Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: kwKowHMfRFDTlgMrcjpcmfKMGU2qKaEVixd79Sm9bMQ=
Subject key identifier: 9D:C4:76:7A:67:A0:63:35:D9:73:47:2A:15:CE:1D:9B:DB:92:AF:CB
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019D273AE674C3FAD3DA96D64ED146B9D0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0CC5
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: Kg6ojsCqIBiA3h3mOJZVJ1TpGRVOreiPmSX929N5oOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e6:74:c3:fa:d3:da:96:d6:4e:d1:46:b9:d0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=9dc4767a67a06335d973472a15ce1d9bdb92afcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:99:d2:21:d6:70:29:a3:83:0d:61:84:96:
fc:d7:80:5e:95:d2:17:e7:bc:1a:da:af:c6:10:c1:
c3:f9:c8:01:44:03:67:6c:d0:67:56:89:51:ed:b3:
a7:cf:64:0c:80:52:fc:a9:93:83:bf:21:89:22:46:
f6:73:aa:f4:9e:3c:38:d1:cb:cd:ac:a8:b6:e3:76:
3d:58:12:c5:99:81:20:29:74:ee:44:dc:8f:7f:1f:
fb:0d:f0:3d:b4:10:85:7b:fd:2f:2e:59:cd:77:96:
06:c8:46:88:ec:dd:eb:ea:05:4d:9f:40:e0:1a:c4:
69:1b:2f:ca:e3:41:c3:24:61:90:33:9e:d1:88:e7:
b7:00:79:b6:09:6c:1f:6a:b9:e8:de:a5:3c:58:9c:
b6:22:2f:8a:ab:d3:b5:85:3e:28:44:7d:72:8e:42:
4d:69:c5:9f:1c:52:1a:34:26:97:e1:ab:bd:fd:44:
ea:11:06:15:72:c0:63:05:82:ce:0b:d7:11:26:c3:
44:33:28:05:dd:4b:cd:e0:7c:f3:ab:33:59:d4:49:
30:f1:17:71:aa:2a:02:46:5e:8f:94:ac:28:08:89:
1d:6a:f4:a4:3d:ea:e2:c0:d3:1a:65:f0:f1:4a:15:
8c:ad:b1:7f:ea:7c:7a:57:60:26:a5:41:01:99:19:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:76:7A:67:A0:63:35:D9:73:47:2A:15:CE:1D:9B:DB:92:AF:CB
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:ed:e1:f8:4d:27:af:3f:8b:31:a4:a4:87:b1:6b:16:a1:
d7:08:07:5b:bd:41:95:d8:ed:7c:42:e3:24:2b:ae:4f:13:52:
96:7c:72:fa:54:e8:3f:73:2d:89:b0:9e:5d:29:25:9c:d1:be:
f7:3a:8a:89:71:15:80:86:35:74:ec:48:6c:eb:ca:55:16:73:
13:fa:10:f9:fb:0f:97:1f:be:63:63:61:1b:2d:16:50:1e:06:
ca:4a:92:14:49:ec:2c:87:ef:81:ee:d9:00:4d:8a:76:a2:fa:
77:01:54:03:01:5b:53:4c:5d:62:58:bf:ee:1c:5a:c8:aa:06:
bc:9b:b9:c0:c2:4e:0c:26:f8:20:dc:19:e5:e8:b0:85:33:49:
2b:a8:e6:52:15:26:e4:af:58:61:26:c6:05:cd:b9:36:53:5e:
87:a9:17:15:8a:dc:56:e9:41:e0:3c:6a:8b:e1:16:85:49:f3:
48:79:99:a7:06:f7:83:75:b7:b4:de:44:ce:6d:79:79:90:7b:
88:92:b1:e5:2d:ce:0f:7c:d9:37:1d:50:a7:a9:a6:98:f3:07:
e6:43:f4:dd:1d:0c:14:1c:11:92:b2:26:0a:ef:08:19:39:91:
77:3f:15:41:84:70:f9:d7:fd:6d:c3:05:21:47:51:5c:a3:ab:
d2:40:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:06 2026 by rpki-client