Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: OZVNJn6za0ZP36aQFgPAO5e9ogavvDjjBvSY10BGfaA=
Subject key identifier: B2:A5:F6:22:7F:9E:0D:C7:61:37:C1:2F:42:40:A2:E5:EE:41:DF:D0
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019D27039975AD96A78F666E9EC92ACB04DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 06AA
Signing time: Wed 25 Mar 2026 22:00:40 +0000
Manifest this update: Wed 25 Mar 2026 22:00:40 +0000
Manifest next update: Thu 26 Mar 2026 22:00:40 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: 2/vOYUIbtsnalZKzt6bIWhMzJyEaCQgOJjjayzkmrjE=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:99:75:ad:96:a7:8f:66:6e:9e:c9:2a:cb:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Mar 25 22:00:40 2026 GMT
Not After : Mar 26 22:00:40 2026 GMT
Subject: CN=b2a5f6227f9e0dc76137c12f4240a2e5ee41dfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:8c:b0:08:67:49:be:e4:fb:ea:56:63:1f:
ec:18:ef:ca:cd:4f:96:b6:9f:1d:ef:0a:07:af:60:
2b:1c:be:31:3a:63:cf:b0:0e:23:66:1d:44:7c:49:
37:69:19:f2:c0:b9:94:ef:d7:db:3e:ed:56:40:ca:
9d:ee:61:3c:8c:0f:18:30:27:ea:39:6e:2b:c7:26:
48:ab:3d:9f:f3:ae:0c:62:87:f1:31:fb:54:4c:65:
a9:a3:fa:1d:b3:4f:15:18:1a:29:ed:ed:1a:4e:f8:
2d:7c:19:f9:84:63:ee:be:7f:59:bb:05:3b:11:ab:
0a:b2:5a:9e:ae:90:5e:31:e6:7d:3d:c1:dc:99:03:
b0:90:d0:04:8a:03:fe:42:87:95:89:78:34:2a:84:
92:b6:69:ee:13:aa:f2:16:01:6a:43:02:88:ef:f7:
3f:29:b3:00:84:72:d0:8c:54:1a:4b:d2:9b:fb:4d:
72:f4:83:2e:fd:4a:16:40:2f:1d:48:b0:8a:49:a5:
62:4c:06:ea:56:95:9a:8b:f6:b1:00:81:8f:24:fa:
de:57:dd:33:90:4e:00:7a:f7:5c:48:27:3b:c4:a9:
d6:c3:ac:4e:fb:63:f2:9e:bb:46:16:67:d5:45:bf:
40:ef:9b:0b:26:f8:1a:2a:25:8a:41:38:ba:39:83:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:F6:22:7F:9E:0D:C7:61:37:C1:2F:42:40:A2:E5:EE:41:DF:D0
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:69:19:21:ef:d8:bd:62:20:c3:db:6a:80:83:92:29:a4:
2f:5a:c1:23:e2:fe:c2:ea:d8:40:37:1f:be:1e:f8:b3:b0:50:
10:8e:fd:e8:10:fb:a8:be:41:c2:3c:dd:0d:75:b7:08:3b:4c:
27:d1:a2:2d:27:92:d7:d9:91:9a:a0:50:7c:2a:a6:79:99:e0:
10:61:04:59:80:61:49:21:64:c5:ff:e7:1e:cb:c7:8c:e1:8e:
a9:fe:11:e8:c8:27:b6:54:98:1e:11:85:d4:92:95:99:5a:83:
6c:3c:f5:71:ab:c6:4e:8c:c7:18:bf:3c:77:36:3e:72:5c:f2:
57:f4:10:ab:46:47:96:64:16:b4:1c:06:80:2d:16:dd:de:ed:
54:74:fb:8b:a8:9c:b1:73:c6:16:da:87:c7:28:41:d3:79:89:
a5:2b:7a:31:2f:f4:7e:7d:ae:a1:0d:91:2b:97:48:1f:16:13:
58:1e:80:2d:85:7a:93:c6:df:6c:85:90:fc:16:27:6f:f5:be:
cf:6f:98:13:ce:ae:b4:c4:3b:ef:3c:66:0e:38:8a:ed:55:83:
12:bd:16:15:01:90:be:2c:8a:2f:85:cd:24:c2:d8:b7:19:09:
aa:23:7f:d7:91:52:09:7f:6c:55:8a:3a:fb:24:11:d5:1b:1c:
7f:fa:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:53 2026 by rpki-client