Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: P66dIAKabSNSkAJIiIe0N5GcsGsQnDReZTsqhNHKx+o=
Subject key identifier: 93:13:00:E5:45:51:C0:BA:26:03:08:B0:0C:ED:72:9C:88:31:74:EF
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019D38666A1EB51625C0C74FF3DAD5E52DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: 2FejzP58J8sG+IqAO8Udg5qSMRWJZPRFMYYsv8HvbRo=)
2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6a:1e:b5:16:25:c0:c7:4f:f3:da:d5:e5:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=931300e54551c0ba260308b00ced729c883174ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:69:77:3a:27:de:dc:36:3d:4c:ec:96:b0:
f3:7c:36:86:4f:ac:b7:ea:9b:83:e7:9c:3b:59:7e:
0f:eb:9b:28:9c:2d:9b:51:46:e1:c3:5a:3b:49:be:
d8:fd:f8:d9:dc:ca:8a:e1:15:31:a4:fd:9e:40:1c:
61:14:6c:41:88:1e:81:3b:b6:e9:18:db:25:5a:3e:
4d:c7:06:43:94:d5:8f:4a:79:d8:bb:28:f2:60:ec:
63:32:bb:c1:19:56:9b:72:83:d6:83:f3:55:7d:41:
d1:a1:9a:d3:88:cd:9c:71:85:f7:a1:fc:40:b3:e6:
8e:4f:10:f3:79:1d:e6:11:a2:ba:d6:c4:ee:58:aa:
ec:67:ea:ba:a1:d6:c0:19:47:2a:30:bd:56:95:83:
15:5b:7f:f7:41:fc:02:a5:a9:8a:89:68:0d:c8:07:
91:ca:47:8a:d6:43:93:6b:75:4d:4e:11:8d:ca:c0:
3c:8d:6e:eb:b6:75:e7:34:7f:f6:52:4e:97:95:2b:
2e:61:55:23:34:5f:0b:60:af:72:0e:6b:27:11:97:
80:eb:1c:de:a0:f4:cf:df:93:6c:bb:a0:6e:ba:e0:
d0:b8:13:c6:1f:4a:78:59:bf:1a:1f:dd:23:8d:17:
6e:b7:ec:94:27:b3:12:12:15:65:11:c5:e3:c8:0a:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:00:E5:45:51:C0:BA:26:03:08:B0:0C:ED:72:9C:88:31:74:EF
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3a:b3:76:b1:52:3e:47:5c:9c:73:a5:65:b4:29:1e:81:d4:
03:ff:56:70:89:7a:cf:a0:73:40:dc:1f:aa:b2:80:85:a9:75:
ca:2d:f7:3f:e2:a8:ca:a2:26:fd:49:f3:ae:de:65:ed:21:a4:
c3:fb:3b:c7:9c:7a:dc:67:7c:0f:6e:af:da:b6:6d:f8:73:b0:
c0:e4:4b:ec:e3:1a:44:5e:67:cd:a9:f6:5b:3a:01:65:bd:3d:
c4:a0:50:7c:34:0b:7a:14:45:46:17:53:30:84:40:07:5a:35:
a7:44:62:ac:3e:35:e0:fa:ff:f6:06:f1:5b:ba:43:53:c1:88:
6c:5d:22:61:c3:19:02:2a:e9:90:a1:7e:7f:c4:1b:1c:a5:d3:
d5:1f:51:bc:08:e9:8c:e7:64:55:8f:cc:a0:c1:1f:ba:f9:2e:
8d:78:a0:2c:05:ee:7f:aa:2b:c4:80:ba:66:9d:45:d1:ab:fb:
9c:58:67:cb:04:4e:e1:82:26:5e:ad:d1:c5:78:4e:56:2e:77:
82:c4:1a:42:fe:fb:21:7c:e1:62:68:9a:9e:8a:08:be:40:c5:
5f:d5:2e:56:18:9d:28:b6:b7:78:6e:89:de:cf:14:0c:a0:eb:
47:e1:eb:83:17:1d:27:ea:ca:76:43:da:e9:4e:51:00:7f:e3:
f5:2b:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:57 2026 by rpki-client