Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json)
Hash identifier: 1htnZsMY+DH8PD9/n2KjQfpVEwXY6paFEvUOp999g8M=
Subject key identifier: 00:A4:79:1A:92:F3:E8:8F:60:6C:1A:2B:24:A7:3C:EF:3B:79:88:63
Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Certificate serial: 019D37C10DAC501F7B56990220D3736ADCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
Manifest number: 02E9
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: 0qctvgG8mg32Sm2fI7e/7CDydnfxwq6+j4b1jgdv8EI=)
2: uTcv-a7G_8gWRUCdg15b3oG2Foc.roa (hash: 5elOUx8UPBAPRqF/fo6uzxQhCWyH1l9Otl5TjweK9Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0d:ac:50:1f:7b:56:99:02:20:d3:73:6a:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=00a4791a92f3e88f606c1a2b24a73cef3b798863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:c7:fb:19:5c:ce:ea:cb:6d:e8:5c:2d:ab:
ff:b9:c3:62:1b:a9:40:9a:57:69:5b:c6:1f:38:7c:
2f:46:45:83:3c:df:61:d0:b7:a7:b1:a1:a2:51:f8:
77:33:09:0e:ce:dc:96:ef:69:4c:c1:f6:ae:f5:9b:
74:7e:3e:a4:83:54:a6:22:4a:e5:d2:c4:7f:4d:94:
3f:0d:95:d0:08:4c:b3:ba:a0:ed:1e:21:30:e9:23:
d3:cd:ac:8b:58:1a:43:2a:3b:da:70:32:c3:95:0e:
75:43:23:76:2e:5d:10:b4:59:84:54:bb:c9:37:66:
72:97:f8:4e:1c:25:05:15:33:34:93:6a:11:ea:8f:
f6:04:fd:0e:e8:72:5b:3d:e8:95:93:3f:67:27:17:
b3:f5:4c:aa:9d:86:08:e7:1d:1b:38:e6:8c:98:20:
1b:9a:d2:df:40:df:7a:64:37:7a:44:d4:05:45:08:
60:40:03:56:1a:4c:09:73:22:d7:0e:a7:7a:0a:99:
10:9e:ea:ef:c6:9b:48:a2:13:bc:2a:4a:25:e4:40:
3f:18:e0:b1:61:28:04:c9:18:70:07:9a:08:19:1f:
b9:d4:32:5e:6a:95:82:c9:a2:64:69:f9:b2:89:35:
96:26:cc:f0:70:f9:ee:32:6f:57:53:a7:71:b1:20:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:79:1A:92:F3:E8:8F:60:6C:1A:2B:24:A7:3C:EF:3B:79:88:63
X509v3 Authority Key Identifier:
keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:0d:93:82:85:68:20:d1:a0:65:f4:10:18:8d:1a:93:10:
ee:63:52:65:10:26:24:df:9d:e7:6b:d8:ab:e6:11:a2:00:75:
0e:63:5e:01:e0:94:3b:d1:2a:a0:67:4e:4f:64:63:c7:c4:e4:
fc:9e:00:a2:d4:78:e9:39:10:51:37:46:92:6b:55:21:f9:33:
16:3f:56:89:ac:01:27:77:7c:0c:20:df:67:d6:7a:61:9f:b3:
9b:09:c7:41:16:b7:67:af:ed:c5:f0:36:c8:fa:03:89:7c:b0:
54:40:5c:f4:e3:04:1e:8b:e7:c3:f4:0b:c1:65:03:0a:0f:67:
0d:42:00:6c:82:a1:44:ae:e7:d7:3c:bd:d7:82:c7:8d:a3:22:
46:77:8e:66:4c:a3:fc:b6:3b:8a:dd:c9:8c:f8:e4:90:a8:9c:
06:a2:af:2b:aa:98:0e:2c:bb:9c:3c:98:4d:21:97:60:be:f8:
bd:a6:91:e2:06:b3:7f:5a:82:db:87:6d:f0:bd:3d:a6:17:72:
37:8c:c9:51:5b:f1:68:49:17:22:fe:38:b8:8b:68:99:0d:3a:
4d:5c:e9:9f:e2:fa:56:ad:3c:3b:eb:5f:6b:74:5b:15:8f:99:
61:bc:9c:8a:bb:d2:b0:96:8d:14:b5:19:b3:b2:6a:86:5b:f4:
43:27:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client