Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: xCJYqKCozbX/rY4iCN9RLm7Jze0JwDpD8Cg8vZRlyhg=
Subject key identifier: 53:50:7E:E5:B6:8F:E4:C3:11:FA:15:0A:92:34:92:AF:97:CB:6B:16
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019D296172A01F558093B8B9D9281492BBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: bsqg+Swbq5sbZW1Tfzs4cVO9hTcwts7JE2y8i+uK0ME=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:72:a0:1f:55:80:93:b8:b9:d9:28:14:92:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=53507ee5b68fe4c311fa150a923492af97cb6b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:cd:c5:38:ac:37:77:67:fa:f8:74:23:0b:
76:f4:31:14:cc:a8:e1:68:02:fa:34:b7:72:3c:68:
2b:95:c4:6f:cc:8a:c5:51:3b:ae:4b:e6:a0:3b:e0:
ad:79:a8:8b:72:e0:30:d4:f9:49:3d:30:51:fe:6f:
71:11:64:9d:1f:58:d4:39:c7:56:a7:cf:54:ec:ad:
b4:90:ef:63:bd:3b:e2:23:a6:e4:1b:ba:e3:a4:9d:
e1:18:f0:52:d0:68:66:64:9e:94:6a:2c:fe:7d:66:
08:fb:78:13:a6:15:14:6d:0f:5f:1a:57:37:be:3b:
2a:b5:97:79:20:2e:e8:f5:d3:3b:49:9f:b9:1b:94:
57:5a:13:9e:f7:2e:f8:58:22:6b:e5:2e:22:d2:6e:
2f:4a:5e:83:71:2e:7a:ce:c3:24:85:7f:bd:61:49:
49:15:fd:df:50:59:1e:7b:f9:2e:21:8b:e7:0f:20:
f2:59:8e:c2:56:18:74:97:8e:72:9c:0f:13:ec:86:
b5:51:04:73:78:34:41:5f:17:c4:2a:95:4f:09:ed:
e8:0d:c1:93:45:ab:3b:ac:55:a3:93:bd:89:d2:38:
8e:ac:b3:18:ca:2b:51:de:be:81:28:34:21:06:35:
06:2a:61:88:8c:c0:86:70:15:68:37:91:e0:3a:1f:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:7E:E5:B6:8F:E4:C3:11:FA:15:0A:92:34:92:AF:97:CB:6B:16
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7b:10:57:93:1c:0e:f3:80:f0:bd:8d:8d:f5:91:3e:ef:ce:
ef:89:c6:30:80:ab:84:23:c2:e6:c3:12:d0:dd:0a:f2:81:97:
11:d1:74:32:83:a2:2b:87:83:93:38:93:ec:bd:81:0d:85:ce:
ec:21:c3:a9:34:ad:f3:7f:3f:fb:b7:5f:48:08:09:8a:99:37:
52:1c:56:0b:f1:ae:ef:53:56:39:1e:54:bf:a4:03:18:5b:60:
bf:2f:94:aa:d8:22:08:55:a2:6f:f8:ac:71:cd:2a:f3:b9:7a:
99:55:35:b0:93:7e:69:b5:60:d0:fc:4e:99:71:ed:3b:c9:f1:
71:59:f9:f5:93:97:0e:8d:2c:30:be:a4:c9:f9:cf:c1:c9:3d:
48:c8:ef:ea:84:2a:30:82:f4:9a:b8:8a:8c:cb:2b:b0:33:0c:
37:df:44:28:bd:84:11:ab:90:bb:3c:d6:26:91:eb:23:29:d9:
dd:9a:92:76:6d:ab:c4:2a:85:e3:6c:e9:ce:ec:0f:10:b3:95:
d6:74:90:15:2c:08:8a:1b:25:a2:ba:77:24:76:94:0c:8b:fb:
d6:c0:7f:64:47:5e:15:3c:10:1e:9c:61:e2:44:65:90:ee:41:
6a:97:cc:2e:e6:fe:9e:86:46:6d:6b:d2:3d:d9:f9:47:0c:e5:
ef:95:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:15 2026 by rpki-client