Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: 9JT6BY9JkjiNmv9YFpOt8ZloTsgdydbYEen0rsroY4g=
Subject key identifier: 01:BB:CA:D0:65:B8:99:D8:63:F0:96:99:E9:33:05:16:38:1E:FC:2B
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 019D27E066FF4F6F9B19E6415A0F3A071A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0CCA
Signing time: Thu 26 Mar 2026 02:01:51 +0000
Manifest this update: Thu 26 Mar 2026 02:01:51 +0000
Manifest next update: Fri 27 Mar 2026 02:01:51 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: Zy3TdWHlRtQ8ox7zgvI/X1ncgjAlmtqdfJw1n50pNws=)
2: xyOkTXVPZjz9JAhos1QM2vsm3W4.roa (hash: QXjoMKDwi6j1vpZqYsBGzsQGgoo9dIBXi5WlfEHsxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:66:ff:4f:6f:9b:19:e6:41:5a:0f:3a:07:1a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Mar 26 02:01:51 2026 GMT
Not After : Mar 27 02:01:51 2026 GMT
Subject: CN=01bbcad065b899d863f09699e9330516381efc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:d5:b4:40:f2:fa:6d:04:01:3d:c5:77:84:
dc:71:7f:c0:82:1f:87:bb:7d:ee:15:e7:ac:75:9e:
da:37:01:19:48:3a:99:08:18:54:38:03:ff:26:67:
0a:6b:c2:df:3a:64:5f:f6:66:71:fd:61:d1:9a:ad:
25:3d:ab:31:4c:53:68:22:76:17:20:1f:bf:50:4e:
55:ab:c6:6d:b5:d8:f4:95:a7:f8:1e:d7:52:a1:6c:
ce:d0:71:cf:9b:b5:f3:34:5b:e1:c6:50:d8:85:a3:
a4:5d:d2:56:10:5d:08:a5:41:71:14:73:d7:0f:3c:
8a:15:01:b4:2c:a0:1b:f7:ca:ad:02:f4:d9:79:1a:
16:c5:b1:b8:a3:11:7d:b7:ee:89:ed:a4:52:cc:ab:
13:09:29:7c:45:d0:a6:15:ab:e1:16:84:07:5a:4b:
c1:28:86:66:ef:db:ff:66:0c:6f:06:56:51:5a:42:
56:5a:54:dd:76:ac:e8:90:4c:21:96:57:78:93:bb:
69:bf:51:b3:27:c2:60:7c:d3:28:b9:0c:ad:89:00:
61:bb:4d:96:ff:db:3d:9a:ac:9a:de:a1:50:7f:3f:
25:a7:70:21:b1:91:ad:f5:24:4e:e5:2f:1e:b9:10:
16:c1:e8:9b:4e:c9:dc:25:62:8c:1f:dc:13:e4:c7:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:CA:D0:65:B8:99:D8:63:F0:96:99:E9:33:05:16:38:1E:FC:2B
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:eb:01:d1:c1:bc:95:ec:0e:a9:de:1d:51:61:77:69:38:
4c:f0:84:3c:f5:bd:18:3a:60:72:b8:bf:da:97:3b:9f:3a:77:
0c:52:b4:76:9e:60:1d:16:c9:70:b6:fd:00:b2:66:30:af:0f:
e8:f3:d2:ea:32:da:3c:e8:5f:e8:5f:60:8e:a7:5d:13:48:2c:
7f:a2:47:f0:71:6e:8c:c9:ee:ff:d1:f7:90:30:6a:4b:1b:12:
b1:1f:c6:80:17:ba:20:22:99:84:2b:eb:ff:af:81:78:9c:57:
96:d5:5e:ae:71:1a:9a:dc:cb:01:74:27:af:4f:a1:a1:f4:c4:
ff:a8:ea:24:50:a2:00:d9:5c:0c:1a:08:4c:c8:2a:5a:c7:9f:
18:d9:34:c3:2d:a7:7c:3a:db:05:72:33:46:29:fa:f3:d7:d8:
a9:42:39:19:06:e9:76:de:51:18:28:4c:9c:18:58:90:fe:3c:
2d:63:ff:7a:1e:40:41:bb:18:90:82:31:6a:cb:06:63:f9:a5:
7e:b2:fd:72:89:10:c1:d5:eb:36:f4:08:35:2a:66:75:d4:e0:
e9:21:d6:1d:12:3c:73:80:70:b1:d9:a1:d7:e8:b5:c6:80:06:
31:69:61:5d:01:b2:39:2a:09:8c:87:7d:60:ac:b4:c9:a9:f7:
b8:e9:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:23 2026 by rpki-client