Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
File: Sr9C0dMjaItaMnFsIpBIz5tKKco.mft (raw, json)
Hash identifier: 6wxY1Q0CPoa9yn6Gy/8t84BZzVEw0jD2n62VZlvqlRM=
Subject key identifier: 49:5B:0F:7E:8A:4F:9D:D3:F7:EB:F2:21:50:9B:43:CE:7F:1D:1C:A0
Authority key identifier: 4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA
Certificate issuer: /CN=4abf42d1d323688b5a32716c229048cf9b4a29ca
Certificate serial: 019D382DF6A6547C5745830AC453B43E49EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
Manifest number: 0136
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: Sr9C0dMjaItaMnFsIpBIz5tKKco.crl (hash: 82twyuaVTuo9d0RahSUY5mHurrkt3hH1ahCmsF4vbuc=)
2: pt6HomTbAoxaO1S0_vsB7Nj7-8E.roa (hash: UWZ5Wn1XW2WpHYmNUBiJ9UFuT5nRWCqGOKvCr/DsUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f6:a6:54:7c:57:45:83:0a:c4:53:b4:3e:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4abf42d1d323688b5a32716c229048cf9b4a29ca
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=495b0f7e8a4f9dd3f7ebf221509b43ce7f1d1ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:0e:0d:c6:7e:9a:9c:b5:75:ee:d9:d4:61:
40:dd:45:ae:0a:6a:76:36:42:39:58:6a:df:46:26:
10:9b:0e:6d:a4:6a:fa:84:4d:0b:be:8f:e6:df:f9:
70:31:f6:b1:67:0d:b4:b5:d4:6f:8b:f2:7d:34:7f:
64:b3:55:48:26:ac:bb:1e:4b:63:95:b9:1f:d3:19:
db:ef:1b:e6:a1:02:c5:75:69:7c:c6:51:c9:63:78:
ce:12:93:51:15:a5:17:eb:f5:e5:1a:62:dd:1e:74:
d7:bd:d0:bd:05:96:71:ab:05:e0:08:4a:5b:9d:5f:
16:d9:ed:f5:0b:6d:df:a7:1d:dc:ad:12:c4:a8:b1:
24:f9:70:cb:06:34:d1:e3:d2:ee:33:97:c7:54:42:
fa:6e:92:98:a7:e9:03:d6:a4:c2:d0:5e:89:86:e5:
10:bb:9c:c8:51:42:c6:ce:64:71:bd:c8:8c:65:c5:
a5:49:60:84:e2:05:e1:d7:2e:13:38:e9:a6:2f:69:
6a:33:31:32:82:20:dc:f5:eb:12:8d:9c:68:47:75:
6b:67:18:96:b7:35:5c:71:3a:8c:49:04:62:57:83:
95:b5:f2:90:90:9f:d3:f0:c8:ad:7e:0a:ed:c7:82:
8c:08:86:69:ce:20:36:a4:3a:5e:d3:03:13:60:16:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:0F:7E:8A:4F:9D:D3:F7:EB:F2:21:50:9B:43:CE:7F:1D:1C:A0
X509v3 Authority Key Identifier:
keyid:4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:55:8d:50:3c:52:1d:37:94:9b:0b:6c:e7:4c:d9:36:62:70:
9b:0c:e2:52:f6:e7:53:fd:04:fd:ae:3d:1c:1a:02:e8:aa:96:
67:4a:2b:1a:8a:c8:e4:b3:de:5d:f2:dd:98:fd:f7:9f:f1:bf:
67:73:f8:47:68:d3:0f:58:69:2a:f7:30:58:2a:b1:82:04:69:
b6:15:2c:b0:43:b8:32:b3:a3:9b:28:16:77:2b:7e:b6:08:96:
a6:4c:ba:e8:6c:b9:0a:7c:9a:c9:12:70:db:3c:c3:df:40:9a:
b6:21:83:4c:9c:13:b6:f9:06:c8:b1:bf:0a:b4:96:e5:9c:c7:
cf:dd:92:83:34:09:a1:41:d6:2f:e2:66:85:65:13:eb:c1:3b:
c7:ae:4c:01:aa:37:e7:c3:25:6b:be:7d:03:70:9e:17:3f:19:
b4:35:64:44:2b:9d:73:61:4d:35:14:e3:47:58:2c:6d:b6:bc:
29:b1:ad:c8:da:d1:4b:ae:51:dc:bd:06:2b:1b:4d:9a:32:f2:
9b:65:7f:99:c9:1c:1b:02:5a:0f:94:85:8f:c5:fd:18:8e:4f:
76:5a:ac:25:de:1c:63:e0:3f:1b:61:f5:47:10:6b:23:75:c9:
d7:a8:be:74:8e:4b:ec:2d:3d:08:e1:a1:0c:a7:b8:2d:3e:2d:
c1:cf:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:12 2026 by rpki-client