Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: +M31S0azUY7SnxPN90AvkAJFccEDh1VtrTm1KjgkLR4=
Subject key identifier: 77:BB:C8:78:AA:37:EF:40:12:60:3C:BF:26:49:C6:C7:BD:A6:ED:AD
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019D2A048DCF3B7A6FAF3A510A3D123C823C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 12:00:34 +0000
Manifest this update: Thu 26 Mar 2026 12:00:34 +0000
Manifest next update: Fri 27 Mar 2026 12:00:34 +0000
Files and hashes: 1: MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa (hash: PycaTW4K59wW80aiPDoqRYwdmZTOHKaA4NMu7/9B2n0=)
2: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: bRGOmxMBhc78kyNPTvJ6+TSS8IGuBFOgkJua4F5KBxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8d:cf:3b:7a:6f:af:3a:51:0a:3d:12:3c:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Mar 26 12:00:34 2026 GMT
Not After : Mar 27 12:00:34 2026 GMT
Subject: CN=77bbc878aa37ef4012603cbf2649c6c7bda6edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:bc:6f:3c:cb:07:3b:5f:81:cb:71:aa:a7:
cf:0e:c8:2b:7b:f0:cc:25:8a:32:55:e7:66:9e:ba:
b1:55:54:3e:4a:2b:ee:40:fc:07:99:52:2e:5e:34:
92:f9:05:6a:81:8a:4d:0c:28:fe:6d:6a:ab:d5:16:
3b:1f:c3:ce:5c:a1:96:51:64:1d:24:be:7b:a8:cc:
cb:f8:1f:e6:d8:99:ca:39:e2:10:7d:b8:d0:37:4c:
b0:d3:ee:74:98:ce:41:c4:d1:27:3b:76:a8:bd:c3:
ce:ae:5b:3c:c3:e2:ae:b6:3f:c1:71:5b:16:9f:56:
f2:87:4c:49:f8:5d:88:db:39:b7:5f:40:dc:5e:8c:
70:93:e8:a5:0f:29:1a:22:0d:d8:25:32:6e:b3:a2:
ef:b5:e4:f9:54:47:a3:d7:61:4c:a6:66:0b:66:27:
5f:e9:2f:35:01:60:39:37:10:77:19:94:d6:e4:ab:
a6:84:83:e0:fb:3c:cb:89:ef:66:5a:0f:88:85:17:
a2:d3:d1:6c:6e:ac:94:c3:33:20:f9:99:af:c2:ea:
ed:aa:7a:7b:a8:fd:3c:56:9f:13:a7:88:9e:41:cc:
c6:dd:e0:de:dd:a7:76:e8:9b:56:0e:e6:fa:cc:11:
eb:1a:60:90:09:ab:52:1d:39:64:3a:66:31:91:af:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:C8:78:AA:37:EF:40:12:60:3C:BF:26:49:C6:C7:BD:A6:ED:AD
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:01:17:9d:00:4f:b3:8e:9f:39:6b:2a:17:1f:8b:e6:23:
92:b1:9b:5e:a3:de:00:fa:21:22:09:c3:a4:8c:b4:7d:55:e9:
c4:03:06:82:34:f5:79:2c:df:ed:c5:c3:a4:d8:6f:92:44:60:
31:9f:7f:9d:7c:9d:dd:b0:6e:c0:11:53:5c:d1:6a:94:00:85:
21:eb:d1:45:5e:27:da:68:2a:18:7f:41:06:9c:ad:0d:47:a3:
a9:f4:62:b3:ae:3e:24:66:4d:17:1c:e3:39:40:20:7b:db:9c:
c8:7c:a0:79:c9:c0:67:4a:fd:3a:c2:3e:11:d0:d9:1d:92:e1:
17:0a:2b:20:c3:98:56:e1:52:63:63:ae:18:ad:d6:8d:df:57:
19:40:f1:c3:2a:06:89:ec:4f:28:c6:ee:6e:8a:65:8e:ad:c2:
0d:50:ef:c7:a9:2c:ea:89:ed:01:c8:3c:9b:1c:6b:16:31:c5:
92:c8:a4:d7:1f:26:9f:d2:2f:57:eb:97:72:ef:c9:3c:c6:c7:
7a:3f:e3:25:07:8f:66:88:aa:b3:9d:41:55:bc:e8:0d:2d:55:
0c:e2:0f:69:9d:c0:e8:63:55:73:d1:9e:11:45:eb:cc:ab:9e:
32:3c:a8:02:52:b9:cc:00:6c:3c:ca:86:88:96:79:97:ae:03:
dd:20:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:49 2026 by rpki-client