Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: THchsK90uSGK02X1rt+yAwkitKrWjhRpcjFGkC2O6uU=
Subject key identifier: 60:74:27:F7:3C:C5:FF:C7:6B:E5:D9:8F:71:85:04:14:29:BD:E9:A0
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 019D37530F0CB1136EEFF9E761FB888A57C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0C77
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: 61qsGwJZN7N+Z7SkIqilXg6Oo7M2lu2lAhAytdSrwJM=)
2: qm9g69jYnWNc78LF3m9f86Ep1QU.roa (hash: M/tK1MAFQ93LFa0QgLHnChdjSMrNpdZDpgg6UVG6Za4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0f:0c:b1:13:6e:ef:f9:e7:61:fb:88:8a:57:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=607427f73cc5ffc76be5d98f7185041429bde9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:0e:a6:9d:f2:87:60:6a:39:45:ad:f8:fa:
d7:f6:aa:0c:fb:e6:c6:b2:e8:a2:57:ff:8f:bb:80:
a3:fc:4f:55:db:69:32:1f:6e:f9:0e:77:b2:4a:34:
3d:1e:88:a6:23:73:d3:2e:5c:f5:86:5b:92:8e:c9:
f3:a3:cd:97:db:15:47:92:62:35:30:75:6b:67:85:
c8:02:1e:36:37:bc:d2:1d:5e:25:2e:3f:fe:c1:1c:
45:ca:4a:4b:c7:18:6f:6a:a2:3c:44:a3:a6:ee:42:
63:39:12:b8:d5:e2:bf:12:ac:39:26:17:69:ed:67:
c0:56:69:45:8b:59:87:d5:e2:66:cf:06:64:87:58:
b6:67:f3:11:fb:1d:c7:e5:8e:ba:1e:75:29:16:66:
e2:b2:51:7c:86:ef:22:69:df:50:41:4f:a8:13:56:
6a:df:4e:3a:9c:e2:04:b1:1c:34:7b:8e:28:f5:7a:
24:9e:7d:a4:12:18:ef:d3:5e:4e:6d:9e:5c:76:49:
9b:fb:ee:83:0e:4d:c2:db:57:31:ab:57:7f:b9:28:
40:01:0d:c6:e2:24:a9:dd:ad:f6:28:1a:1a:3c:2c:
f6:07:05:fd:7c:9e:bb:bc:29:09:5c:91:c9:c5:11:
92:23:bd:4f:9d:4f:a9:83:cc:d7:f2:10:47:df:90:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:27:F7:3C:C5:FF:C7:6B:E5:D9:8F:71:85:04:14:29:BD:E9:A0
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:11:c3:c6:90:27:3a:df:cd:ed:eb:12:2f:31:0a:2f:ee:
7e:b5:7e:cc:b4:99:e9:aa:aa:b1:a7:8b:d0:c9:43:04:bc:77:
c1:b2:ee:aa:a3:6c:79:e6:ce:08:be:89:bb:a4:ee:3c:34:e2:
eb:35:f2:e6:bc:f1:e2:5e:92:ed:7a:02:cc:2c:15:68:3d:43:
b6:b3:56:83:86:35:3f:2d:28:77:75:64:8d:26:20:99:16:a3:
eb:ce:7d:a9:b5:14:37:7f:06:57:f8:eb:5d:c4:70:2f:2c:26:
88:32:7f:9a:e6:78:06:9c:4a:9b:a8:84:71:0c:ea:8f:73:88:
48:1f:40:ab:6d:4e:0e:af:33:f4:a2:ef:56:b6:d1:da:7d:49:
72:53:b2:fb:e4:05:63:f0:79:0c:55:33:ef:37:39:a5:de:1c:
32:19:b8:a1:a2:9c:d9:92:f1:ba:04:51:4c:39:55:0d:dd:2e:
03:e9:1a:57:0e:a6:f3:e0:dd:be:cf:e3:68:3e:d9:50:66:73:
eb:43:fe:eb:ff:ac:96:35:0a:4b:83:88:a4:18:a2:d8:c4:17:
11:27:c0:42:25:5b:54:a5:fb:94:b4:0a:4d:98:c0:52:76:e8:
60:72:0c:13:6a:95:30:c5:5f:be:14:4d:ad:ad:7c:e3:1e:2d:
21:d1:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:13 2026 by rpki-client