Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: nhXPNbSNzA2P5LLt+CaEFCQXa2/OLTBt36mlMedUsSc=
Subject key identifier: C1:71:B9:1E:30:2D:9C:B0:BA:17:6C:2B:B5:72:F1:6B:CB:D7:35:7D
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019D390A0DEEA9FD6869FB3CE3793219091B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: RlL6IgEXEHtlHG87R_tgHeGJuso.roa (hash: e4pQoIrHsDZ81Hd65Er2benKsfXZs73qgjEzBGazD/4=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: VuPi6rPo0QUDwlYIz7UwaD90sOlLXWweC8u/NG5+EYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0d:ee:a9:fd:68:69:fb:3c:e3:79:32:19:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=c171b91e302d9cb0ba176c2bb572f16bcbd7357d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:57:24:a3:13:25:06:47:67:a7:55:99:5a:
d6:c9:d4:6e:4a:f4:dd:fd:f7:40:75:e8:0b:58:a8:
c1:4b:0a:2f:0d:7e:8d:6e:58:f6:9e:38:64:9e:ec:
ee:b3:ef:a5:42:37:01:62:c7:ef:20:36:ec:41:7f:
11:36:05:3b:dd:fc:b7:6f:a3:74:6c:c9:22:f7:d4:
71:c6:05:b2:b9:4a:52:31:69:6f:0b:67:22:5e:dd:
54:64:51:32:e8:22:ca:ad:66:6e:65:bf:6a:f4:51:
55:21:05:de:b7:17:7f:be:df:7a:b7:97:d5:be:bb:
7a:77:3a:cb:b5:99:30:00:12:18:7d:23:1a:85:36:
f2:53:bb:3b:61:b0:3a:6d:7b:04:aa:9b:07:e7:1e:
1a:fe:e1:90:dd:db:89:d1:9d:6b:c6:e5:78:d5:fd:
dc:35:4c:34:b6:6a:a6:a9:4a:0a:87:38:76:2b:b5:
02:d6:de:64:11:b0:8f:84:f9:5c:f8:a7:83:2f:bc:
9b:c1:4d:85:01:bc:8c:e3:9c:5f:05:b8:9c:33:6f:
f4:53:b6:fc:9e:a5:ae:e5:73:a3:55:68:37:03:b3:
2d:45:07:f7:bd:bf:8d:a4:61:20:53:3b:99:eb:18:
04:79:71:b7:94:42:8e:ff:92:e9:c6:ca:2d:45:e1:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:B9:1E:30:2D:9C:B0:BA:17:6C:2B:B5:72:F1:6B:CB:D7:35:7D
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:88:3c:8c:9a:16:20:64:91:89:be:5f:fb:60:e5:b0:25:
ec:36:6e:a6:28:a3:fb:c5:c9:86:69:63:60:3b:5e:83:66:0f:
b9:7e:22:bf:95:28:db:f4:10:c8:ad:b9:57:dd:a4:8e:a6:09:
fa:63:6b:bb:11:dd:58:c9:4f:48:76:54:b1:56:68:5e:f0:74:
ae:77:2f:9b:99:38:c9:28:42:d7:14:bb:f9:cf:b4:d3:d6:fc:
bc:09:53:1f:9e:33:04:1a:6b:83:78:b4:a4:b3:44:1b:f1:3b:
11:9e:4c:e6:8c:ab:90:9a:45:3f:dd:0c:1c:06:52:fc:f8:d2:
0d:71:02:84:a1:b9:47:73:6f:26:ca:79:00:95:dd:e2:16:83:
e5:2c:51:b1:cc:b3:cb:47:d3:9e:5e:cd:de:f8:1b:c6:64:51:
a5:68:66:93:61:0d:56:c7:0c:06:e5:a7:fb:96:ed:3a:22:bd:
0f:32:a6:ed:05:77:78:22:8e:4c:d8:ef:6b:e8:0a:48:b6:4f:
f9:dc:a2:f6:be:0f:f3:fa:02:79:69:c8:13:a5:fc:43:5a:b6:
53:ec:13:9e:53:9c:7d:60:24:2f:37:92:bd:70:ef:49:94:f0:
ba:6f:04:eb:0b:16:39:e5:a2:36:09:20:3a:6c:56:28:6f:44:
71:9b:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:36 2026 by rpki-client