Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: g4J+PtbhLGHzDqS6mW4DdpGvTyNUVwpT+ADV5D5Fr3M=
Subject key identifier: CD:08:12:FF:CB:C6:39:E4:F8:1D:BF:BC:41:DD:95:58:6C:6F:73:48
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 019D37531D02F24F7795FC8A0B1479E5F9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: bs6EGBpcCSPh+AXQMG4Ep33DpgTY7CLc7bfPzi+aT90=)
2: eq_DMYPwsIw93qds04ZGjJJH5B4.roa (hash: AYOWm+f8xS5MEpFp7ruiXJOd+PYdgBsKeFC1t5gELcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1d:02:f2:4f:77:95:fc:8a:0b:14:79:e5:f9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=cd0812ffcbc639e4f81dbfbc41dd95586c6f7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:12:e0:f5:90:36:80:28:4c:43:07:15:4e:
14:f7:7b:45:ac:ed:44:41:e2:39:55:97:3c:04:5d:
37:69:8e:64:65:a0:99:c2:60:bc:c7:0c:8e:7e:d9:
79:2c:46:67:bb:52:1f:5f:a7:03:6e:0c:86:b7:2d:
77:02:86:a6:35:21:d0:a2:cb:14:8e:a6:c3:d4:da:
3a:3b:b3:5e:b8:20:67:2d:4a:12:3a:b3:3d:bb:b1:
48:d0:74:f0:ce:fe:00:e1:c4:27:f4:ca:22:b0:8b:
ef:3d:5a:97:ca:dc:dd:bc:10:60:48:34:ca:42:23:
5e:1a:75:56:cc:69:61:91:97:21:1b:45:34:f3:10:
52:7d:67:14:8a:96:21:48:2a:45:c2:79:1b:1e:07:
ed:8f:fe:2d:8a:ac:c1:95:be:1a:ff:a1:aa:f2:88:
94:1b:b3:81:e1:5d:e3:4d:e6:9d:ee:10:fb:b0:73:
38:7e:86:2e:7d:94:a9:ad:a7:f8:88:58:03:cc:22:
6c:18:7c:07:cc:ed:5b:b3:4e:23:1e:1f:ce:1e:6b:
27:92:f7:a9:82:bd:60:81:56:56:80:ce:02:08:00:
19:17:e9:04:ef:4c:7a:34:3b:6b:f1:0c:18:19:36:
c4:47:4a:37:23:95:a0:8b:3e:bf:29:7c:98:7e:88:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:12:FF:CB:C6:39:E4:F8:1D:BF:BC:41:DD:95:58:6C:6F:73:48
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c1:97:f0:51:06:aa:c5:1c:d9:f4:d7:7d:6a:25:0c:b7:d8:
b9:f5:0a:b1:50:32:08:2d:63:66:4e:21:6b:54:03:5a:67:ab:
c6:8c:7b:ea:f2:0b:9b:8c:7d:5c:1d:66:ec:10:34:43:67:2d:
98:ee:a1:47:0b:2d:ea:f8:a6:a2:eb:58:d8:7a:4c:d4:6f:ec:
40:b4:86:3b:61:99:b1:2e:7e:53:7c:a3:51:f7:c0:15:df:fa:
de:0a:97:96:4b:45:b1:91:6f:8e:75:4b:e2:fe:53:d4:ee:a9:
c5:51:25:61:3a:a3:71:9a:a2:31:cf:f6:f1:84:b0:90:5c:e1:
60:ea:48:7b:5f:80:b7:46:94:a2:22:42:1d:d1:54:25:b5:1b:
29:89:93:10:4f:27:e0:68:b2:9c:84:62:63:76:66:1c:fd:0f:
2d:55:61:10:a0:d1:d6:17:6b:a5:8f:4a:05:41:6c:2b:58:73:
8b:ed:b1:06:a0:09:0c:6f:75:9e:60:a8:e2:bb:2a:49:03:52:
54:01:30:c5:21:6a:04:3d:57:85:c9:3a:35:fa:5c:5a:b8:d8:
aa:ca:00:46:88:fd:0c:9b:31:8f:50:7b:98:cb:e6:9a:2d:a0:
71:76:ee:3f:e6:8f:70:9c:f1:dc:ca:ef:cc:69:dd:ed:74:40:
dc:06:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:26 2026 by rpki-client