Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: 04osATyR96b63lfb6TWvKhVFwrseK3P7U+ogHWVhKfQ=
Subject key identifier: FB:2F:36:57:28:FD:58:5F:AA:45:E9:B0:88:D8:0E:1C:18:E4:6D:72
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019D2960D5B31349970B8B03F74204136F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 12BE
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: /RduAliZhNXpBHv0/5hjl/JUc1Y22bhvbLRauYZ5tcQ=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d5:b3:13:49:97:0b:8b:03:f7:42:04:13:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=fb2f365728fd585faa45e9b088d80e1c18e46d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:cc:93:36:a5:ca:3b:44:2e:df:81:8d:87:
fa:70:e1:9d:52:b7:39:e6:f2:13:f3:fe:db:fa:fd:
14:b7:be:8f:76:76:09:dd:a5:c1:55:84:b6:49:2a:
8d:75:3e:8a:44:69:88:ba:16:be:f0:3a:6d:1b:c3:
19:27:b0:96:57:9f:82:74:7f:48:ed:44:cc:59:6e:
17:6b:42:c3:25:da:7b:4a:98:23:4f:07:43:9e:40:
49:28:95:f7:16:14:57:ed:44:53:b2:1c:33:16:02:
a8:67:b2:1c:aa:d8:81:d2:e0:15:ca:8f:53:d6:fd:
34:f4:4c:fd:3c:32:dd:7c:12:9e:93:18:2c:32:08:
a5:db:2b:05:8f:c1:81:9a:31:b1:c7:a3:0f:ea:e3:
0a:62:51:08:a8:79:03:2b:2f:44:79:28:71:b7:75:
b0:63:57:e8:67:d7:65:47:e1:95:fa:18:5c:4b:08:
b5:13:0e:6c:d5:4b:59:48:74:9f:e6:5b:5f:24:b4:
8a:a5:0c:a1:66:54:df:ff:9f:08:21:17:04:ed:0b:
ff:93:05:10:ae:02:ad:29:a4:76:2c:04:99:10:95:
a7:2f:66:a5:5e:29:23:91:7c:44:bb:18:fc:36:60:
58:50:33:14:e7:37:8c:2e:39:f7:33:84:6b:8f:66:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:36:57:28:FD:58:5F:AA:45:E9:B0:88:D8:0E:1C:18:E4:6D:72
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b7:86:45:55:fa:3a:73:5e:2c:bd:55:12:0e:4a:fc:de:54:
e1:bf:79:39:8b:50:c6:82:2d:6c:7b:df:33:1f:fa:fe:28:af:
e8:a5:56:07:4e:76:c3:42:e1:1a:ab:2f:b3:0d:7e:46:26:0e:
e8:3d:84:7a:f9:77:68:2a:26:24:bd:34:b4:c3:14:79:3e:1c:
33:4d:a4:af:2c:07:45:2e:70:c4:b7:7d:d3:7f:ca:c7:91:31:
26:04:01:30:ab:4f:ed:35:f6:d2:d7:c4:4d:36:8d:84:36:09:
db:ff:83:83:95:5b:23:45:23:53:e9:d4:2f:05:cb:10:2e:74:
50:c6:46:98:87:76:60:50:eb:e2:28:83:23:c7:ce:11:9f:f8:
59:e2:49:63:b7:3c:ff:a3:3b:16:03:33:52:1a:f9:94:ee:f1:
f7:7b:86:33:b9:b2:7b:ec:ea:75:4b:a9:dc:f6:0e:d3:c0:f7:
cc:ac:d9:c6:f9:2c:63:66:3e:53:39:95:67:da:00:60:ac:d1:
e5:49:98:76:cb:84:9d:9e:8f:b7:b1:a3:de:32:9e:4b:be:b7:
ab:38:23:ff:81:81:f9:a0:aa:c5:12:01:a8:6f:81:5b:78:19:
11:cc:83:08:a9:55:b3:71:ab:a7:f2:12:96:3e:7b:6c:a9:08:
e9:42:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:38 2026 by rpki-client