Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: 5Fb/TZmWAiMO8wQWxiHW5tQpXZBq3D7S5SpiPzduJbA=
Subject key identifier: D7:67:91:65:08:81:FB:E2:2F:A5:96:4B:CD:C6:91:E4:E5:B0:E3:12
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019D27DFF70233DBD7CAFA7729C0C9AACB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: N/lQMkMI9un1oZ8kZffHwmUSNcRd/aLWl5TYmLaT2lg=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f7:02:33:db:d7:ca:fa:77:29:c0:c9:aa:cb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=d76791650881fbe22fa5964bcdc691e4e5b0e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:12:ee:e0:f7:d5:55:f0:c5:6c:22:bf:36:
33:ab:c4:72:72:7b:13:40:ce:af:bc:38:b7:4b:12:
c2:36:a0:25:b8:e3:7b:b3:99:cb:22:c6:ec:00:85:
d6:48:36:45:d3:c1:16:09:0a:70:e4:ca:cb:4c:88:
2f:ff:02:66:78:c4:e5:1c:7e:11:56:d0:61:40:32:
82:29:12:93:86:1d:e0:6c:a0:18:57:ab:3a:a0:38:
3d:d9:4f:4e:e0:99:76:c5:86:db:7b:ba:95:71:c9:
81:08:5c:16:9d:66:e2:d9:37:18:38:8e:1b:98:18:
ca:8a:82:38:42:fa:52:38:c0:f8:19:df:9d:0d:b5:
c8:b4:54:55:05:c1:28:27:2f:56:db:77:72:b7:7d:
72:38:4d:a5:cf:42:91:02:17:db:1a:f2:e2:d1:41:
33:4c:fc:c7:9a:98:bd:33:9b:22:02:24:2b:d8:55:
45:d6:5f:c1:a2:13:44:99:30:2a:52:81:a0:24:a4:
87:11:50:25:9d:61:c7:a8:1c:fc:6b:50:e9:1f:b8:
90:37:c8:d1:91:7b:dd:d8:96:c7:05:e2:93:53:56:
40:b4:e3:85:3e:71:d2:5f:1c:bc:88:9d:5d:75:b9:
84:fe:1e:5f:c0:6a:1c:af:4b:21:9d:9c:41:48:b8:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:91:65:08:81:FB:E2:2F:A5:96:4B:CD:C6:91:E4:E5:B0:E3:12
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c4:45:2c:43:99:a6:57:e2:44:5a:28:ff:e3:f6:d8:7f:94:
9c:34:8d:02:82:82:1f:bf:50:bf:0e:e1:98:4b:41:1c:02:20:
6e:64:d4:c3:07:ac:fb:0d:c1:ef:4f:15:da:c6:67:dd:18:4e:
b8:21:cd:4f:e2:c3:5e:c3:38:3c:dd:e4:cf:5b:ae:80:d4:c6:
d0:cf:a7:1e:33:5b:50:f7:62:af:bd:f3:1a:ce:23:31:64:a9:
b8:1d:b6:46:de:d7:3a:3c:bb:5d:aa:fc:b4:43:30:fd:44:a6:
d0:dc:be:43:36:99:7d:25:0d:a5:47:4a:9c:30:f8:02:4c:4a:
7f:56:84:6b:b1:5d:58:19:90:99:66:4c:86:26:36:c3:bd:2a:
1d:c1:f1:73:f2:dc:aa:15:5c:99:87:3d:ee:e2:d2:02:14:72:
d6:05:99:db:65:1a:fd:99:b2:6c:2f:dd:4e:f9:ce:5e:86:13:
4c:da:20:b5:2e:fe:a4:9b:27:17:fc:a4:f2:23:a3:e1:31:41:
d0:a2:a8:bf:72:01:ec:3d:e3:77:35:b3:eb:76:e1:f0:ae:43:
90:f1:33:ec:08:72:d4:49:69:0f:fb:6b:d9:d1:6d:ac:8e:9b:
6d:cb:2e:cb:34:ab:35:47:4a:5d:bb:e3:8a:7a:c5:9b:81:2b:
32:80:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:45 2026 by rpki-client