Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: o+CYxk1tp8gQhdcJ4FZinhHIHdTdAvPrJgMt7NDneKM=
Subject key identifier: 8E:90:46:86:F3:B8:EF:3F:BA:0C:95:75:BC:40:F0:78:8F:B4:57:D8
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019D3865ED52304B80DAE7AF587FA7BF21A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0C23
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: u2+NjioBkaZgZxhCYieEi6XrmvJdoWShdGCT4Ya2mFA=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ed:52:30:4b:80:da:e7:af:58:7f:a7:bf:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=8e904686f3b8ef3fba0c9575bc40f0788fb457d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:ba:64:c7:bb:d3:82:47:2e:68:47:98:75:
88:c0:49:21:25:ef:31:ec:63:c7:05:cb:57:17:a0:
34:36:c7:08:9d:01:6b:25:07:52:df:e0:5e:c4:00:
3a:35:9d:97:8a:f6:98:52:1d:50:0d:a7:71:08:d3:
19:bd:37:00:48:a1:fc:d4:18:ee:fa:d5:bc:4a:15:
b8:1b:62:de:bc:5a:b3:0d:d3:a7:07:c9:dc:21:4d:
3a:14:82:c4:1e:71:da:8a:63:3a:d2:68:03:68:82:
24:53:a4:a2:8f:24:06:5b:70:a2:28:f0:c4:3a:6a:
33:56:35:57:2f:6e:a8:11:b6:ff:17:59:ff:1a:f4:
f5:bd:e8:bd:fb:31:cb:6c:d5:ab:de:53:0a:5e:da:
c9:1c:dd:77:10:d2:ef:8c:36:dc:fe:ef:e0:46:97:
ff:dd:6c:c5:f4:c9:d2:ea:80:27:8c:01:14:77:b3:
79:85:5a:78:ac:3c:b3:f4:3a:43:df:da:31:a1:5e:
b1:82:12:91:3c:f1:66:a4:a6:66:13:be:66:24:50:
58:9f:25:94:da:92:83:91:b6:40:8e:f8:b8:49:0d:
ba:9b:cf:ff:3a:17:c7:e0:78:39:ef:fd:69:f2:9d:
79:8d:41:59:8b:1e:14:64:0f:98:b1:a7:86:53:51:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:46:86:F3:B8:EF:3F:BA:0C:95:75:BC:40:F0:78:8F:B4:57:D8
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2f:7a:4c:e7:c9:0a:13:fc:94:37:79:25:1b:64:87:22:82:
10:92:cf:31:23:81:5d:df:23:26:27:3b:76:51:fd:44:cb:2f:
01:37:e7:a0:bb:8d:b1:47:6a:3c:83:16:60:fd:64:c1:8d:8b:
b2:7b:66:3e:a5:58:b2:e6:bd:62:35:7d:57:e0:c1:b4:ce:bc:
7d:49:55:db:34:5c:df:e1:18:c4:d6:72:59:91:21:2d:db:52:
37:1b:ba:ad:47:5f:59:b4:0c:1c:8f:64:96:2a:92:4c:5e:46:
0b:52:c1:09:2d:6e:98:3f:30:80:2a:cb:d8:e1:a0:4d:aa:fc:
23:36:32:a6:aa:aa:14:23:9e:83:1e:d9:e8:4b:41:d2:12:2a:
58:eb:d1:40:07:b9:26:39:a1:68:7a:ad:b8:2d:1c:80:b0:58:
59:b9:c8:c3:c6:95:f5:2c:0f:0b:74:ce:b4:61:c5:03:a5:63:
c7:1c:cb:e9:73:cd:9f:9b:ea:ce:15:bc:a7:ad:07:0a:23:f9:
00:5a:cd:89:4a:7a:e7:ec:8e:b3:79:93:bb:e6:c8:31:b8:20:
f6:59:11:25:93:68:d3:8a:dc:c4:02:1b:7b:40:4a:04:9c:4f:
c5:20:d7:c5:85:ab:2d:89:f1:d6:69:d8:49:d2:28:c4:eb:e3:
b5:78:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:30 2026 by rpki-client