Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
File: Sr9C0dMjaItaMnFsIpBIz5tKKco.mft (raw, json)
Hash identifier: WlqutR1KXIrYrA0o5oZ8sD7g73dO61uG55Cqg4GakdI=
Subject key identifier: 1B:43:24:00:0A:74:8D:FA:30:25:10:63:5A:A5:CE:DB:C3:BE:24:72
Authority key identifier: 4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA
Certificate issuer: /CN=4abf42d1d323688b5a32716c229048cf9b4a29ca
Certificate serial: 019D26CD414FB509CC2015EA9F94898E53D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: Sr9C0dMjaItaMnFsIpBIz5tKKco.crl (hash: GywJfBQoHhfRdBk5PG6SaAzHvOuVgcpqCsFd2y93LPc=)
2: pt6HomTbAoxaO1S0_vsB7Nj7-8E.roa (hash: UWZ5Wn1XW2WpHYmNUBiJ9UFuT5nRWCqGOKvCr/DsUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:41:4f:b5:09:cc:20:15:ea:9f:94:89:8e:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4abf42d1d323688b5a32716c229048cf9b4a29ca
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=1b4324000a748dfa302510635aa5cedbc3be2472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:3a:b5:d4:30:49:81:3a:06:f8:5a:9c:c5:
0c:c2:bd:df:15:da:42:ef:11:1e:69:4c:cf:fa:8c:
de:b1:05:78:52:e8:38:70:0d:a2:ab:1a:90:27:1f:
13:a6:54:c5:90:9d:e5:ed:5e:c1:29:63:43:d3:5f:
cf:f9:b0:cc:d4:f3:53:53:0c:b0:a6:74:ca:5d:d4:
a6:26:76:cc:ed:db:d5:55:b9:e6:52:30:d6:8f:f7:
a5:b5:52:cf:ab:0d:e0:3b:c8:e8:6f:02:c0:c0:ca:
a0:f4:40:9f:57:08:03:cc:23:7b:37:14:ec:26:9c:
bb:c0:d0:c7:f5:95:7f:d6:8a:44:f7:b4:2c:c3:3e:
b0:f2:e3:14:58:f1:56:1a:c1:42:10:be:d6:fe:85:
c9:9b:4d:80:08:e9:19:cb:ae:a2:c2:e6:ec:2a:f2:
be:98:2f:e7:0a:e6:b6:6e:58:cc:a0:95:3f:dc:02:
b7:9a:e9:83:2f:50:5b:f0:e0:49:ce:9a:ea:3d:ab:
df:49:23:3c:c0:53:b3:61:f0:13:0e:0a:cd:6a:47:
b7:9d:2c:93:2a:7a:ce:8f:7f:78:3b:08:97:53:fb:
18:84:fe:1b:42:53:f9:dd:d1:a5:97:22:f1:d7:cf:
2f:3a:15:3d:67:bb:8e:38:fd:a3:b3:c1:b4:0b:1b:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:24:00:0A:74:8D:FA:30:25:10:63:5A:A5:CE:DB:C3:BE:24:72
X509v3 Authority Key Identifier:
keyid:4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1a:b1:8b:27:d5:ec:fd:c7:c1:c0:07:7e:01:13:ea:80:1d:
51:34:f4:fa:68:a3:47:8e:5a:69:1c:f1:98:45:b3:e6:0d:f3:
bd:e9:39:79:5d:c7:f6:28:f7:a8:11:ad:fc:03:c1:23:a1:22:
de:c5:76:46:c4:d1:e6:2f:5b:94:1e:24:09:64:89:59:43:ff:
30:48:6a:fb:4e:4c:dd:cf:95:68:3c:d6:25:15:d6:c8:5d:c1:
b8:2a:3c:11:91:a7:37:c7:d3:5e:6a:57:57:a9:a5:fe:54:fd:
c8:50:08:54:f7:e6:fa:7d:2b:c5:27:46:b5:98:d0:3c:16:a2:
1b:cc:1c:e6:45:37:63:9e:1d:75:4d:85:43:b3:30:87:da:aa:
60:a4:cf:2b:4b:60:c8:4b:6b:88:61:6d:ff:f7:ab:46:6f:fa:
87:c8:b7:14:32:ee:b2:51:c0:e4:ab:a9:90:fe:ab:89:39:1a:
71:b0:0f:d9:98:3f:c6:1e:c6:27:16:0f:23:2e:f2:17:5c:e8:
0a:ab:40:90:df:52:48:da:37:32:30:89:cd:a6:23:bd:5c:cf:
92:90:5c:59:ac:6f:96:ca:87:ed:a4:6a:08:a9:9e:2c:0b:b6:
56:36:f0:a4:30:4f:a5:d6:b8:1d:77:ce:3c:26:1f:c3:72:76:
02:d3:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:42 2026 by rpki-client