Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: weBJ3/33jF7mAcM++0ptyzxrCbR4zHbwxw5vt4jQK9k=
Subject key identifier: 96:FF:17:B5:6D:34:B2:26:83:C7:72:36:7A:C7:7C:57:7D:AB:FC:89
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019D2960F0541FAD61B7F9DDEC59B24E88CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:51 +0000
Manifest this update: Thu 26 Mar 2026 09:01:51 +0000
Manifest next update: Fri 27 Mar 2026 09:01:51 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: bN4Np9Tj4yqcLrjD9yF8MOOHg5O7GeaxJClno6h6KMQ=)
2: EkysD1nuSYyDinbnDahfH-VyT0k.roa (hash: I2/OA/U368nOnLRCtdWjPsJgwSqvtccdxmLHw2kJW9Y=)
3: RbJbPNiBU0kAmqUheDo0szIBjek.roa (hash: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f0:54:1f:ad:61:b7:f9:dd:ec:59:b2:4e:88:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Mar 26 09:01:51 2026 GMT
Not After : Mar 27 09:01:51 2026 GMT
Subject: CN=96ff17b56d34b22683c772367ac77c577dabfc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:3e:f5:d9:4b:38:58:30:60:8e:9b:4d:81:
91:55:6e:df:e6:c6:59:ec:95:b8:d5:f2:81:b6:c4:
cf:63:aa:03:e0:b1:eb:14:13:45:4f:52:61:e7:4d:
5f:9f:95:83:a3:86:82:8a:7b:33:2e:b3:33:20:c4:
26:47:8a:0e:5d:54:aa:98:ee:7a:97:9e:66:c2:a5:
64:75:16:41:58:2e:bc:f8:4f:6c:59:33:b1:71:df:
d5:11:cb:20:4f:05:53:44:d4:e6:12:b9:0b:05:89:
c1:7e:d3:ab:d9:8c:b0:d7:4b:f5:fa:91:c5:0e:b4:
2e:ea:e3:db:b0:22:55:4e:3a:df:68:3b:13:d3:99:
99:1d:74:55:e5:62:74:b7:f3:b4:9f:f5:a5:65:4a:
46:13:d5:18:7d:f4:b6:bd:61:f3:bd:ae:6b:df:90:
8f:ab:f4:50:89:4b:76:41:94:32:86:9b:aa:c0:e8:
1a:89:e9:e3:45:0d:69:e6:80:5c:c2:6e:8c:2a:fb:
b8:44:85:bf:0e:b4:0e:fb:dc:a0:af:4a:a2:25:0a:
09:b4:93:06:16:be:b8:48:76:88:af:75:86:3b:6b:
1b:68:e1:ae:ba:85:e3:69:84:07:09:b2:1e:58:23:
de:74:91:c7:fe:db:6f:d9:61:a6:95:b4:48:fa:dd:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:17:B5:6D:34:B2:26:83:C7:72:36:7A:C7:7C:57:7D:AB:FC:89
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fa:1c:91:f0:7e:55:d9:fa:3e:6a:cb:bd:ec:b3:09:8b:19:
bb:29:41:01:fb:38:22:91:fa:88:c1:a0:cf:09:3c:4e:cb:cf:
53:f8:7a:f6:fa:ec:f1:02:02:78:b4:ad:c4:52:22:aa:52:0b:
b6:b0:11:ce:16:7f:17:78:3c:90:00:5b:d6:cb:78:07:67:4b:
b1:89:3d:0f:3a:5a:6e:28:e8:75:f5:69:21:18:f1:c1:ed:ed:
de:ed:76:c8:f7:d0:a7:a4:27:c5:f2:be:09:1c:ae:5a:14:4f:
1a:05:60:2d:08:4e:d6:0a:5a:13:eb:73:05:ca:36:d0:c9:48:
e7:c8:66:50:2f:de:99:dd:1f:80:41:b2:75:cd:d2:56:c7:3f:
46:15:6e:08:ec:b6:5f:ef:72:57:c9:b7:74:7b:91:af:e8:a1:
f3:db:3a:b9:79:6f:5f:70:40:ac:d2:73:6f:88:69:aa:93:d0:
20:65:34:ee:1a:0b:52:b6:96:e2:1c:61:11:2f:3f:53:97:c7:
12:21:8b:47:42:a9:6f:e7:3a:e9:dc:92:cc:e2:1b:74:55:3c:
3f:f4:53:34:3c:12:fd:c7:df:1c:24:70:b5:e0:bf:77:4a:0e:
31:1e:8b:a9:f8:d0:f5:33:f7:47:55:7e:35:10:55:d8:6f:95:
4f:06:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:17 2026 by rpki-client