Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: 3qw8ccP6wnD0vr8+0TsTyKNH9y0rdltVx9F/5xak83s=
Subject key identifier: 37:7B:59:39:31:3F:BC:E9:3E:B7:F0:96:9E:9D:E9:C3:A1:88:B3:10
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 019D28845A8C1A01D35CDCE2FD0ACD309F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 08B5
Signing time: Thu 26 Mar 2026 05:00:55 +0000
Manifest this update: Thu 26 Mar 2026 05:00:55 +0000
Manifest next update: Fri 27 Mar 2026 05:00:55 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: S0hJe+TzbBfyZB5K6B8mhG5D1gFjSjYQjWg6EqCMqDY=)
2: iswbdq-9V8dK2lt-q7TWOV5NsnA.roa (hash: gjZR/5snwpqcxytGpgCEoK1OzMncCQSVwjv9VDuQVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5a:8c:1a:01:d3:5c:dc:e2:fd:0a:cd:30:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Mar 26 05:00:55 2026 GMT
Not After : Mar 27 05:00:55 2026 GMT
Subject: CN=377b5939313fbce93eb7f0969e9de9c3a188b310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:70:71:1a:d3:e9:57:be:0d:94:41:4c:36:
2c:d2:56:56:1f:d1:81:56:9c:e4:6c:cd:59:25:5c:
fb:bc:71:42:c2:1e:81:9c:b6:af:a0:2b:60:d6:9e:
2c:b1:f4:ed:4d:ac:db:f4:2b:e4:5c:43:87:15:51:
a7:15:3a:06:8b:4a:b5:83:00:4c:3f:ca:61:85:27:
9e:53:77:d7:d8:58:86:8b:53:14:66:4d:d5:68:86:
26:f7:dd:cd:da:7a:af:d4:ca:9f:b9:6f:57:8e:3e:
a3:52:db:11:a9:4b:83:9e:33:d4:14:48:ac:58:47:
4c:1b:81:a4:25:65:80:94:86:06:8c:40:b2:69:3c:
99:83:21:78:91:3e:3f:7f:ae:6c:5d:0a:fd:42:c6:
b8:f9:cc:1c:98:d0:f8:03:1f:ad:58:30:4f:dc:44:
52:4f:9b:b2:b4:ae:37:a0:ed:9a:0c:f5:1e:15:d1:
36:5f:f1:fb:5e:9d:f7:7b:b1:90:b5:67:65:d6:f8:
55:b7:c5:3c:88:a3:14:0f:5d:05:46:fa:85:01:8e:
e7:d4:87:34:4e:7d:3e:91:f7:b4:31:56:a7:ca:cf:
72:c2:2b:eb:ab:09:dd:a1:54:c2:97:a5:75:19:53:
18:9c:7f:47:79:27:2a:97:21:4d:0e:43:80:f5:28:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:59:39:31:3F:BC:E9:3E:B7:F0:96:9E:9D:E9:C3:A1:88:B3:10
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:40:4c:49:20:a7:cd:87:08:84:8c:8d:8d:f0:04:48:3e:c5:
79:a4:02:4c:d2:ed:c0:27:04:c5:21:65:6a:f3:ae:df:d7:0b:
2a:97:6f:0d:57:9a:5d:4c:e7:48:73:f3:86:ae:3d:52:db:fd:
2b:79:f5:8d:68:5a:ba:e4:89:f9:32:70:d0:cc:c7:77:9d:aa:
64:1e:9f:d5:ed:7b:1d:93:c5:2d:ff:be:f9:06:f0:9c:a2:c4:
0c:c1:7d:7f:ba:bf:c3:5c:87:2a:5a:bd:9c:5c:63:57:03:83:
6d:ce:95:b7:7c:d6:7a:f0:b6:5a:16:92:9e:5b:fb:86:0f:7d:
71:13:ab:da:47:9e:76:17:13:b7:36:14:a3:47:dd:87:cb:a5:
72:8f:0d:58:ba:1c:a4:5f:eb:cc:c1:f8:30:af:1b:db:74:14:
94:66:4e:08:28:83:2d:86:98:8b:93:36:10:4a:28:b9:00:03:
d5:6f:85:56:99:da:43:7e:a6:25:18:82:48:71:0b:b4:39:38:
e5:44:22:5d:36:a2:03:84:22:cc:fe:e0:e5:95:7d:66:aa:f0:
e8:42:4f:f4:93:04:d7:5f:b3:dd:4c:7b:e4:25:75:04:52:01:
6a:9c:73:f6:37:43:9a:5c:3b:f2:a5:72:9e:d9:6f:6e:45:ea:
de:7f:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:07 2026 by rpki-client