Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: uCzpFcI3N9y1E/1up5GlHvBRBceWig2W3i3nzFF/+g0=
Subject key identifier: 58:5E:5F:71:3E:82:38:60:39:8B:07:B7:F8:3C:C1:36:B7:2F:AD:FB
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019D28843E315702AB48BC2F395A334A8804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0BCF
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: DYa10NNAAqz1NPBS0ylKq5AsJWY1X1u6FjPipF4xqdI=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3e:31:57:02:ab:48:bc:2f:39:5a:33:4a:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=585e5f713e823860398b07b7f83cc136b72fadfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:ec:29:e1:56:0a:b4:77:58:73:4d:e4:b4:
a4:fc:81:89:6c:3b:e2:ef:7d:80:14:ba:4c:f1:97:
67:47:3c:b2:b9:ae:56:2a:c8:1c:0d:d7:d8:2d:59:
8e:51:4b:df:26:a6:d8:b0:a9:db:1f:49:26:20:5d:
f9:5e:2a:74:aa:d1:23:6e:65:c8:60:69:c4:2e:ff:
ee:8d:39:5e:f5:e5:71:ec:df:3a:dc:23:99:a2:4e:
b2:c1:07:68:43:b3:cb:48:ff:86:8d:d7:d9:43:08:
85:36:d5:2d:04:1a:e2:f5:9e:a7:c7:77:14:f2:70:
ba:3f:d7:e0:af:3f:3e:cc:24:34:26:80:0e:ff:ae:
ef:b4:78:fe:19:e3:69:c9:c2:ad:61:35:be:8c:97:
fe:ee:e0:5d:58:44:50:af:f9:34:37:8c:71:61:89:
72:ec:c9:01:5f:d3:45:5c:dc:9f:a5:1e:dc:c0:2d:
1b:71:95:a9:8c:d6:00:59:a9:b3:e5:06:15:48:1d:
b6:a9:9f:47:11:70:ce:ca:fb:ea:c7:a0:e8:b3:e7:
a9:ba:42:46:b3:fb:56:72:f4:45:97:11:0f:fa:92:
3e:b6:ab:02:17:21:14:1c:b5:91:b3:be:fd:4d:74:
bb:79:ad:33:a5:6d:2e:22:41:75:90:2d:da:61:01:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:5F:71:3E:82:38:60:39:8B:07:B7:F8:3C:C1:36:B7:2F:AD:FB
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:47:a8:a3:41:a1:2e:10:1a:5e:8c:7b:d7:0b:98:d5:aa:85:
f4:ee:33:a1:37:28:9c:81:03:44:88:b5:1b:70:15:9e:52:af:
90:5b:bd:2c:0f:aa:8c:91:4e:c3:ee:51:04:2f:81:49:ea:4e:
2a:e5:07:fd:cf:e0:a7:d0:b6:6f:08:8b:20:47:58:47:3c:08:
0c:ac:c3:9b:4c:98:3d:90:55:0e:d9:53:92:68:03:f0:48:1f:
a4:5c:7c:1b:61:6c:f0:ef:e8:04:c1:64:36:a7:4c:bb:a0:ee:
9b:8f:88:57:84:f7:7f:4e:1c:02:d4:18:c4:44:15:ee:5c:75:
a2:f9:cc:da:ee:33:cd:d5:42:4f:16:5b:d1:6b:2f:c3:94:a7:
df:b6:8e:e6:b9:50:85:45:2a:93:a1:5a:0c:12:11:17:43:15:
d4:6e:f8:95:30:50:a0:1e:82:2a:dd:23:04:ee:9f:2b:41:2e:
cb:d8:f0:12:0d:64:9e:a0:40:d8:3e:8f:06:33:3b:d2:e7:37:
00:c8:4e:ec:2c:88:67:df:50:ff:79:d3:47:2d:9b:4e:c3:37:
b7:24:06:b2:15:3b:8d:95:a4:c9:4e:41:84:20:2e:2b:f1:ef:
4a:46:4a:17:fc:70:ac:91:63:f4:c0:0d:00:2d:bf:bd:c1:de:
ad:62:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:47 2026 by rpki-client