Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: WiJjMkS00TKgdO1+FOuwDiVoO2ACB9RBSX29NEyg2SU=
Subject key identifier: AA:7E:37:96:F8:B4:38:D8:0C:74:8B:32:48:F2:76:DA:5F:23:66:44
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 019D25F1F956E4C0CD9CB0250C18AB3640B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: 02F3
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: TaoqRVy7G_jEt0HESH3wN5n6mvI.roa (hash: R8307lrtH91HT+4pfCapN7jLYcBGbwE8JwAjSXA57TU=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: NSao1K5c5X32Y+JjuEHbfPtn1qCwl3DBakiHO4Sp7EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f9:56:e4:c0:cd:9c:b0:25:0c:18:ab:36:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=aa7e3796f8b438d80c748b3248f276da5f236644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:be:a4:90:bc:a9:39:c2:63:65:f5:b2:c5:
be:a8:68:2c:a5:aa:11:a8:dd:55:89:d8:d2:f8:47:
c6:ac:c7:f1:c9:66:3d:56:94:e6:24:41:1f:1d:d8:
18:5c:a7:8d:ec:c6:89:5f:f6:16:3f:c0:f9:0f:e7:
12:c4:ae:37:b8:8f:b8:d7:a0:35:7d:f6:d7:c0:ab:
23:4a:42:61:e8:61:ad:ee:09:59:eb:67:98:45:d2:
de:0c:92:75:d0:53:c8:cb:9b:36:8c:47:1c:07:d3:
b9:89:91:30:66:6b:de:55:4f:55:b2:57:01:da:ba:
78:1f:b2:a6:70:2a:be:93:ff:f3:09:b3:d9:02:1a:
17:d2:4a:54:a2:03:2b:78:49:0e:f9:e4:28:a4:8f:
39:6a:fa:93:f2:35:1a:8c:9d:3b:96:ad:76:83:3d:
d3:66:e5:22:11:b1:6f:af:ba:d7:05:32:06:e2:14:
0d:2f:19:db:6a:60:45:17:68:76:c0:f7:93:c5:09:
aa:a4:bb:bd:19:d1:f1:df:48:ee:11:de:39:be:23:
78:74:86:24:ba:4d:65:3a:26:e0:c6:db:6f:1d:af:
af:b3:77:bd:a1:cc:08:d3:c5:94:4c:28:87:39:01:
25:19:89:08:cf:17:29:03:89:09:99:b4:79:04:d3:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:37:96:F8:B4:38:D8:0C:74:8B:32:48:F2:76:DA:5F:23:66:44
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:dd:5c:ac:53:a6:f4:7a:11:21:55:68:c8:ac:57:52:e1:
06:13:13:e8:b0:3a:0b:16:88:bf:8e:ac:00:45:00:c0:81:47:
ee:59:ce:3f:53:00:b1:f7:94:b4:61:55:b1:64:df:15:59:17:
cf:38:2d:20:72:e4:b5:84:fa:9a:88:8f:3b:86:cf:4b:c1:48:
a5:f5:04:55:9e:17:0b:8d:84:8a:61:17:6f:70:c0:17:b4:b2:
08:02:3c:ea:60:8c:8f:5b:77:0a:06:5f:8e:24:a5:60:16:00:
35:27:3e:8a:d8:8b:c2:39:cc:52:4f:d0:84:14:aa:ca:b0:ab:
64:1e:a9:05:08:5f:17:11:b4:b8:4f:ef:f6:6e:78:3d:bd:95:
75:3b:bc:08:59:97:ca:df:81:b3:6a:dd:85:a9:a2:27:1b:7e:
ec:bf:67:a5:7d:38:b5:93:6c:42:ce:ae:00:2f:bd:7e:97:1f:
c5:cd:21:68:38:a7:a4:05:07:bf:f1:1b:fe:86:ce:3e:bd:d1:
7b:26:f3:e3:d4:a8:98:f5:41:32:64:5a:20:21:7f:c8:a1:57:
24:7e:dd:21:34:9b:2b:67:9f:26:25:50:89:c8:08:46:1c:1b:
2b:10:2b:7e:49:d7:13:e4:82:f8:75:97:ef:fa:8f:2c:51:ee:
5b:3b:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:50 2026 by rpki-client