Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: zv06vgjBAVobQNXY2SUdHTde8oUHN9MgJpRmGrC1KiY=
Subject key identifier: D2:42:3A:B8:74:24:B3:38:F1:25:9D:04:A1:B5:65:A2:7F:5A:F5:A0
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019D37F75E5E97EABEFC830AAD0EE7B3AC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: GnNDNDncNDbBsFLz86fdhN5GRGxaDDGXdQzUOhRyXNQ=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5e:5e:97:ea:be:fc:83:0a:ad:0e:e7:b3:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=d2423ab87424b338f1259d04a1b565a27f5af5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:e0:50:f6:27:08:47:73:80:ba:15:61:f9:
a9:b8:1d:8b:b6:9f:60:ec:45:5c:f8:4c:1b:39:65:
69:f0:28:71:03:99:3d:9a:1d:ef:eb:2b:a8:72:fc:
2e:be:de:db:23:61:32:7f:af:9b:94:96:04:71:e8:
ec:a4:3c:64:9d:37:67:42:6c:62:a8:68:8a:75:c1:
1d:81:22:5a:c1:26:20:1c:0b:6e:9e:cf:c1:5f:3d:
81:6e:f8:48:d2:ef:54:4e:23:26:d9:b2:42:8c:ef:
ce:fe:2c:d9:c3:8c:af:59:f7:c8:e6:6a:f9:9f:66:
40:2a:e1:49:b1:43:e9:e3:1a:57:44:b3:6c:21:0c:
ac:da:0e:dd:c7:d5:6d:ce:86:e0:e8:eb:c3:41:66:
d7:d1:cd:21:5d:e5:f8:50:97:cb:2d:fd:14:7b:68:
8e:a6:14:9a:31:5c:6f:e6:ef:4d:14:f2:19:eb:bc:
15:35:c4:c4:cb:f1:4d:08:47:26:7c:3e:c9:22:e4:
f4:7c:b9:44:88:84:34:21:00:4d:64:e4:3c:ec:a7:
cd:77:68:e4:bf:08:91:f4:f8:eb:88:0e:f8:f0:3a:
10:84:4f:22:56:05:bc:c4:ad:5d:63:4a:0c:c0:ed:
25:4b:f3:65:ab:7f:a5:43:75:91:46:05:ee:ed:19:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:3A:B8:74:24:B3:38:F1:25:9D:04:A1:B5:65:A2:7F:5A:F5:A0
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:01:51:9b:34:b3:f2:ce:7c:21:37:65:08:ff:39:27:4d:24:
f2:8a:da:8d:33:eb:c9:8f:be:15:98:c7:b7:29:dc:47:fd:09:
83:37:02:5d:90:30:8c:8f:72:49:29:6c:cb:55:e4:3e:6a:5c:
ee:67:e3:22:50:a9:47:3a:ec:b4:fb:37:8a:09:7c:f9:b6:96:
00:0f:2e:d9:9c:e0:cd:7b:93:b1:92:0d:8d:d8:fb:33:87:1d:
ad:20:ad:8e:8d:75:f1:d2:42:7d:3a:99:fc:c5:e3:a1:45:c0:
b6:eb:6d:e1:f9:02:c9:20:b0:f6:a4:ad:77:f5:ed:08:cc:7f:
56:ff:6f:c4:3d:0d:4a:39:d3:ec:55:ae:a2:42:1c:24:92:9f:
08:96:08:d2:e3:ad:1e:7c:59:42:21:74:df:91:45:d9:6f:ea:
0b:ec:76:28:de:85:4e:40:3a:90:36:49:54:9b:27:4b:3d:a9:
2d:7d:fe:d8:39:6b:ad:68:5d:c7:1c:ed:c0:51:58:d5:6f:e8:
43:cd:ff:b5:47:e3:85:2e:f6:d1:ed:cd:cc:f8:56:04:ea:1a:
31:2c:ac:55:5d:de:84:cc:82:07:4c:f7:1d:30:15:98:b3:6f:
5a:ea:70:7c:3d:00:8c:be:6c:68:13:70:f3:38:0e:a8:dd:8c:
9d:98:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client