Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: L6XD9vZsDGv6Y/JfFz/qA56zGfvLEVB5tlD6AD7xw8Q=
Subject key identifier: AB:D0:D6:97:A1:24:AA:BF:5E:85:5B:10:E8:09:02:D2:29:DA:CC:6B
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 019D254C94CE7141D5B28DEF1AF53BD37FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 140C
Signing time: Wed 25 Mar 2026 14:01:08 +0000
Manifest this update: Wed 25 Mar 2026 14:01:08 +0000
Manifest next update: Thu 26 Mar 2026 14:01:08 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: yhoCobT3bp2eQjmRnx7lKY9ei+MJsREky47phD5BmHc=)
2: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (hash: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q=)
3: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (hash: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:94:ce:71:41:d5:b2:8d:ef:1a:f5:3b:d3:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Mar 25 14:01:08 2026 GMT
Not After : Mar 26 14:01:08 2026 GMT
Subject: CN=abd0d697a124aabf5e855b10e80902d229dacc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:8d:a9:00:ff:4d:4f:b6:c1:eb:9e:76:bf:
5f:c4:1b:c7:9f:ff:1c:3f:12:8b:99:71:e5:ab:4c:
4d:d1:bd:80:1d:9d:cc:b2:f6:87:3b:ff:b2:64:be:
13:17:2f:a5:11:1f:b1:e2:4a:78:67:0e:36:b8:88:
83:3a:62:51:c8:bd:33:f9:54:33:98:0c:46:14:2e:
22:f3:01:0e:0a:01:52:86:bf:60:a4:93:fe:f7:fa:
8b:3e:4a:08:d2:36:e0:ab:7b:3a:d3:44:e7:b9:14:
06:44:30:bb:94:e3:13:d5:b0:7c:a0:9f:53:1d:e2:
c3:97:7c:a7:e0:36:cb:89:07:1d:17:f9:98:d6:23:
86:2c:59:91:c6:22:c9:b2:29:53:54:34:e6:0a:55:
59:eb:95:f6:18:9a:df:66:c4:07:1b:7d:a0:7e:41:
46:c9:1e:1c:35:23:d0:ec:81:28:6b:d6:62:c1:ea:
ee:fc:e6:5a:33:e3:7d:06:27:47:69:64:e0:a4:f2:
ee:09:eb:29:f6:a3:b4:38:1e:8a:cf:69:8a:98:1d:
76:78:b5:2a:c5:37:2c:56:eb:5b:2b:d2:a5:96:12:
85:83:97:54:09:0b:e4:ad:98:91:63:45:64:34:cb:
fc:4a:f8:74:90:fe:b1:d8:82:a2:1d:ba:84:eb:4c:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:D6:97:A1:24:AA:BF:5E:85:5B:10:E8:09:02:D2:29:DA:CC:6B
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:14:e4:31:2a:9b:0b:24:5b:06:93:14:7e:a1:e6:0f:2d:
5b:8b:ff:5b:82:a3:d3:f6:aa:15:0a:f6:be:62:f1:d5:a8:fd:
26:fc:ad:13:6e:fc:fa:e0:94:82:4b:da:eb:4a:f7:3f:ca:0e:
4d:9b:26:c8:3d:42:6b:d6:37:e2:15:33:5d:7a:37:77:4b:8b:
a4:78:70:71:e1:1d:9c:87:ef:30:48:ac:b3:fa:ed:32:d1:5b:
7a:b5:2e:65:9d:ed:d5:80:42:ef:d6:a1:56:b7:8c:ca:e5:ad:
b1:58:ab:b1:d6:05:1a:93:96:45:cc:d7:cc:07:ed:e7:a8:6b:
52:d2:9e:6a:49:34:fc:f6:df:d3:13:47:5f:71:90:af:eb:3b:
ef:bb:48:e4:63:67:1d:00:ce:d4:4c:dd:52:7f:9f:d6:f6:ed:
e8:e3:3c:2a:ab:4c:ff:25:16:b5:fe:1f:59:4c:fd:90:2d:9b:
5c:59:72:11:13:e1:45:74:45:ad:02:a4:19:17:19:de:59:ad:
64:87:d7:8e:6e:de:2b:a6:e9:9d:e4:68:9c:4c:b5:5f:e6:8a:
9c:1b:05:0b:99:5b:ff:e7:c9:c7:8e:8f:87:30:e7:da:b2:1e:
7e:73:f1:eb:31:05:1c:83:5f:ab:86:d4:01:0c:84:02:48:03:
fb:ad:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:00 2026 by rpki-client