Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: EdZ3p4Q/m81QSNadoEB/nOy/Rnb/HyCeAnk1EL6JkFA=
Subject key identifier: 43:D8:65:26:90:F5:AE:F3:65:86:0C:F1:F3:B8:6B:CF:E4:72:FB:AF
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 019D38D34525CBA86518F31A3FF0BDDF5CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 17D2
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: IWueK+44heqKBeUoinZAQ8OQV+IYJYmuul1JFpCyBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:45:25:cb:a8:65:18:f3:1a:3f:f0:bd:df:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=43d8652690f5aef365860cf1f3b86bcfe472fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:e2:3b:0b:0b:82:c7:1d:18:4e:b6:95:7d:
95:94:86:89:82:c4:fa:98:84:0b:9d:23:24:f1:4a:
3c:5a:ca:37:70:3d:50:a7:5e:81:6e:2b:54:b3:55:
af:47:9f:d3:e7:68:60:85:51:c5:11:bd:39:25:78:
8e:6a:5e:5c:b9:3c:d3:fe:03:e2:09:70:a8:6d:c7:
35:81:40:11:81:a6:d3:aa:c4:f3:c4:bc:2c:51:bc:
36:5e:0d:e1:a3:f4:49:3d:60:55:c4:b1:65:1c:df:
b6:39:02:fa:a8:cb:3d:bc:9d:23:c3:b5:88:41:ec:
dc:a8:5d:d6:37:4b:8a:60:ac:c9:97:ed:c6:1c:bb:
b3:cd:83:ca:56:f6:b7:87:9c:86:53:88:c9:3f:51:
e6:7e:8e:ad:19:1b:2e:b8:2a:5a:f0:bc:ef:78:09:
b2:5e:c2:cd:92:d3:06:01:26:2e:70:6e:f6:d6:36:
f7:9a:58:4a:56:cb:34:8c:a9:b5:37:a8:7b:54:82:
dd:75:45:a7:04:09:27:e1:cb:9e:e9:3a:0d:e4:7b:
c5:ff:4d:77:1b:c3:e6:8f:6c:f4:58:72:67:80:09:
23:5b:f3:4f:64:45:57:80:99:de:c9:cc:59:ff:a0:
24:4a:20:e3:7c:1a:60:63:25:80:a8:3f:73:7c:84:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:65:26:90:F5:AE:F3:65:86:0C:F1:F3:B8:6B:CF:E4:72:FB:AF
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:52:32:ec:d6:2a:af:a4:4e:4d:54:de:dc:83:7f:87:45:
5c:39:90:ab:89:75:a3:c3:e9:82:75:ab:47:1b:f2:31:16:91:
34:54:76:68:87:0e:70:75:30:f4:ba:e3:2b:43:09:52:54:3b:
f5:3f:82:67:90:b1:82:db:65:ec:2b:4c:08:93:70:3a:91:b3:
09:33:c1:67:79:df:6d:09:a5:ed:05:26:79:2d:27:b4:f7:de:
7e:39:ba:15:9a:21:4e:7b:24:43:cc:59:f4:ee:79:ac:f9:42:
d8:3c:7c:63:4e:aa:12:ef:1a:ad:5a:7e:41:b4:96:58:e2:78:
cf:4f:42:a8:03:21:e4:46:96:c8:69:30:2e:c1:a9:8a:30:75:
fb:60:76:26:91:4f:92:b7:14:e4:0c:1f:6e:9f:94:16:46:b4:
de:3e:43:6b:2f:7f:2e:3c:67:de:7f:df:ab:95:45:53:f3:25:
e2:da:63:d4:bc:e9:11:7d:51:37:0f:96:4c:77:ed:fa:2d:60:
48:94:b4:38:aa:d0:f5:bb:ad:d6:51:d0:1b:d1:f2:df:46:f5:
b8:18:a4:ff:c5:a8:86:51:b3:a1:8b:94:c5:03:8e:7e:cf:28:
6f:02:9e:a4:fd:0a:21:8f:be:93:5f:85:2b:c2:64:46:b0:17:
49:d8:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:28 2026 by rpki-client