:fa:18:36:89:71:ac:20:d9:7b:ed:0c:
ad:f7:0b:9c:f9:21:d3:a5:80:9a:82:df:7e:6d:8d:
e9:bc:7e:a6:a6:e5:d4:b0:4b:d7:e4:93:74:7f:be:
bc:05:60:48:30:50:99:0f:7f:29:34:be:49:5a:3c:
4c:25:25:a0:bc:f6:ea:14:0d:4d:4b:8d:4d:3f:0f:
a8:9c:08:34:66:38:0b:5e:b8:87:5b:78:53:9d:85:
c9:5e:8f:b1:0d:78:8a:c1:8d:a1:a2:57:30:9e:37:
2c:97:85:ba:ff:f8:31:d8:64:10:96:19:75:d7:58:
7f:7a:43:a5:e8:c3:79:82:10:59:2b:85:06:6c:30:
a8:ba:6a:f2:33:79:00:70:3b:60:16:6b:53:ef:b4:
ee:5c:0f:e1:af:d6:92:88:1c:26:4b:cf:48:a9:83:
80:23:fe:88:8b:72:26:86:26:3a:41:c8:4b:02:8b:
0f:14:31:16:2f:28:61:b8:59:d2:ce:da:63:92:6c:
8e:5b:00:9a:71:dd:95:45:b9:52:ba:b8:f8:a1:1c:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:96:04:DF:71:DF:2A:53:17:99:BF:75:88:71:F2:69:85:C1:C9
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:12:c5:2b:a6:4f:35:65:14:66:1f:8c:55:9f:0c:40:c6:a2:
f1:b0:e1:a9:0e:fe:c2:aa:19:da:0e:64:76:1c:96:b1:fb:bb:
14:25:07:58:80:2c:c8:1d:3c:20:a3:dd:4f:c0:01:e9:fc:55:
1a:ab:df:df:7d:fa:0f:86:39:3f:b3:f5:ac:0c:a4:c3:47:73:
12:42:35:cd:df:e4:53:54:d7:73:af:39:04:c3:e5:ff:0e:e8:
78:85:00:b5:86:de:9d:e9:be:a0:b6:61:93:ef:51:25:7f:0a:
6c:dd:66:60:94:ff:98:0e:a9:b8:65:56:2b:7a:0d:20:b4:8c:
cb:80:cc:32:c9:42:3f:a9:3e:c4:04:a0:78:84:81:72:12:77:
b2:df:c0:63:29:51:36:cf:e5:8b:63:91:42:9c:d8:ae:93:b3:
6c:b1:d5:43:2a:0c:25:5a:ec:de:85:1c:df:79:f2:6f:0e:a3:
6a:81:cd:26:0c:c4:f2:b2:33:76:fc:d3:bb:0f:63:75:8c:de:
4a:03:ce:3c:10:61:11:6d:41:54:5a:b6:85:4b:21:2c:ae:99:
e0:7d:9d:3d:b5:d3:fc:57:4c:f9:75:16:36:3f:71:1e:86:e8:
d0:1e:e4:7a:6e:2b:57:93:f7:29:65:02:a0:6c:4f:7b:3c:84:
62:a0:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:36 2026 by rpki-client