Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: 6vU088mNsSNa3DPVi1d9bXvPIn55WUwH5c0AnPdf+ww=
Subject key identifier: FF:F8:50:A7:90:1E:0D:C8:03:9D:34:CA:2E:F8:5C:FE:E2:EF:73:4D
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019D38D2AB741840C2BBDEFB41C27F894378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 18A5
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: CdgXWBHPmu+PYn5qlGQg7h9C9dhwcdZL5x+Ur0VJ6jo=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ab:74:18:40:c2:bb:de:fb:41:c2:7f:89:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=fff850a7901e0dc8039d34ca2ef85cfee2ef734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:2a:3a:22:c5:b0:62:78:4c:6f:69:ae:b9:
56:08:28:57:e8:52:dc:93:27:14:d0:e1:ae:9d:21:
41:9c:79:db:bc:45:b3:2c:b9:8a:e8:ce:20:09:04:
a0:e8:99:6f:25:03:c5:e1:db:40:c0:05:23:13:4c:
49:d9:4d:ff:fb:87:72:79:d1:1c:8c:df:1c:b7:30:
c9:3b:7f:fc:3a:b3:65:76:c8:97:b4:ab:c7:f5:b8:
8f:8d:01:b5:d1:21:5f:bd:84:12:39:6f:3d:8b:90:
62:75:93:d6:79:41:d7:72:d0:18:93:35:48:1d:5c:
3e:47:fe:07:88:d1:73:00:df:86:04:f6:8e:0c:dd:
9c:af:63:f3:e5:00:2d:3f:d2:7a:fd:e6:f4:b0:78:
9a:c4:65:0d:7a:07:fd:09:5f:a1:9f:8d:81:27:d0:
9b:b6:7d:2a:a0:ed:97:e5:9d:b7:bd:1e:7b:8c:15:
8e:9b:c4:e6:b7:6e:a7:1c:60:76:b8:88:a7:38:1e:
13:08:5d:7e:a8:5e:3c:ab:93:0f:89:6e:c9:1a:e1:
11:5d:f6:ba:3e:9e:b6:48:de:73:40:5d:7c:0d:c5:
d5:25:ab:dc:63:29:8f:45:f0:5c:b0:dc:d5:f5:f1:
1a:d2:c5:e9:47:e2:be:76:7d:ac:f8:ba:ca:a9:07:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:50:A7:90:1E:0D:C8:03:9D:34:CA:2E:F8:5C:FE:E2:EF:73:4D
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b2:dd:3e:ed:0c:aa:45:ec:c9:58:55:14:07:a1:2f:28:d6:
04:33:2d:04:91:0b:cc:d5:ab:84:a1:a5:c7:8f:77:1c:56:5b:
5c:3e:bd:bf:10:44:13:9c:8d:e6:c8:6b:cb:1a:94:07:fd:06:
1f:43:95:45:a2:4d:cf:43:11:1f:95:50:0c:aa:26:5d:74:28:
2c:83:69:43:27:22:4d:34:a6:3f:7f:46:93:0e:c4:af:00:14:
67:19:6c:68:2f:88:3b:65:b8:4d:d0:d2:c3:3c:d2:6d:da:3f:
ad:74:90:a1:a3:85:9c:ab:60:aa:b3:5c:e1:d7:63:2d:99:e0:
c2:cf:a6:f3:1e:41:90:c6:57:df:2e:b7:30:aa:f2:05:39:42:
19:e8:98:e0:e0:5d:71:73:e8:e7:03:fa:6c:11:d6:80:e7:96:
ce:b4:0b:79:f8:63:bc:a7:29:a6:a5:9d:66:5a:04:a6:aa:42:
e6:01:9d:b1:50:04:60:6f:c0:b0:91:ac:a9:12:ef:4d:a8:d0:
f9:c7:3e:e6:c8:68:ed:ee:bc:d0:57:b8:e2:9f:f5:ab:ae:ef:
69:fb:a7:05:31:c8:37:e3:14:31:b9:b5:8f:c7:c2:16:45:a0:
fc:85:9c:f3:7a:24:43:9a:d5:07:18:4f:6a:11:38:12:6e:e5:
e1:4f:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:36:20 2026 by rpki-client