Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: JZIGGZ9bjrzWPZurEHW2vM0Di+r0+inormqR/XP48g0=
Subject key identifier: BA:45:70:84:64:19:E4:AE:CA:56:C3:CF:18:0F:05:4A:81:2F:CD:39
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 019D25BAB0E4ABFFC9E25ADF3110005544B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: +Yd9a23QTjdy50byX87socNH9RqyKOJNYusi0GcY10I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b0:e4:ab:ff:c9:e2:5a:df:31:10:00:55:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=ba4570846419e4aeca56c3cf180f054a812fcd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:e8:9a:c5:d7:8d:9a:d7:15:ec:80:e3:50:
6d:a9:a4:26:ac:1d:a7:c3:0a:31:46:97:31:5c:a8:
b6:f4:c2:ca:3b:f1:26:10:71:ab:74:8d:24:b1:6e:
f3:5a:2c:75:d2:75:01:f5:b0:4e:3b:9b:ab:a3:fd:
ce:65:fc:bd:34:f8:7f:22:9a:63:cb:e9:41:fc:0c:
66:66:59:00:7f:c3:f9:fc:bf:a4:02:df:55:b3:ec:
1a:fc:21:18:01:f1:a3:b4:56:0f:6f:76:96:80:e4:
a0:26:78:15:5b:46:9c:74:c7:fd:0a:ac:82:13:e5:
d7:3f:1e:57:9e:c9:b2:32:a2:08:45:35:48:26:3e:
8f:2d:7b:c2:89:64:cc:1e:ae:b8:fd:36:ab:08:07:
71:33:2f:7a:e6:f8:5f:99:cf:e2:7d:88:4b:f1:6f:
1c:85:6a:1b:4a:7a:ab:48:87:81:0e:a3:fb:6a:19:
1e:02:5b:9b:7c:28:b3:a0:bc:29:e7:80:cf:1c:65:
86:5e:b9:49:d6:4e:d7:73:30:d6:01:7f:00:f1:9e:
06:6b:5f:34:ca:f8:7c:c5:8c:fe:4f:ed:35:8d:74:
3f:ea:03:dd:6e:ea:c5:d1:f3:90:93:5f:9f:83:42:
9a:82:89:a4:ac:46:b2:4a:4b:d4:69:d3:d4:e5:a3:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:70:84:64:19:E4:AE:CA:56:C3:CF:18:0F:05:4A:81:2F:CD:39
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c0:b8:e0:99:86:e5:ae:84:a7:08:5c:40:85:4c:e3:37:e0:
33:d4:e9:54:8c:21:05:c8:2f:64:f2:b4:72:75:98:8b:54:34:
bf:b8:11:35:34:fc:e6:d9:95:16:04:3d:a6:1a:78:20:51:47:
55:7f:bb:d0:36:34:57:b3:2a:d9:43:c7:0b:ee:b7:ef:77:bc:
87:5d:c0:86:68:71:6e:31:2a:6c:d5:6e:91:35:9f:9f:77:96:
f1:85:bd:5d:ae:7a:b3:74:21:eb:4c:70:49:f2:27:37:c2:47:
07:f8:35:42:c0:55:d7:cf:0e:27:38:85:ae:19:4a:d5:2a:fb:
2a:f2:33:53:6b:9c:96:19:e1:80:1e:ad:d5:c9:7a:f4:8c:d2:
20:ad:43:18:01:5c:6f:dd:bd:37:ad:d3:73:eb:42:1f:0c:15:
23:82:6a:92:60:52:df:0f:65:ff:82:8a:58:9d:20:a5:df:00:
83:2d:4c:89:78:ab:fe:ed:6d:4f:80:d7:07:cc:d2:a9:bf:d7:
71:80:a3:0c:7b:9e:1c:58:d3:97:fb:cc:86:75:05:25:fc:e1:
dd:ad:7e:21:b4:49:8f:55:33:c6:64:95:fd:2f:28:a3:7d:9c:
4e:a0:43:4a:57:e7:3b:64:5f:8c:1d:e5:e9:7a:c7:34:81:18:
05:92:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:00 2026 by rpki-client