Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
File: cUnH5wIxqJKP1dBDV6zrbMD0pps.mft (raw, json)
Hash identifier: wJOeM89f/Q0ojAm/LoKrEfHCfBsVreXTGLIUTkh2VBY=
Subject key identifier: 14:45:6F:42:93:48:33:24:BB:96:BE:CE:E7:B7:1C:C2:66:56:96:DD
Authority key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
Certificate issuer: /CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Certificate serial: 019D322C4B21D95FAFC9F657153519E11EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
Manifest number: 010C
Signing time: Sat 28 Mar 2026 02:00:56 +0000
Manifest this update: Sat 28 Mar 2026 02:00:56 +0000
Manifest next update: Sun 29 Mar 2026 02:00:56 +0000
Files and hashes: 1: cUnH5wIxqJKP1dBDV6zrbMD0pps.crl (hash: W1m9JA60RaUkyq0bUYm6lhVegag70x+SzUiRq5fDYuc=)
2: ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa (hash: 0fxFwiqIoNJ/zuzpmQRPOaOizXH5J3OzKbBQv5ulBVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:4b:21:d9:5f:af:c9:f6:57:15:35:19:e1:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Validity
Not Before: Mar 28 02:00:56 2026 GMT
Not After : Mar 29 02:00:56 2026 GMT
Subject: CN=14456f4293483324bb96becee7b71cc2665696dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:10:39:19:60:b5:f8:17:89:74:ab:9b:26:f8:
7c:52:85:69:7f:3f:86:90:1b:bd:51:7c:d4:ee:94:
90:d2:fe:4d:10:05:aa:83:68:ed:a7:18:ad:0a:44:
7c:6a:38:7f:0a:c0:d4:37:51:4b:4c:85:29:52:26:
dd:1d:05:04:f2:e2:0c:19:c2:0b:3b:7e:cc:df:4a:
06:7e:fd:9c:f0:5b:fc:64:dc:31:f4:0e:60:33:f4:
71:c2:46:6b:17:ec:b6:4e:bf:1e:cf:66:63:44:37:
d0:7b:94:e9:6e:91:3e:d0:de:71:fc:81:e3:50:df:
8b:02:65:16:25:b3:88:5c:5a:89:0f:fe:55:a5:5d:
8d:0a:fa:28:2e:94:85:7e:51:fc:b1:19:d6:c1:7a:
da:ec:a8:83:f9:e6:7f:f7:f2:09:1c:03:30:0c:27:
8f:c2:24:52:ae:c9:82:f2:be:5f:75:b3:dd:67:31:
50:57:be:88:a1:e4:7c:91:12:86:9c:0d:a1:a8:35:
59:1a:d4:2d:9b:33:4f:c4:7a:14:92:c7:0c:38:bb:
7b:a0:72:e2:9f:90:03:25:72:8c:88:b0:da:65:9f:
f2:43:13:dc:1d:cf:60:63:d7:8e:c2:64:ba:09:e2:
e5:e2:f4:91:50:9a:87:4a:9d:26:78:e8:fa:90:f9:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:6F:42:93:48:33:24:BB:96:BE:CE:E7:B7:1C:C2:66:56:96:DD
X509v3 Authority Key Identifier:
keyid:71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:8b:2d:8a:d6:d8:36:e6:65:70:d5:32:c9:1e:fd:4c:eb:
3d:5d:10:c3:89:eb:45:31:9f:08:53:c6:1e:fe:95:53:2e:0e:
98:b4:78:ea:81:a4:80:f8:88:73:cc:74:40:62:b1:ff:53:fb:
51:b1:97:a8:64:d0:7f:bc:91:2e:50:8c:29:92:60:be:c6:63:
b6:b8:48:66:2f:92:81:aa:f3:22:ed:2c:89:03:c8:b7:11:36:
67:33:e1:6e:86:85:11:8e:43:ae:79:07:e2:39:e2:32:a8:74:
0d:5c:94:b3:62:bb:a8:38:70:3c:6a:95:81:25:62:da:d0:cd:
18:b9:11:63:c6:e4:d5:bc:a8:73:ab:34:19:a5:07:9e:fb:1d:
e6:56:c5:7f:f5:14:1d:fd:67:db:2a:9f:b3:19:f4:37:aa:eb:
a2:9a:bc:53:39:3d:5b:c5:f5:e3:47:6c:6b:ec:64:17:5e:b0:
ed:f2:52:fa:a7:56:8f:6d:55:98:5c:da:97:43:e7:f9:27:3f:
fd:58:60:24:e2:47:40:ee:f6:74:48:61:14:de:87:fa:23:ad:
a2:12:d4:b7:6d:91:e8:45:24:58:39:e5:17:22:9e:ff:fd:f1:
3d:aa:18:e3:2c:8b:d8:8d:b1:49:16:f0:00:de:4b:ce:16:14:
c7:9d:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:48 2026 by rpki-client