Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: FRdiLC1M3xNo9jHgbjSwLPL+yGYOfaRsewuLABdN9Z4=
Subject key identifier: B5:8A:9D:BC:43:2E:8C:6D:EC:4C:7A:2E:B5:B1:68:EE:C1:09:04:07
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019D26CCFABAE2EDF2979FD3DFE9FD6C1110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: BDIXWUULXF4ZYctzL1dIOfhWd84.roa (hash: S93eCFJP6MwqLRSBsJT6plLVugSYsxuO2UQgR9jVAWE=)
2: ItYXiGPx0Y7gidugw99Su1Ihb4A.roa (hash: m2YjVpmW7E6MJX+auloFO1THu1a7R7YZy5fNsp6qz8c=)
3: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: soE+TfZxAeRjPKXzYeUDiDVYeONRF8+RTbf3fL6Lezo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fa:ba:e2:ed:f2:97:9f:d3:df:e9:fd:6c:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=b58a9dbc432e8c6dec4c7a2eb5b168eec1090407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:b8:9e:e7:58:13:83:8a:14:dd:6b:95:26:
eb:d6:f5:ba:ff:a5:fa:68:03:9b:41:3a:60:37:c5:
da:97:81:7f:26:8e:fa:4e:76:af:9b:d0:40:b0:7d:
51:c6:9c:ff:dc:0f:f5:70:fd:22:11:c8:af:dc:5f:
87:48:65:cc:b4:5a:b5:f5:fd:f7:c7:6a:b4:c6:4e:
58:f7:25:8a:ec:6e:50:03:be:d0:1e:6f:d3:a2:ca:
1c:99:4e:88:41:df:46:11:50:81:2c:b2:a5:14:30:
a0:06:cd:36:7d:91:7f:da:e0:0c:d1:da:b6:a2:2f:
cb:66:0d:8b:5f:3d:7c:f8:6f:fa:97:ea:8b:f7:83:
60:42:1f:43:0f:18:c9:10:ac:66:94:18:08:6e:17:
66:c4:14:04:47:4b:2b:d3:62:0b:cd:22:44:65:e4:
61:ed:08:76:6c:1c:59:61:41:bc:0f:71:3e:de:02:
6c:97:a2:08:d9:24:00:2c:71:72:5f:7d:09:b3:a5:
dc:97:cf:62:c2:02:7c:43:21:f2:6a:cc:bf:66:22:
78:b1:19:17:4e:58:fb:e0:eb:da:8b:5e:b0:3b:67:
26:49:50:3d:ef:2a:5a:cd:d5:12:b6:79:ed:25:ce:
ef:24:34:96:e0:f9:30:ae:3e:07:30:22:c2:46:70:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8A:9D:BC:43:2E:8C:6D:EC:4C:7A:2E:B5:B1:68:EE:C1:09:04:07
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b2:50:a2:00:56:98:b5:7b:1f:62:f1:05:aa:2a:c0:5c:bc:
96:e7:4c:46:3c:b4:31:0a:3e:42:6c:ec:85:07:6f:0b:4b:95:
16:36:21:fd:94:05:1a:77:42:66:cb:55:25:aa:3d:d5:3e:56:
52:e9:53:a3:d1:83:63:07:24:2e:ee:ea:5e:21:08:e9:ec:60:
b1:4e:ae:5c:10:61:19:9b:4f:58:66:a0:ae:84:f8:51:b5:6f:
81:f3:8d:43:9b:9c:b6:d0:c9:15:96:76:f9:68:34:e8:1a:53:
c3:92:14:d5:e6:c3:f0:b6:10:d8:86:12:83:c7:00:29:c9:0a:
08:65:cc:83:62:ac:ea:46:3c:7d:20:31:4a:e8:45:5f:03:a2:
22:53:51:4b:4f:7a:c0:fe:f0:c6:37:69:95:00:63:16:4f:c0:
1d:84:c3:8a:c9:72:cc:87:b0:17:d9:21:d2:1b:fc:47:db:e5:
fa:47:49:f8:36:b2:f0:c0:8f:02:1e:a1:a9:e5:1a:5f:a1:4b:
92:47:f3:de:19:01:2f:68:ff:08:41:90:51:e9:d3:60:8e:2b:
4c:1e:45:df:03:1e:0d:ea:b5:1f:d6:56:90:2f:e5:35:a8:a2:
85:4e:86:a7:d5:30:96:a1:23:dd:b5:44:c7:0d:be:a8:52:de:
a4:20:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:37 2026 by rpki-client