Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: o0IYxGoi4fFNZClfYNu+9jQePGvpzffKouJuksRu+h8=
Subject key identifier: 64:75:B2:47:1F:30:AF:BE:E8:A8:B1:D1:03:10:43:F9:ED:50:D0:CF
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 019D27721CCDBE673CCBD19732EB6846CB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: t3DtngpzxgQGtieW0lHL2BJ+bdx8Lu4dBirqKnP66DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1c:cd:be:67:3c:cb:d1:97:32:eb:68:46:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=6475b2471f30afbee8a8b1d1031043f9ed50d0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:8e:0f:38:28:59:8d:4f:ec:da:60:3e:f8:
97:44:f2:c3:bc:50:b6:09:f1:21:96:bd:3e:2f:15:
d0:7e:a6:b3:aa:77:de:ed:b9:52:cd:28:bb:a5:cc:
b7:04:17:d8:fd:b0:d9:2c:60:2e:d1:93:d8:09:a4:
73:b4:27:7e:8f:a7:53:ba:11:9d:ad:e7:d7:e4:bd:
a5:25:8e:8d:36:74:24:f7:d0:e9:a9:f1:3f:22:17:
01:e1:52:ec:1b:96:ca:59:27:e6:5f:40:21:f4:3c:
ea:b2:85:ee:31:d7:34:5b:03:41:e2:b7:c4:bf:6c:
c5:fa:cb:c0:0e:9f:0e:d8:f5:8b:06:51:c8:77:b9:
af:02:e8:7b:11:6f:51:78:93:8f:4f:30:ed:ba:0c:
ff:6d:70:eb:e7:e1:99:2b:05:63:6e:ed:23:7d:70:
e3:63:19:dc:c3:0f:33:8e:af:7a:a6:de:9f:a1:24:
22:9b:08:5d:56:3a:d3:19:82:07:ec:f9:e3:be:cf:
cb:20:08:06:ab:72:4f:09:ed:b8:7b:8a:ce:81:46:
e1:70:c8:dd:40:4a:34:81:59:9f:43:72:23:6e:cc:
04:ae:e6:19:26:69:82:83:a8:b4:64:8d:84:4d:07:
d6:4e:80:c1:68:fb:18:d0:54:28:43:25:ea:43:03:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:B2:47:1F:30:AF:BE:E8:A8:B1:D1:03:10:43:F9:ED:50:D0:CF
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e7:50:9b:93:56:19:81:69:3c:f1:59:9b:27:19:69:4a:d4:
3d:8e:5b:2f:e5:73:07:34:19:57:5a:eb:46:45:42:bd:58:0a:
ab:16:24:dd:41:c9:ea:f8:2e:18:50:c6:97:41:20:61:cc:04:
df:f6:bf:e9:8b:22:60:c4:70:64:c3:b2:2e:df:e1:58:fb:f1:
68:c0:69:f8:18:51:2f:c1:13:8b:d1:88:1b:2a:b2:b8:e4:86:
4a:25:ba:da:d5:e4:01:5e:21:e3:66:77:4d:06:42:f3:62:8a:
06:29:b5:ce:b4:68:8a:9b:61:86:5f:30:1b:ce:29:b3:7e:69:
a8:4d:f1:2f:43:c6:4f:bf:5d:b5:96:da:a9:9a:69:33:50:6d:
10:eb:69:30:95:0e:50:15:6b:0f:2a:32:16:a9:60:4e:72:1d:
a7:75:e6:bc:cf:a8:3a:fb:13:ea:7e:6e:f2:60:8e:83:a7:2b:
28:a0:26:67:86:8e:e8:a0:d9:18:4c:2b:f9:a5:87:7a:9f:eb:
66:ac:9b:42:60:a6:38:fc:ff:5d:b5:17:77:1b:6a:91:96:a4:
f9:14:13:9a:18:55:5c:06:74:34:51:7f:e0:df:09:9f:6e:aa:
36:7e:41:d6:01:6b:83:24:e3:da:6b:c1:24:d3:ca:d1:05:28:
6e:22:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:15 2026 by rpki-client