Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: nycLmIwNID5hps+Qb+6akDqtrrD5VNuSgmFsWugBWZA=
Subject key identifier: 6D:AB:84:2E:2F:D2:8B:64:08:7F:8B:9B:38:8B:62:68:83:04:07:EC
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 019D28846D48B5F357CA6369DD81C61DF193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 1251
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: yePf4SDPP4KnmETfqV+XPDlfsJ6axVuMQEtixHS6n9s=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6d:48:b5:f3:57:ca:63:69:dd:81:c6:1d:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=6dab842e2fd28b64087f8b9b388b6268830407ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:02:e4:fd:84:be:94:97:75:dc:03:f1:33:
f9:5e:38:c9:97:58:03:59:a2:ea:dc:e5:b5:24:4a:
9c:e0:ef:83:04:f0:29:f5:b8:32:0b:c6:ad:4b:2c:
d5:62:a5:ac:f0:f9:a0:12:1a:41:39:b7:f1:d5:70:
ce:b1:0c:f5:94:f8:41:df:28:68:92:47:5d:c0:62:
74:3a:8c:99:63:27:bb:ff:79:cb:18:16:e1:5d:f1:
51:0e:df:5f:1c:e4:b2:2e:b5:06:94:81:08:4c:55:
25:5d:10:9d:e2:0a:82:e2:bb:ea:75:4f:4a:a9:1f:
65:9c:98:7b:eb:04:cc:43:6a:03:d7:52:f0:4b:65:
fb:b3:88:58:f1:71:14:c2:07:7e:7a:0e:a7:92:a8:
8d:1f:7e:0c:13:65:40:92:7f:84:7d:63:d2:a0:3a:
81:57:6b:4b:1a:e6:2f:37:5b:72:4e:9e:9d:a4:1f:
ec:b5:5b:fe:96:b0:e8:e7:bf:12:9f:15:4e:40:26:
67:18:4f:88:1c:d8:0e:fb:9d:c5:99:45:ec:5d:d3:
41:55:07:3c:6d:db:4d:de:3b:7c:85:74:ee:80:c7:
68:b4:d8:fe:49:e2:dc:ba:ca:1b:bd:de:28:cf:86:
5e:31:9c:34:cb:6f:dc:6d:82:d9:e3:00:01:9b:58:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:84:2E:2F:D2:8B:64:08:7F:8B:9B:38:8B:62:68:83:04:07:EC
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:36:38:89:3b:9e:42:df:8f:22:1a:01:5f:3e:22:6a:a1:
f2:53:3b:df:9e:9d:16:eb:ba:1f:6d:90:29:e2:70:d4:3e:a8:
6e:b5:67:07:9e:1a:a4:0c:12:4c:6d:44:5d:86:48:06:94:26:
73:9b:5a:44:11:cb:0c:19:bf:e2:8a:53:8b:32:1a:53:11:dc:
ba:6e:40:35:1d:e1:71:25:9c:8f:30:ad:4a:27:ae:ea:d2:33:
c5:98:39:23:ef:8c:7d:e0:64:e9:73:df:1f:3c:fc:96:86:b5:
57:af:4d:df:18:d3:c6:6d:05:0a:5b:91:86:d3:c0:10:e6:e8:
0b:ed:e8:fc:0b:63:a7:ed:21:01:9f:77:38:c9:01:62:c6:b5:
f4:06:b0:6b:9a:64:e4:db:14:1d:2e:1f:49:b3:67:17:56:f7:
46:58:08:b4:67:b6:8e:bf:c7:53:b5:55:74:35:23:36:ea:87:
4b:5b:25:62:a9:3a:01:d1:57:e9:df:37:6f:a1:12:5f:31:33:
20:24:f6:d7:c7:3d:d7:30:41:a2:24:1b:4a:41:01:38:c7:33:
8e:9e:a3:88:03:bc:8e:13:46:66:2e:9b:ef:ac:ec:8e:03:59:
86:d5:33:61:af:3e:43:a8:99:3c:26:0c:bc:82:e2:8d:11:6e:
b4:65:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:24 2026 by rpki-client