Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 7RvjjuEmVmAd/ZrEZwBW+SmPaktmSUPcH9SL1UDQKT8=
Subject key identifier: 2C:E9:93:C0:AE:91:F6:F1:29:54:54:46:60:5C:88:95:6D:D1:39:4A
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019D27E048B430BD18416CF84B049FF536C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0EEE
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: LqQgypk54BkOYQeFhzi3XXZ7Irg2mYy8QArN9qIQdmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:48:b4:30:bd:18:41:6c:f8:4b:04:9f:f5:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=2ce993c0ae91f6f129545446605c88956dd1394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:97:a5:c7:7c:ed:0d:d4:97:6a:e7:8e:2d:
e0:49:e8:55:98:b4:5d:8c:e9:91:93:5c:b7:ec:de:
52:63:4d:2c:b7:93:ed:58:6a:3b:f6:35:d5:c3:7e:
23:57:dd:a0:0f:b0:aa:ea:7a:d5:3a:bb:35:0b:74:
3e:85:f8:fa:c5:95:af:eb:21:a5:9c:76:5b:24:b4:
cc:cf:ed:b7:84:38:30:fd:05:47:46:c1:e0:51:07:
52:12:91:8b:62:d8:e9:d9:42:79:16:fe:88:eb:a3:
4d:e6:3f:d7:9b:62:5c:81:b5:17:75:f3:14:55:72:
dd:ad:b9:e5:22:a3:6a:59:98:d8:67:ce:41:31:0f:
1f:17:56:8a:f6:ab:8f:cc:fa:de:bb:7e:3f:53:c0:
79:ae:d4:b5:0d:7a:42:4e:63:5a:a1:16:89:66:ee:
cd:a1:d6:90:f3:36:99:75:53:6b:0e:a9:01:33:05:
1d:9c:63:6c:da:ff:97:5d:6e:10:27:8a:e3:f4:a5:
8c:10:43:be:97:7a:5d:bb:a2:bd:64:b1:3c:d7:23:
2b:52:f2:15:32:9c:e4:20:34:6b:ab:fb:49:fe:53:
bc:75:b0:b1:c5:64:ba:07:17:58:be:a2:ab:ab:ad:
de:94:fc:7e:5a:68:15:f0:da:ec:96:f3:4b:39:ec:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:93:C0:AE:91:F6:F1:29:54:54:46:60:5C:88:95:6D:D1:39:4A
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c9:ef:1e:2f:a6:d4:e1:bb:d2:51:ee:9f:b4:8a:d4:47:9b:
23:74:71:3f:22:1a:8e:a6:c2:13:0a:93:19:6f:fa:8b:67:ce:
37:02:39:a2:79:18:04:82:bf:b3:8e:c2:cc:09:1a:90:56:d6:
dd:7e:47:cd:c9:37:b8:b0:af:1f:e2:cd:e9:48:0f:b6:d2:6c:
1a:c4:bc:25:77:84:eb:c7:e1:a8:de:b9:e6:1c:43:44:6a:11:
b7:7c:2e:55:2f:a2:08:7d:0c:29:61:54:41:75:46:bd:fd:41:
db:30:f5:e8:78:d1:79:dc:6f:0b:89:27:28:9d:88:a7:33:8b:
91:36:28:6e:d1:bf:5e:b5:46:d3:c4:68:27:9b:6e:10:4f:95:
a7:3b:e5:13:a1:e3:8b:f8:c2:a1:cc:9e:b9:ae:7f:41:71:a0:
75:cd:0b:ad:a8:d0:93:4a:0a:69:59:b3:17:dd:da:7b:3f:9d:
b4:c0:20:ad:e9:1e:78:13:48:21:5a:ef:43:e1:9f:a0:d5:dc:
a9:80:16:cd:e9:ff:fe:db:d4:12:d5:c2:66:2e:40:84:69:f8:
d5:83:63:0c:32:ac:e1:16:82:0a:e9:3e:c8:21:ea:ca:f4:b3:
e7:40:b3:91:74:f9:2c:c5:06:fa:9a:6b:93:17:97:63:1a:0b:
d0:71:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:03 2026 by rpki-client