Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: FtksCT13/IbFWtJEYSoVKD433QuRIjkFoj3Jy1LkwBM=
Subject key identifier: D6:22:F7:8C:9E:F6:3E:13:61:B9:10:F6:EA:92:C0:86:6E:AE:00:2D
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019D2C61226D1DBD90EB3B1A5815D0927066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 1284
Signing time: Thu 26 Mar 2026 23:00:56 +0000
Manifest this update: Thu 26 Mar 2026 23:00:56 +0000
Manifest next update: Fri 27 Mar 2026 23:00:56 +0000
Files and hashes: 1: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: pewh8PSVG9syPSsDIKdK0M46qbEEScZmqRijjMmY2Zo=)
2: kghyh_nxdTf25rPoKF6M0zemjIY.roa (hash: ngurKcfdQu5xMulMoMEszSDNjnNbW5VunkobEE1hVdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:22:6d:1d:bd:90:eb:3b:1a:58:15:d0:92:70:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Mar 26 23:00:56 2026 GMT
Not After : Mar 27 23:00:56 2026 GMT
Subject: CN=d622f78c9ef63e1361b910f6ea92c0866eae002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:5c:d3:d5:e9:e5:cd:1f:5b:a4:e4:52:5f:
b1:4d:45:37:75:20:93:29:dc:a3:24:ae:8c:63:06:
1e:14:7a:7e:df:7b:74:29:04:d4:49:3c:12:3c:41:
e1:b6:bd:5f:8c:60:78:99:80:f2:9b:80:17:9f:a1:
d2:58:c7:04:bd:c4:03:51:6f:f1:0e:c7:ce:90:b6:
3b:dc:99:fd:56:76:c0:92:2b:43:9c:2e:d5:d4:10:
d2:5b:9b:3f:83:6a:51:4a:5a:c4:25:58:43:d6:40:
25:ac:aa:a1:ef:bf:08:81:22:0a:af:c4:c6:62:90:
39:73:8c:4d:33:58:f4:6e:b2:5d:e4:61:ad:28:8e:
14:75:90:34:4e:09:82:36:e1:23:90:13:71:d2:4d:
ac:b3:91:0b:71:af:05:7e:78:48:0a:75:3c:39:75:
f2:50:3a:55:5e:f3:4a:8e:eb:fd:1f:6e:b8:4b:9d:
2a:a5:21:44:2f:61:8b:62:da:7e:a8:98:34:34:02:
4c:44:ff:8a:04:c9:20:5e:6f:63:00:b4:3a:07:80:
99:51:80:f7:f1:41:70:a8:b2:b6:27:91:c7:8b:7e:
01:05:9e:2a:33:c7:70:c1:1a:20:8b:cf:6a:b3:6a:
42:cb:59:62:d3:9a:38:d6:3b:e8:6e:cc:6e:db:23:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:F7:8C:9E:F6:3E:13:61:B9:10:F6:EA:92:C0:86:6E:AE:00:2D
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:92:29:76:0a:9d:41:c0:ae:5d:0e:25:82:33:1e:aa:da:52:
db:b5:70:60:66:06:d5:7e:0a:6f:39:2d:4b:3c:58:ad:cd:16:
47:f2:1f:74:41:2b:de:22:11:55:6b:a4:42:28:4a:17:23:ec:
0c:37:bc:58:c4:b0:b3:ba:26:1c:b8:6a:68:73:b8:8a:1e:cb:
e6:23:5b:97:fc:20:41:91:d7:93:d8:88:c6:b3:63:54:7b:a8:
01:7b:cb:3b:5a:57:2d:b3:69:66:19:4b:dd:0d:5f:52:53:44:
91:9c:c6:10:16:a1:d2:02:0b:31:3e:10:1f:23:3b:8b:f8:8b:
a8:ab:95:0c:b6:e1:2c:2a:35:47:4f:fc:2d:8b:d9:aa:03:4a:
a3:81:a9:bd:de:ed:ac:e2:56:5d:08:b5:95:ea:23:25:b5:df:
6c:d2:4d:59:1f:df:6a:bc:ec:2e:8b:07:c0:12:54:b8:ca:22:
53:ab:eb:c6:63:87:62:27:b9:fa:58:32:32:49:94:25:ba:43:
5f:08:f0:28:59:3f:88:c1:dc:06:cf:00:18:74:0e:89:33:10:
b6:a8:d0:7a:8b:13:4e:13:87:61:5f:2f:b1:f0:86:2a:66:09:
3f:a6:f2:6c:3e:d8:a7:eb:4a:59:6e:60:99:09:7e:db:a9:d7:
88:91:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:43:37 2026 by rpki-client