Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: BuoeDkc9oUdFXMH4AN9bLPVgTUsFuWzS5c92Ivv8oEI=
Subject key identifier: CB:80:47:0C:96:D5:AB:B3:33:10:18:00:77:0E:CC:70:E9:44:DB:CB
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 019D284D880DD49F29F449B8848CA99EE418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 0636
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 4hHdENRP8UqRMPRer0DmyKbxqs0.roa (hash: ADyWa0O+LoRcn7gTpz/vrNoTBtYlMAM0Wz+sCKXyoTQ=)
2: CtT9Wymse3k3kQ47YUhfGwUL6h8.roa (hash: vnUpHk9hLZg0tM6pSCHHsUyldjKIrqSpwIoj380vH14=)
3: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: 6dOYcax153Is5cRsrON/TkRL5cee1gmX/GRu32MXEO0=)
4: xT5fDO0Cv_aQByArGbDGjigd_jI.roa (hash: Xhmyi95iJcM4YdZQa7mRk6VSa9PBHCFE7QUUL5ySwJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:88:0d:d4:9f:29:f4:49:b8:84:8c:a9:9e:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=cb80470c96d5abb333101800770ecc70e944dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:60:a4:b2:b8:7a:4e:43:3f:b6:a8:88:a1:
c4:19:84:96:e2:64:94:12:33:fb:f0:40:45:88:42:
12:63:5c:a4:38:4c:66:3a:27:05:d0:88:91:00:0a:
86:61:32:1e:66:9e:40:95:c3:02:5b:a8:67:64:41:
28:2d:6f:0e:68:1d:55:5b:95:a8:06:f8:c8:2e:88:
6c:66:1a:39:a5:24:56:a5:4b:d2:60:bf:a7:fd:dd:
5a:fb:1d:3d:12:7d:8b:3f:2d:17:a0:f1:d4:7f:0c:
45:27:e6:8d:ba:99:96:0d:5e:08:6d:44:1e:91:14:
7d:ab:3e:f6:34:76:47:38:7d:2c:3c:b4:8b:6c:12:
6c:95:30:84:96:d6:18:6a:1b:76:6b:4b:73:dd:bd:
98:33:1c:59:d4:9b:0b:38:91:38:7f:dd:0a:5a:e8:
93:3c:33:04:0d:9b:f8:00:96:11:5c:bd:a0:69:ff:
4e:d3:3d:37:0d:bf:ce:e5:6f:aa:df:e6:56:d1:05:
af:87:d2:69:92:51:1a:17:fe:6a:82:cc:3f:51:ab:
dc:2e:76:91:3e:82:3a:59:96:c3:3e:9f:ac:5e:7f:
5a:82:b9:ee:09:75:96:0e:ca:8d:47:a2:22:2a:09:
61:c0:cf:c8:45:3d:77:0f:e6:26:19:24:e2:ad:8b:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:47:0C:96:D5:AB:B3:33:10:18:00:77:0E:CC:70:E9:44:DB:CB
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f7:78:64:71:78:73:e3:21:b7:a9:d0:fd:57:2f:7c:98:69:
ff:8b:cd:69:61:66:cc:3e:8e:7e:fa:96:9e:c8:4f:d3:c7:57:
3a:6a:c0:0b:ae:17:02:e3:ab:32:81:0d:a6:1d:f9:e1:c5:20:
25:bf:5c:16:2a:33:86:33:ac:b2:be:0e:7a:92:46:22:a6:93:
02:41:2d:54:c7:02:e1:08:51:df:84:29:ff:c4:ea:be:48:a8:
a1:a1:9c:a4:fe:a6:8a:35:76:a4:cc:62:9b:4c:c0:30:c2:26:
43:e6:b1:9a:ad:87:f3:51:70:01:6b:9f:13:8a:33:f7:d4:0d:
ec:5c:0b:21:bc:42:fa:e3:d0:cb:81:c7:b4:74:0e:d0:05:f4:
61:a5:16:e9:af:59:c6:5e:7f:1e:51:9f:4d:11:a1:47:69:b5:
1c:bf:70:84:64:a3:29:8e:35:d0:7e:a0:6e:61:ff:84:93:d5:
8c:f2:a9:dd:9e:b1:39:9e:0d:cf:45:e3:1e:ee:0f:b4:67:19:
6b:10:96:11:b1:25:23:62:b1:9c:ef:27:a8:8d:a5:29:2b:0a:
3c:e9:48:2d:ad:39:76:f5:3a:d4:c6:59:69:6b:b5:dc:f9:06:
01:0e:09:dd:e7:ba:29:34:01:55:fa:f5:29:2d:3c:2f:36:7a:
0f:f0:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:29 2026 by rpki-client