Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: KNRvmgTpQCh0xIGdif5DLG07rcRWxq5uXN1iOO//I8E=
Subject key identifier: 8F:65:8E:17:7A:03:C1:FB:84:92:F1:36:A3:D8:CB:5C:8E:71:8B:AB
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 019D27A8F158E06655B894E15AED304343FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: CGASqwsZcGaWA7KhgQteEYO55EY.roa (hash: wP8KXOiWGgF6XyMWqWY5eIrUa40yWygDD4xGf13foh4=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: Bs41YlgW8huJLJ7wpQ2AEPjlq3AYazfAxh6tW0ZNTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f1:58:e0:66:55:b8:94:e1:5a:ed:30:43:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=8f658e177a03c1fb8492f136a3d8cb5c8e718bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:26:8e:d3:93:07:bc:49:ec:d0:4d:a4:a7:
5d:b2:48:2f:7d:ba:99:24:9c:53:19:9b:fd:8e:be:
85:b0:1c:33:f4:9e:b4:66:43:04:02:84:16:2c:5b:
57:d0:9a:78:7a:94:ab:e2:30:99:2c:a9:39:cf:6d:
c9:26:77:77:9a:5a:d5:28:fc:16:ad:f7:3b:e1:cf:
f3:cc:9a:34:29:df:a7:14:f0:12:06:4b:7e:f0:1c:
3d:af:d4:16:de:6e:7a:a3:a6:d2:83:44:c2:81:98:
76:7a:0f:04:1c:a0:40:7f:79:5c:53:72:97:80:be:
2e:56:53:16:ea:81:81:04:9e:ed:76:d8:2a:0e:ac:
98:94:b6:9c:17:65:9e:80:0c:59:79:66:fe:eb:53:
52:1a:27:aa:51:ee:bc:b1:ce:fa:ab:fb:d8:59:25:
86:1c:07:0a:39:e8:5c:84:22:c5:ec:5e:88:6f:5e:
21:59:8c:c4:1b:de:1b:cd:c5:66:b3:6e:02:75:4a:
b5:39:b2:9c:17:38:8c:30:92:ca:43:24:47:f2:74:
7f:f1:54:1e:16:c8:de:92:05:55:02:77:26:10:02:
6e:83:70:0f:88:69:e2:3d:72:36:f2:3a:07:d0:b6:
17:6a:ad:91:a5:83:77:7a:39:09:df:58:e4:cc:b1:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:8E:17:7A:03:C1:FB:84:92:F1:36:A3:D8:CB:5C:8E:71:8B:AB
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f7:32:2f:1d:6e:83:1d:2d:45:fd:a9:10:50:37:32:4a:a2:
19:ae:ba:fc:0e:25:a5:e3:9a:8e:2c:b7:d9:ba:5c:9c:f4:e1:
25:5c:91:c7:db:3e:2c:b8:76:7c:fd:fc:98:b5:09:52:b9:64:
00:f3:48:a8:49:38:61:f9:7c:e2:eb:e3:c7:44:d7:41:dd:07:
a4:7d:45:b0:cc:8b:42:b0:73:5c:dd:33:c3:90:22:2c:69:bf:
b0:b9:d5:5d:08:40:b4:92:cb:4a:f6:72:a1:33:c0:31:ba:17:
2b:d1:73:ad:48:35:af:97:f4:9d:e8:4c:08:76:4b:80:79:60:
62:e8:20:73:2b:d5:e9:35:fd:72:62:77:50:a4:9c:08:ae:62:
58:5c:5f:b3:7f:c3:35:d7:0b:86:1f:a0:b1:a0:3a:a7:93:84:
ec:84:4d:3e:ff:9f:3d:68:cc:fd:57:2d:80:17:4a:5c:69:0f:
a7:cd:2c:b3:61:40:ef:52:df:e8:dd:fb:95:66:d3:25:83:e2:
13:d2:c9:f8:55:17:12:c5:9c:7a:77:05:56:64:c9:8e:0f:41:
82:78:51:1f:70:3e:2a:6e:ff:c4:64:4d:5f:90:5e:1c:f5:bf:
24:fe:09:5d:6f:df:d5:d5:2e:a3:73:f2:c3:b8:dc:17:c9:42:
9e:b1:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:49 2026 by rpki-client