Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: rdPBoTkKk1Y3pdK37Mz+ZQ5XUHvvph2phS6vkGL6/0Q=
Subject key identifier: 6B:56:B5:85:5C:B1:1E:95:AF:6E:68:D6:40:2E:EE:28:2C:29:A1:86
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019D3263629DF5F4B5720C7FFDEB994E9D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0602
Signing time: Sat 28 Mar 2026 03:01:07 +0000
Manifest this update: Sat 28 Mar 2026 03:01:07 +0000
Manifest next update: Sun 29 Mar 2026 03:01:07 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: z0Mn6acRiZAMcUUghqb1gJZKrcQr7ANt+nu3ilIf/vY=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:62:9d:f5:f4:b5:72:0c:7f:fd:eb:99:4e:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Mar 28 03:01:07 2026 GMT
Not After : Mar 29 03:01:07 2026 GMT
Subject: CN=6b56b5855cb11e95af6e68d6402eee282c29a186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:ff:33:3e:40:d8:b9:48:fc:ee:ad:19:52:
16:cd:97:2a:d0:f0:42:09:48:a6:dd:10:0a:2f:aa:
73:3a:39:af:8f:28:70:c5:b2:7b:77:dd:c8:08:ab:
39:8c:ad:aa:30:12:22:21:d7:df:46:07:e1:75:df:
78:46:3f:3f:af:98:22:39:9c:a7:39:e8:19:15:a7:
83:90:92:53:a2:4e:f4:d9:cf:8a:5b:38:56:98:b8:
f0:9d:31:56:59:aa:5f:09:98:db:0d:b2:ed:a7:83:
e0:78:cd:de:fd:85:09:c3:87:36:88:60:32:c0:aa:
7e:16:7c:da:ba:0f:94:5b:8a:fa:e6:0b:ec:68:2b:
e6:e4:3f:68:fc:3f:31:34:2b:7a:33:d4:b9:bd:74:
09:a5:b3:ad:ff:4f:ce:37:f2:66:9f:03:b5:c7:3d:
20:e3:fb:e0:8d:08:f2:83:a2:2d:c6:39:20:ec:c4:
36:7b:8f:1c:24:8b:fc:cb:1c:6e:cc:0f:7d:2a:5e:
88:63:92:9a:52:77:64:7d:7c:c0:9d:a7:69:81:b9:
cf:79:f5:d2:ab:1e:53:93:ef:e6:30:b9:3b:4c:3c:
26:95:6e:66:6a:99:96:e1:ee:72:7a:e3:46:17:bc:
d7:bd:d0:09:0a:bf:3e:f8:13:56:b6:3a:fd:b6:28:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:56:B5:85:5C:B1:1E:95:AF:6E:68:D6:40:2E:EE:28:2C:29:A1:86
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5c:d3:f7:e5:cd:ce:b3:e1:f7:e3:21:b2:44:06:64:ca:a5:
b4:74:47:5b:18:24:29:74:80:a7:2b:67:d9:ed:7e:a0:6f:10:
72:2c:10:e4:6f:de:52:c2:81:70:5c:27:f4:8a:97:78:57:d5:
c9:d7:3b:a2:de:ba:25:d9:1c:ef:9f:41:ef:8e:09:69:31:ee:
57:fd:c7:58:94:83:ed:fa:6c:76:ea:06:64:3a:19:6b:cd:d8:
2e:8f:dd:a5:b7:4e:34:f2:89:5d:58:73:fa:cf:e2:fc:c0:74:
b0:1e:26:ce:84:c4:80:fd:18:25:3e:04:6f:08:20:f5:6b:65:
af:4f:03:81:3d:56:8d:bf:55:15:7c:29:df:51:d5:dc:cc:ec:
ee:a1:a0:c2:b8:ea:63:38:fa:10:bf:eb:4a:d3:43:25:bf:5d:
70:67:9d:d2:f9:fe:37:a5:3d:f2:30:79:07:c9:81:c3:65:17:
bc:e4:c9:62:07:06:77:05:3c:db:08:25:46:b8:9b:04:e8:ea:
35:ca:ed:50:c7:ab:40:5d:14:16:c1:c7:11:a7:71:b5:6b:c3:
0c:6c:58:20:27:a5:fe:f5:5f:9c:89:1f:80:44:f3:c4:37:bd:
32:10:36:e4:93:a7:0f:ed:eb:a1:b0:a2:e7:98:ab:91:db:ed:
2d:e3:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:07:33 2026 by rpki-client