Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: YXbCDU0iMQWH5yy02r9LD+I/3xFF6z/fprV8ma2Cl3Y=
Subject key identifier: 8B:C7:87:C9:77:68:E2:FB:01:5E:0D:C0:9A:08:16:9D:A0:CC:B3:10
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019D29296B8821BD210905291FE2E8C55991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1369
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: 1d9a99Dhn3W4VP1keogyzkKar3r/x09AFOUt4TVM5AE=)
2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
3: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6b:88:21:bd:21:09:05:29:1f:e2:e8:c5:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=8bc787c97768e2fb015e0dc09a08169da0ccb310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:7e:b5:db:fc:80:0f:53:8f:03:98:de:e1:
03:8c:9c:87:08:d0:f5:7b:65:46:c2:51:c1:e7:76:
e9:42:f0:53:e7:22:9d:2b:fc:25:f0:98:2f:80:69:
aa:4e:14:2e:aa:96:58:17:3c:26:24:f1:c1:03:e9:
0e:b0:09:22:40:f1:10:65:47:17:27:97:c7:f3:c0:
f1:65:ed:61:86:37:e4:20:a8:30:6d:e9:93:65:2a:
08:42:a4:e0:28:de:75:d4:39:d4:ca:12:68:64:66:
6a:2d:b1:f8:cb:de:88:a9:69:8e:7c:d3:66:2c:ff:
4a:98:bf:26:4f:1e:8d:2e:ac:18:1d:28:9b:b3:04:
e9:0a:18:6d:ff:d4:ef:9e:f3:e1:a7:4b:67:17:75:
3f:47:ef:df:4b:28:cb:5f:32:61:4b:62:32:83:11:
83:a1:c6:95:2a:78:dc:12:d0:f5:b5:64:8a:3d:4f:
9c:68:f5:49:0c:76:0f:6a:45:b6:b6:b6:35:c0:0c:
bd:96:b9:f1:e8:b6:4e:02:7d:a5:81:9d:3f:dc:b0:
c4:35:09:98:18:19:55:a6:93:37:14:fa:ac:5f:9b:
bd:e4:c9:3f:f2:52:ab:b0:b0:06:4e:59:44:b9:a9:
b1:64:f3:15:31:8c:3e:fc:61:d0:7d:e0:6d:b7:5d:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:87:C9:77:68:E2:FB:01:5E:0D:C0:9A:08:16:9D:A0:CC:B3:10
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:33:2f:78:83:04:94:91:00:37:33:a6:7c:67:db:2a:28:b6:
00:6b:c2:12:91:70:de:81:08:5a:57:38:65:ac:b4:2f:09:d2:
d6:0a:ea:75:b8:0d:be:df:80:bd:fe:98:83:26:99:ba:24:fa:
48:ac:bc:da:cb:09:c8:b6:a1:11:19:ab:40:e6:6a:9a:18:29:
60:e0:c6:6e:37:17:24:89:5a:64:32:22:83:8b:13:94:f6:68:
6c:30:9a:22:23:91:e5:bf:9b:b2:2b:6a:4b:7f:29:b7:d8:61:
ab:26:ed:79:5d:05:ca:7a:c1:f0:f5:cd:89:3a:1f:e9:8a:d7:
a1:d0:37:f7:f0:1f:53:9e:0d:a9:11:c3:68:f0:f5:fe:96:82:
43:7a:13:8a:6e:1c:de:81:9d:81:26:71:27:a1:3a:8b:1b:9c:
0d:af:78:3b:fb:a4:84:70:10:52:69:8b:6c:df:b2:bf:33:19:
db:78:4a:15:c5:0a:66:68:10:c3:5c:c9:bc:94:0b:1e:7d:fd:
52:8d:b0:82:8d:ed:d3:5c:35:e4:22:b5:d9:6d:89:d5:34:c4:
99:b8:cb:93:41:76:b0:22:a9:37:3d:22:3c:1a:ac:04:14:db:
3b:71:f5:20:1d:26:fc:0b:64:0e:4c:da:7f:90:34:af:1c:40:
99:56:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:42 2026 by rpki-client