Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
File: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft (raw, json)
Hash identifier: eYcZJmsAoYYESzV01P+IU0AzBUEAcEdHvzHyh0CEb4w=
Subject key identifier: FE:93:14:03:40:14:FC:67:CB:5A:14:BE:0E:94:A8:90:FE:DC:91:F8
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 019D292946E9603FB750188DBE3461EEE088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: 8X1225-qrYaCRSnh7mmRzgHfQF8.roa (hash: INaosQfuVcg12zG5pp0XJSH17V0rkeHtVSpqdJnqrZ0=)
2: YQyno2lKbE7U5BS3xEbq3yXKIm0.roa (hash: jna4Y3wHaJJscui1Bqpz3qs+hJypi2Zl9JxVd4/tujw=)
3: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl (hash: 9Y9bmijya6c5AV0bMrDrkhc4uIY1cQ6S/NkrQcdeZ58=)
4: xofP0vR2GRdVVsSvPDa0VtVkEXQ.roa (hash: /8DfX5cmYB17XvXmzLIRZPN74OLUvtImYga9Uzx5tUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:46:e9:60:3f:b7:50:18:8d:be:34:61:ee:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=fe9314034014fc67cb5a14be0e94a890fedc91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:bb:e6:68:c5:67:9d:7c:e2:05:6c:30:57:
60:d3:ce:e4:a8:42:5d:e6:b4:1c:9e:b1:bf:36:b1:
5d:bd:f4:97:ff:e5:71:fc:76:1d:c9:2a:3a:af:c7:
df:35:e3:a3:26:3a:5d:5c:c3:85:6d:b8:c2:c3:a8:
39:96:99:91:01:11:ca:fe:80:f6:fd:ed:e4:72:12:
11:87:8d:db:5c:36:08:77:87:4e:d5:5e:a6:b2:49:
ce:10:b1:2f:3c:7e:56:a7:65:b6:6f:09:34:20:6b:
a8:0a:9d:05:2b:3a:eb:6a:97:32:66:4f:8b:ac:c0:
c6:1b:cb:e1:46:bd:d9:a4:52:d2:b9:75:f0:bc:14:
76:31:18:14:f5:45:c1:8a:9d:9b:e6:a3:b5:62:9b:
07:37:5e:f2:17:f0:77:d2:1c:f9:7e:8c:97:28:87:
b5:c5:0b:c5:5b:2c:b4:7b:82:e6:59:49:85:c4:94:
6c:28:7d:74:fd:e6:f0:7c:5c:01:86:6a:34:bc:e0:
5b:f5:dc:53:7e:b0:5a:3f:b0:20:15:41:4e:cc:15:
cf:49:91:06:e6:6a:ec:1d:39:37:e5:43:21:f3:9e:
06:27:67:bc:fb:14:d3:d0:f9:84:db:a6:9e:1c:17:
92:04:c5:10:c7:20:c5:f9:f4:ad:6c:34:31:3d:05:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:93:14:03:40:14:FC:67:CB:5A:14:BE:0E:94:A8:90:FE:DC:91:F8
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ef:0c:25:5d:8e:f4:d6:9e:dd:ce:85:ab:bf:c6:7c:ec:a5:
57:7a:00:e1:5a:a6:18:a3:f3:3d:d1:1c:93:51:94:00:88:20:
79:c1:9e:b0:78:ba:26:96:93:42:4d:2f:d5:50:c6:4e:8b:64:
5e:36:c0:57:5e:b9:de:1a:7c:02:d8:6a:a5:0f:65:2a:74:f3:
26:41:c9:78:1b:dd:b2:cc:a4:8b:c1:f0:14:01:a6:55:bc:67:
b4:8a:70:df:48:54:e1:56:32:9f:a5:01:09:c9:cd:9b:5f:a3:
c0:da:5e:7c:c6:cc:77:d7:29:1b:4d:fb:55:c3:4d:bb:fb:c3:
e2:84:d3:f6:4a:eb:86:95:10:9b:07:ce:6c:34:1c:b7:70:7f:
71:53:b3:b4:dd:63:16:94:0a:67:6a:44:ee:d2:9f:c6:46:9b:
0a:6b:f9:cb:e2:f0:06:0d:1e:74:83:e7:88:49:d0:af:89:3e:
0b:47:5d:aa:0a:85:b1:73:c5:e9:31:5c:66:c5:84:f5:a2:09:
2c:f1:3a:2e:1c:c9:c4:31:e8:c3:4b:7c:a6:43:03:fd:30:5b:
53:a0:7a:09:0a:78:91:03:91:8a:db:0c:b4:cb:31:52:98:69:
fb:34:5e:e7:f0:50:ff:fd:a4:d0:86:a8:a1:20:a4:0b:0c:71:
47:14:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:07 2026 by rpki-client