Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: gsoYtAv9SBXVpWJmzCcU329pVwmbrFvEkp9yZwE+zjo=
Subject key identifier: C9:A6:71:E9:34:4B:52:05:43:31:D8:BC:5D:51:2E:F5:F5:E0:FC:C4
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019D32D0BCE6133EFD39F4F0700AED5967C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 05:00:33 +0000
Manifest this update: Sat 28 Mar 2026 05:00:33 +0000
Manifest next update: Sun 29 Mar 2026 05:00:33 +0000
Files and hashes: 1: _4gEdkIozsQL-TWVwZR3ioaNfxk.roa (hash: ofd30ZN0wNQTf8/vD9ThRnfPhfJvZujQAS6qzYzazNg=)
2: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: WgCLTkv4vuJ3sp9gcP4yKsFlKW2JlC9QJ7G2NB321Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:bc:e6:13:3e:fd:39:f4:f0:70:0a:ed:59:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Mar 28 05:00:33 2026 GMT
Not After : Mar 29 05:00:33 2026 GMT
Subject: CN=c9a671e9344b52054331d8bc5d512ef5f5e0fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:ee:d4:06:2f:59:55:88:b3:1b:18:02:6f:
81:48:b8:1c:35:22:bd:63:21:b7:b4:86:ee:41:e0:
5e:f9:b1:66:5d:b5:60:5d:77:ff:a9:82:c6:ed:c1:
da:0b:4d:d3:d6:6d:06:69:0f:cd:33:65:fd:d4:af:
36:1a:07:a5:ba:65:5a:27:df:f4:e0:88:dc:a7:6e:
af:1f:eb:06:97:de:81:31:65:7b:54:86:58:22:56:
37:ea:8d:a0:7b:a9:95:5a:f8:b9:b1:6c:50:23:88:
56:0c:6a:26:ad:46:cc:0a:99:22:af:20:d2:e4:cd:
0d:c2:7c:7d:73:b9:99:92:2e:66:d4:a5:b6:45:f1:
b9:80:55:e5:bd:fc:05:ca:96:00:e6:00:ad:0a:80:
c3:05:31:5f:04:8c:dd:53:98:63:3b:3a:fe:c9:b1:
a5:07:9a:c4:10:e0:3b:34:25:f9:37:53:d1:05:64:
9a:9d:a5:d3:e0:1c:a8:53:61:97:5b:8b:19:4f:42:
ec:9a:12:30:3f:e4:66:bb:af:33:a2:a4:63:2c:d0:
7d:ea:16:2b:3f:4b:34:7d:e5:7d:12:c4:31:95:01:
d9:db:4c:83:f5:5b:af:5a:aa:5d:49:f7:c6:0f:ea:
c1:22:fe:89:2f:18:58:6d:78:c5:36:3e:f7:e8:f2:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:71:E9:34:4B:52:05:43:31:D8:BC:5D:51:2E:F5:F5:E0:FC:C4
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:d4:f7:4a:3b:cf:4a:4e:65:44:71:7a:10:7d:70:30:c0:
31:4a:10:03:d9:bf:03:d5:5b:69:26:34:f5:a2:bf:f2:88:06:
3e:08:62:2d:65:d6:f4:f3:2d:95:7f:2e:01:41:16:8b:02:28:
9a:dd:ba:90:89:18:15:ed:82:4c:0c:77:e4:f7:65:02:ad:b5:
01:86:ad:a4:27:3f:7c:34:2c:3b:6c:b5:5c:7b:72:75:49:7d:
d0:f0:73:b8:14:54:12:a4:e3:2c:9b:f6:66:68:1b:30:60:40:
78:d6:d2:30:9c:5b:f1:61:8c:ed:f5:24:9a:84:de:68:71:2a:
7a:24:85:aa:12:df:4f:f7:b2:8b:78:5b:ee:81:e8:df:ee:6a:
16:ca:37:20:d4:69:a7:de:d9:5f:50:4b:6e:b9:e0:3a:51:da:
01:1e:93:ea:44:bf:e0:00:41:43:dd:af:fa:43:67:e7:47:39:
37:fc:e1:6a:99:92:b7:73:85:fe:9b:92:0e:96:ce:be:9e:07:
fb:24:b3:19:78:96:0a:7a:6c:4a:47:6c:53:c5:bd:3e:55:00:
23:ed:93:8b:b8:02:66:60:99:6d:a9:4d:f1:72:43:e0:e2:89:
fc:1c:d5:29:4c:b9:d1:79:b4:39:09:a7:04:a6:d8:69:98:8d:
a5:12:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:24 2026 by rpki-client