Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier: snnGI4xCMVei7lTYvvd4WZN3hopFZy6ShosqEzqX2YE=
Subject key identifier: 95:03:3C:20:A6:15:50:F0:84:45:20:AE:67:D4:9B:BD:53:01:3F:0F
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 019D390A33FE5E9EFEFB90A2DCCCEDAB641A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: AapVfdSoJfUJhfGrZVRSqLysqy37uAhvv1Fj8XOOJxE=)
2: ybXPtjtytnp4awj6RoDLh-SgWqk.roa (hash: yT3G41aEzQUb5MKxunseT7S7bGL9k6nsWABzcpJ77H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:33:fe:5e:9e:fe:fb:90:a2:dc:cc:ed:ab:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=95033c20a61550f0844520ae67d49bbd53013f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:d3:bf:04:60:96:1d:82:50:88:75:fe:0d:
66:90:6b:ef:63:14:a1:51:ce:41:53:c7:39:21:a2:
10:62:11:a7:da:11:79:90:43:81:4f:6c:dc:54:e7:
28:0f:66:38:e0:ba:f6:2f:78:d0:02:26:6c:c6:32:
e1:96:9d:c6:4c:3f:e6:67:b8:34:76:d9:ec:9c:aa:
41:d8:c1:4b:ff:0a:82:6f:23:1c:6e:55:5d:ef:da:
53:cb:c4:cb:4e:d5:b5:50:e8:12:3c:c2:f8:32:22:
f2:40:9b:fd:35:84:15:d8:d2:d1:fa:8b:e1:40:d0:
7b:c8:5d:9e:81:79:9c:b7:f1:74:07:b1:b1:ca:b6:
59:fe:0b:3d:34:31:8a:4c:06:1e:70:98:06:eb:79:
56:00:50:be:52:ea:e8:1c:7d:36:2f:4f:35:25:45:
19:65:22:4f:2f:c6:65:2d:7b:06:fb:37:d4:b8:71:
08:48:d0:2d:73:46:3c:0a:1e:9c:2f:a8:a7:f4:b9:
4b:e8:5d:3a:83:b3:01:08:14:b8:cf:b8:71:2b:04:
e2:f2:6e:8b:40:15:1a:60:99:b1:44:9f:c7:fc:f9:
fb:65:95:19:87:a4:84:fa:ef:2f:53:d8:5b:f6:90:
47:af:95:05:4f:8a:46:ac:d3:17:a2:cb:d6:03:46:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:3C:20:A6:15:50:F0:84:45:20:AE:67:D4:9B:BD:53:01:3F:0F
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:89:64:51:ef:ef:93:e1:e2:3a:33:62:0f:eb:e3:7e:2d:
a1:8f:fe:ee:8d:64:68:87:0d:1a:0e:4c:9c:75:af:19:e3:e9:
cd:8f:99:9e:36:9f:2e:9f:87:66:e1:f1:15:0e:a5:fa:3f:51:
67:3f:5e:55:00:d9:9d:89:a5:89:9f:f6:10:b5:e2:c6:f4:02:
33:a7:49:2a:d0:25:22:d6:d9:d9:a3:2e:c5:11:5a:cc:40:a0:
30:fd:6a:fc:e9:94:64:a3:3b:20:4e:af:f4:fb:fe:0a:7a:5e:
3f:59:75:70:cb:36:7e:e6:76:47:e9:af:7f:38:a7:86:aa:d0:
13:67:16:7f:d2:f1:ec:4e:5c:6b:d5:84:75:79:b7:d5:98:4e:
f7:81:c1:83:01:1b:bf:27:14:e1:5e:33:02:8e:6f:b7:39:ab:
71:2c:aa:31:b3:5b:65:ca:90:ff:eb:17:09:d5:24:3c:c0:21:
0f:cb:82:93:7b:72:8a:af:b2:4c:8a:0a:f0:a6:89:12:1c:1a:
01:21:af:4e:e0:a0:a5:ff:d7:4f:6e:86:62:36:81:08:7b:bf:
20:2a:5a:22:fa:3e:ee:46:36:c2:cc:91:bf:0b:a3:d6:76:01:
87:3b:65:ee:67:0a:1e:fa:88:ae:45:77:3a:ae:1c:17:cc:7b:
6c:56:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:10 2026 by rpki-client