
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier: X6FnJADMv4mXdhTb9y9RAhkDmFuCAoLJaok7+is6pdo=
Subject key identifier: DD:9E:6D:BD:D3:B1:A0:DC:75:51:9A:9D:F4:29:8B:7D:0D:62:85:4B
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 019D3A54A2994B27A986E4F688A8F4C1ED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number: 1861
Signing time: Sun 29 Mar 2026 16:01:58 +0000
Manifest this update: Sun 29 Mar 2026 16:01:58 +0000
Manifest next update: Mon 30 Mar 2026 16:01:58 +0000
Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: fDXm8R2e+nLXR6IzRx4IWWeK72TGniFQVX1/n6JFzgw=)
2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a2:99:4b:27:a9:86:e4:f6:88:a8:f4:c1:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Mar 29 16:01:58 2026 GMT
Not After : Mar 30 16:01:58 2026 GMT
Subject: CN=dd9e6dbdd3b1a0dc75519a9df4298b7d0d62854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:b8:be:8c:9f:f4:25:b4:83:c3:86:3f:b3:
6b:52:3c:b3:0b:48:68:f2:67:57:4e:0e:22:d4:ac:
f0:63:04:3e:da:07:fa:98:71:13:35:bc:ae:fe:c5:
5d:ae:1b:c9:f5:c9:fc:4e:bb:07:bd:d1:60:35:2f:
d8:63:70:b8:93:14:19:fe:7c:9e:2c:0f:7a:71:41:
b0:ea:30:f9:61:60:7d:31:8c:f8:8c:46:cc:eb:47:
05:44:8a:1f:b5:d0:d6:40:88:0a:54:69:d2:ea:79:
c6:fb:4b:f7:f4:70:b9:b1:fe:b5:ca:a5:a4:0d:ef:
6f:7d:e3:f6:31:b4:00:a8:d0:38:42:73:32:8d:0e:
a5:bf:e6:e9:af:8a:30:9e:17:6e:81:fd:e7:1e:f9:
2f:a5:75:67:6e:73:b9:50:d3:85:33:60:09:93:e0:
cc:02:e0:7e:57:27:20:65:b3:15:4c:d4:3e:f5:be:
c5:14:2c:17:40:7d:01:25:6b:a8:59:00:fb:e9:98:
66:f9:fa:20:41:59:a9:1d:79:fb:f3:38:0a:af:f9:
05:35:0c:ee:70:af:c6:c5:68:0d:e1:1e:e2:65:2b:
db:5b:8d:9c:29:91:75:e3:5b:a0:50:f7:7c:5d:68:
ab:4e:5f:23:a3:ff:79:c0:8a:0b:c4:a2:29:94:0e:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:6D:BD:D3:B1:A0:DC:75:51:9A:9D:F4:29:8B:7D:0D:62:85:4B
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f5:65:ef:69:34:1b:ba:1d:67:a2:28:91:31:fb:95:57:c1:
62:e6:2a:66:ff:f7:c6:83:19:aa:34:7e:36:58:5f:ca:7b:f0:
3b:50:f2:b3:39:c9:0c:e6:a3:88:2a:23:75:c2:12:bc:fc:37:
c5:9b:ae:48:08:85:71:5c:eb:1d:f9:02:bd:c8:f8:26:76:02:
cf:7a:68:61:14:b4:bc:ae:94:bd:2a:f5:08:e4:7a:79:53:5e:
fe:9f:b3:86:5d:ce:a4:53:16:87:f1:9e:24:0f:75:39:e3:4b:
ea:23:8e:bd:5d:ab:6b:54:f6:66:e0:f7:eb:f6:6e:22:90:4c:
fa:c8:e3:33:a8:ff:fc:92:cc:9c:ea:f1:9c:dd:1a:3f:0c:e5:
67:98:37:97:95:54:30:52:76:df:a8:91:67:08:d4:32:69:eb:
05:58:cf:5a:6f:2b:51:bc:31:8e:40:75:88:16:e7:d0:87:6d:
0a:4e:ee:6b:f5:34:fc:1f:e0:44:b3:09:86:38:10:57:46:11:
f0:45:b4:40:f4:3b:3e:ca:c7:2d:88:45:5a:24:ae:26:38:39:
89:cc:34:25:ed:12:5f:db:26:e4:6b:58:b1:df:22:37:28:26:
50:ea:c3:26:37:9a:f5:59:83:a5:00:c6:1b:b3:cf:7f:68:8f:
af:7a:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:00 2026 by rpki-client