Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: hc4CFWh7lnoo+NIDzQquHsbTyNc7qYqQzInUIAhC+JA=
Subject key identifier: CF:E5:A8:31:11:26:F7:9A:6C:5A:EB:71:29:6C:12:F0:10:BA:66:24
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019D25836F0C90E35C941DAA5DC7A1760DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 159E
Signing time: Wed 25 Mar 2026 15:01:03 +0000
Manifest this update: Wed 25 Mar 2026 15:01:03 +0000
Manifest next update: Thu 26 Mar 2026 15:01:03 +0000
Files and hashes: 1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: t0hdkbfhGY6Sl8JC+5EMwE0Kh+V+SQBPHvwArgiB07g=)
4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:6f:0c:90:e3:5c:94:1d:aa:5d:c7:a1:76:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Mar 25 15:01:03 2026 GMT
Not After : Mar 26 15:01:03 2026 GMT
Subject: CN=cfe5a8311126f79a6c5aeb71296c12f010ba6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:a0:5b:ff:22:78:34:0c:cc:e1:7c:83:7e:
f4:0a:b1:49:80:11:82:90:16:86:8e:14:40:09:9f:
65:e0:51:55:2e:05:79:ab:07:39:2b:d4:27:ef:9f:
0c:10:17:7f:88:97:85:c3:5f:81:e0:53:e1:5e:34:
df:32:87:3d:29:3c:b8:14:a5:35:cd:aa:4a:57:97:
ad:61:2b:a1:28:86:ea:89:b9:c4:ca:73:61:92:6c:
ce:90:d8:20:69:3a:dd:90:d5:9f:60:d2:cc:cd:b9:
21:9d:31:b0:48:0e:48:36:f8:13:eb:5f:3e:5a:27:
2c:7c:2a:b9:d9:31:2c:79:e9:54:dc:1f:43:87:ef:
32:93:66:22:b3:66:f6:55:48:18:94:7c:07:79:da:
d9:42:69:c1:fe:88:2c:52:36:89:77:dc:c7:40:97:
03:46:e9:54:b0:7a:f9:df:15:e1:cf:d5:5f:1e:9e:
d0:5c:ad:38:ca:f3:17:e2:95:a2:c8:47:6b:a3:75:
7a:ed:4a:e9:51:d9:3c:14:53:d2:46:2f:d1:7c:9a:
8b:01:f8:6a:65:21:1d:61:e3:75:fb:27:b6:49:73:
de:82:86:84:12:9f:39:e7:86:94:68:d3:c8:ae:1e:
8e:40:1f:10:ba:15:59:3c:8a:ac:b4:a1:3a:f7:1a:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:A8:31:11:26:F7:9A:6C:5A:EB:71:29:6C:12:F0:10:BA:66:24
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c0:3f:0a:02:45:45:64:69:34:ec:8a:3f:4a:b4:b6:05:99:
84:24:ac:61:56:fb:48:43:a5:e7:ce:bc:b3:12:9a:50:1d:b1:
3f:21:bc:2e:72:55:96:dd:90:6c:12:78:59:97:ac:b7:27:2e:
da:da:a6:87:03:d6:8c:cb:0e:44:74:c8:65:d8:ec:0b:8c:95:
51:36:70:d5:48:f3:46:b1:ba:cd:c2:65:90:44:e4:c3:02:76:
1e:bf:bd:88:14:5b:70:1e:7b:b1:e4:09:fa:46:8f:29:27:02:
d1:77:4d:02:3c:68:7a:65:de:d5:e6:79:88:1e:50:7f:cb:92:
95:3d:07:cd:7e:90:25:09:2c:b9:17:84:fc:38:eb:78:fb:7a:
db:bd:00:d5:7b:cd:e3:2f:36:1a:69:69:fb:ec:1f:b0:49:fd:
aa:6a:b8:02:78:9e:0b:65:0d:d4:c8:65:f6:64:f8:f1:ed:49:
03:6a:c5:9e:f3:cc:c7:da:4b:7c:e7:2d:a5:b8:ca:ae:51:1b:
66:b4:43:f5:ac:72:39:de:ac:2b:2e:de:5e:5c:62:c4:98:a9:
fd:58:c3:da:8f:65:4e:a7:2e:18:e2:97:4b:c4:07:36:36:f9:
7c:74:94:93:2c:e9:f6:aa:f0:37:3a:cb:79:3c:77:db:cc:60:
30:47:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:53 2026 by rpki-client