Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: /R4Weogvz4F7FTBZEU8ejbJuzOJUBXgiiJRy2dVNXYY=
Subject key identifier: 60:EE:A7:E6:10:9C:F8:54:25:0B:D9:8B:31:9E:A2:9A:42:6B:BD:68
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019D265FC0387E27ECFEA6DF8417162526AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: co3WR+CbKYHAIpIO5qhgGOWQw5xhDJde1xKBuaPlToY=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c0:38:7e:27:ec:fe:a6:df:84:17:16:25:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=60eea7e6109cf854250bd98b319ea29a426bbd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:88:b8:11:fd:58:9a:9e:ac:9f:31:86:b2:
5c:ea:93:d9:c0:1f:14:ef:24:46:ba:45:b2:d7:70:
35:9c:7a:bb:d0:74:df:00:b3:4a:b1:b9:04:72:1a:
4c:aa:53:ba:e9:9b:52:9d:82:67:c7:37:f5:a5:a8:
51:d1:31:85:29:35:a4:ac:54:e5:55:3e:70:61:28:
3f:44:bd:63:4f:3a:55:55:8c:24:09:40:71:72:0f:
33:e3:1f:4f:3e:36:1f:e7:fb:3f:c3:30:45:9e:15:
0d:4c:31:7f:41:91:2b:35:64:82:77:f6:7d:04:60:
24:94:e5:2d:e9:0b:52:78:e4:b7:6b:57:b8:a3:9a:
31:65:3f:27:d3:43:e8:6f:42:28:d1:34:ee:b7:13:
f0:c0:1f:4c:da:b3:28:2f:10:7d:23:9b:9c:e0:79:
69:3d:58:00:4a:cf:5b:97:cf:2e:87:f2:2d:37:b8:
5a:68:f8:23:fc:04:b0:52:48:11:44:5e:0b:9b:5e:
58:28:f7:80:7a:fb:7b:6c:92:6e:20:e8:9a:59:e1:
66:d2:d9:bc:ab:08:c4:cf:75:61:29:66:49:e6:ab:
84:4a:71:70:b5:41:89:30:ef:b4:16:84:f3:46:54:
bc:38:a7:47:33:c4:3e:0f:5e:b3:72:55:1c:81:5e:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:A7:E6:10:9C:F8:54:25:0B:D9:8B:31:9E:A2:9A:42:6B:BD:68
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8f:6f:28:df:51:43:f2:5f:34:e1:d9:b5:86:43:59:f5:10:
ce:03:ac:0f:5c:9a:33:fd:f8:ba:2a:4f:02:be:f0:71:a4:5c:
46:c7:e6:1a:29:1b:15:68:e5:37:f1:ea:44:e9:3d:04:23:2c:
64:b5:91:f4:5b:1b:da:30:a8:a5:da:2c:14:ca:16:15:9e:b6:
00:2b:f4:1a:0f:ec:51:dd:fb:5a:50:86:c0:54:e4:10:49:f5:
39:db:34:fb:2d:0f:cc:8c:ea:96:69:51:79:3c:5b:0a:1d:54:
ab:71:41:82:25:f0:c0:7b:43:ce:37:de:dc:23:01:58:50:fe:
0a:4b:ee:22:c6:bf:ad:f2:e2:5b:39:c1:69:32:67:76:91:2b:
70:8e:19:7e:03:f2:fe:cf:7a:d8:9d:61:c9:d4:99:18:0e:2e:
80:4e:16:7d:f9:e4:0e:8f:de:8a:77:fd:01:e9:27:ce:5a:67:
93:23:70:66:c7:f7:a9:21:40:34:09:4b:c7:63:26:e5:c0:3b:
4f:7b:d9:8f:f5:da:0c:ac:1f:06:cc:69:6a:40:87:d3:f4:d9:
f0:70:b0:bb:0b:c2:d9:09:7c:c6:dd:a8:1f:ee:70:bb:1f:67:
1e:be:4d:2a:f7:ee:a8:ad:64:5a:78:7e:80:6d:22:26:a2:22:
e3:7f:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:32 2026 by rpki-client