Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: wruaSHpVa2Ir5l6ZfmCVIGyBLUtPmeTiob4TYk+Sgw0=
Subject key identifier: 06:77:15:FD:36:64:23:6E:54:E4:81:C5:3A:29:D4:25:21:BF:BB:89
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019D284DA485129CF94DCC56E71137BE3073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:10 +0000
Manifest this update: Thu 26 Mar 2026 04:01:10 +0000
Manifest next update: Fri 27 Mar 2026 04:01:10 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: JRqHMS29yQvxwE1cMwdwRxHXeCk+1zQa/ZDDD9/HvCk=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a4:85:12:9c:f9:4d:cc:56:e7:11:37:be:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Mar 26 04:01:10 2026 GMT
Not After : Mar 27 04:01:10 2026 GMT
Subject: CN=067715fd3664236e54e481c53a29d42521bfbb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:ce:6b:04:b4:bb:e3:da:dc:b8:07:03:4c:
4b:2e:26:1b:a0:3c:d8:91:83:b8:b1:b9:ac:c5:1e:
01:83:bd:7c:97:b6:9e:6a:b2:2e:94:76:e2:56:a7:
f9:c3:9d:16:ac:dc:28:84:09:7e:15:86:65:06:a8:
a7:6e:d6:54:3b:36:1a:e9:a2:06:9d:32:43:84:bc:
90:09:8a:c5:c9:af:22:6d:79:18:d4:49:e7:0b:50:
22:bb:22:95:20:e7:c2:fd:82:67:cd:8f:d1:ce:4f:
f7:6b:f6:d4:d6:9d:2e:6e:04:b2:32:57:b2:f8:01:
ef:38:74:74:a9:d5:6c:6a:bd:5e:2d:d4:99:0b:9b:
45:ba:77:28:2f:54:6c:23:b8:99:9b:90:3c:6b:97:
b8:c4:fb:09:8f:f6:28:9c:c5:bf:79:2a:d5:46:23:
45:64:e8:12:b2:77:f7:6d:32:27:84:c0:b0:31:32:
1f:28:37:f1:bc:71:1f:8d:61:c5:fb:81:66:a3:81:
6f:7b:e8:b8:24:05:31:85:65:3f:d4:54:79:4b:11:
6d:02:8a:10:63:6d:67:3e:6a:8f:d6:06:29:39:94:
c2:e1:36:59:52:19:4e:c4:0d:1a:3d:c5:6a:d9:c3:
d9:b8:18:05:ab:fe:ac:1b:c1:dc:c2:58:cf:b2:42:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:77:15:FD:36:64:23:6E:54:E4:81:C5:3A:29:D4:25:21:BF:BB:89
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:84:a1:c4:2e:49:a2:7b:05:da:d0:6f:3c:25:b3:24:8f:a0:
0b:85:79:65:69:12:96:6f:18:92:6b:71:16:d7:01:f4:74:27:
db:69:10:3d:cf:c3:89:4f:81:af:28:07:68:80:95:c8:c8:46:
49:46:a0:f9:cc:40:28:4e:a6:f5:0e:07:f2:4f:6a:b3:2e:de:
bf:db:ca:ad:b9:18:24:3d:fc:09:3c:97:31:1c:32:40:e0:40:
8f:91:d0:e1:5e:b2:6e:fe:ba:6f:88:f3:79:1b:6d:18:28:83:
39:79:dc:60:61:63:14:92:60:9d:38:61:7a:cd:4f:18:39:14:
45:49:4c:44:a4:a9:ca:96:ed:3d:9e:68:6a:85:e3:f5:dd:df:
61:9e:98:82:d7:85:6f:fe:5e:ce:1d:c0:84:96:52:e7:eb:33:
4f:32:0d:61:4c:ef:d3:fa:36:fb:f3:6a:63:c8:a7:2e:fc:30:
83:4a:e0:a6:1f:1e:f6:ac:87:19:cd:67:f8:f3:d7:23:4d:3e:
02:71:a0:b0:17:f4:6a:a1:d4:28:fd:db:b4:bc:ff:72:ba:f6:
e4:c5:58:68:69:61:d6:3e:b7:1d:12:83:7e:11:ff:fe:e6:a9:
09:1f:61:13:aa:50:fb:d3:0b:f0:72:84:f2:d8:85:5a:67:32:
e5:a6:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:34 2026 by rpki-client