Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: Vs8lH4NRfICjK66IJF1UNPiTsOP/G+0vrhfGK1hQ2Qo=
Subject key identifier: CF:E9:45:D6:1A:D0:CC:DF:3B:40:5B:E3:F0:E7:64:BE:71:3B:8C:98
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019CE4113C6DD66C3691FE082D4321E1107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1868
Signing time: Thu 12 Mar 2026 22:01:00 +0000
Manifest this update: Thu 12 Mar 2026 22:01:00 +0000
Manifest next update: Fri 13 Mar 2026 22:01:00 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: 9RW7sanVMIpolDDDOT+OhBH/QC6vTpo3LJHB9JxTebE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:3c:6d:d6:6c:36:91:fe:08:2d:43:21:e1:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Mar 12 22:01:00 2026 GMT
Not After : Mar 13 22:01:00 2026 GMT
Subject: CN=cfe945d61ad0ccdf3b405be3f0e764be713b8c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:e5:4f:b3:3b:82:d8:e6:bb:45:32:cb:d4:
9e:b0:8e:dd:df:9a:6a:2e:30:17:fa:ac:42:94:05:
89:b1:3e:9f:81:28:01:b2:df:21:a9:a4:f1:f3:f0:
e7:57:2d:c0:32:94:c7:14:46:b8:83:79:b2:bc:b8:
f3:38:d1:f0:bb:04:f8:58:bf:12:ad:2a:16:05:e5:
11:7b:b3:19:41:f5:85:29:eb:cf:a8:55:d9:c1:b3:
63:f8:da:65:9d:9a:b7:27:3c:55:52:43:1f:cc:8f:
46:ef:c2:d0:a4:0c:34:69:6a:20:47:7f:8b:9e:81:
f2:50:7d:5a:1f:58:7c:bb:ca:e1:6a:30:2c:96:ca:
d9:b5:0d:07:fa:f8:ea:d6:2c:35:65:01:e1:46:83:
cb:53:56:40:63:6a:25:e2:9f:b8:8b:8f:b4:a7:cb:
56:77:76:19:e7:4c:48:a6:61:5b:28:b1:e9:d7:0f:
80:b4:47:b3:fe:ad:c5:58:6a:8a:fa:13:a7:95:34:
b7:14:b7:e6:31:be:24:48:00:43:c6:23:33:29:b6:
48:7c:f7:dd:5e:f7:72:d0:2c:1c:e5:ac:c3:11:e1:
ee:a8:03:78:bf:30:b7:c0:e1:f6:fc:4c:a1:6b:e4:
c2:16:d1:d5:52:43:08:a6:f4:54:73:85:aa:57:f3:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:45:D6:1A:D0:CC:DF:3B:40:5B:E3:F0:E7:64:BE:71:3B:8C:98
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:af:f3:42:82:9a:29:79:c5:bc:06:0c:1f:05:46:46:56:
bb:c2:cb:0a:67:a3:4c:10:3c:28:d3:53:1b:b2:05:09:51:d6:
86:c7:6f:fb:11:92:f4:26:0f:30:d8:0a:50:62:13:a9:6e:78:
ab:ab:23:8b:76:99:5f:28:80:e1:3f:83:97:dd:7e:45:b3:54:
e0:b4:a8:f0:a6:36:13:eb:3a:03:4d:bd:44:8a:c3:ae:f8:a9:
da:02:26:18:09:04:39:d6:6f:e4:97:59:e6:f6:b5:ab:e0:71:
da:19:9d:c3:09:4e:3b:7f:4b:2e:3a:ce:7b:40:be:f7:11:e9:
f3:dc:ab:14:ea:68:5e:3b:fe:c7:4d:30:3f:38:2c:25:f1:8e:
44:8e:07:94:c0:5a:05:3e:b3:9a:29:1c:2c:a7:48:4b:18:aa:
03:b7:23:b5:05:9d:cf:47:8a:1c:f2:15:0e:2b:b4:a9:57:54:
eb:93:21:7c:c0:d9:86:9e:a8:23:14:88:e1:58:77:35:20:09:
11:53:1f:4f:a5:18:5b:c4:3d:eb:d7:a8:29:37:0e:85:56:6a:
11:2d:30:3f:94:1e:f3:6a:9b:90:23:79:d2:8b:7d:a7:28:ce:
c3:96:5d:f4:65:08:dd:73:e2:95:4b:44:6b:72:dc:9c:22:30:
00:54:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:03 2026 by rpki-client