Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: Ay7k06bpLnNgvGUkdRttrGOzzOx1nRQroUWH4U5L+X0=
Subject key identifier: B2:B6:9B:81:4A:3A:4F:BA:C6:F6:AD:0C:E1:36:FA:E6:25:9A:B5:C9
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019D390A7E72DFBDC72D1FA60E5A0680276C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 15DC
Signing time: Sun 29 Mar 2026 10:01:22 +0000
Manifest this update: Sun 29 Mar 2026 10:01:22 +0000
Manifest next update: Mon 30 Mar 2026 10:01:22 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 7kQPf7YxNTvcXknnjOZBYqpHCOdZKVY1qdokv/uL2sg=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:7e:72:df:bd:c7:2d:1f:a6:0e:5a:06:80:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Mar 29 10:01:22 2026 GMT
Not After : Mar 30 10:01:22 2026 GMT
Subject: CN=b2b69b814a3a4fbac6f6ad0ce136fae6259ab5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d8:bd:7e:1c:bc:0a:48:d3:4f:e5:64:75:e7:
4e:0d:f2:0e:af:e2:ce:12:6a:4b:4d:6a:8e:e0:06:
21:cb:cd:d9:b1:2e:b0:99:48:79:04:39:39:59:0e:
2f:eb:cd:bd:fc:52:da:67:e4:62:df:ac:0c:3a:bc:
dd:d0:fe:f6:d7:37:02:fe:c4:19:98:dc:51:58:5c:
15:6f:6b:03:43:19:eb:dd:f8:b8:7a:7a:c8:ca:86:
a5:8a:03:e5:1b:45:2b:8e:1b:6d:72:59:94:03:61:
2e:9a:92:7b:46:f8:b9:b5:94:d7:0c:9c:da:13:91:
60:15:4b:0e:61:a1:51:91:d1:22:1c:13:51:55:d1:
25:d9:db:51:dc:f8:2f:64:0a:7b:8e:8a:e8:27:1c:
90:b9:ff:b8:9e:70:39:1c:dc:c9:83:58:2c:6c:99:
6a:fe:8c:0a:af:49:d1:e4:9a:06:2a:f8:5d:58:27:
1f:25:ee:27:c2:e8:c7:b1:e0:28:e1:b0:27:50:92:
39:53:33:e7:f7:75:ba:1e:73:91:e9:42:16:f4:35:
78:1c:54:17:41:0f:7a:c9:28:a3:51:e0:e4:23:21:
20:fe:ad:95:65:c0:17:f0:28:18:b4:9e:17:16:87:
2d:02:19:bc:6f:06:23:3a:de:32:3c:68:83:c6:41:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:9B:81:4A:3A:4F:BA:C6:F6:AD:0C:E1:36:FA:E6:25:9A:B5:C9
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:75:ac:f4:f2:5b:1b:04:82:56:45:36:54:ef:9a:5b:94:49:
a0:35:99:49:03:6c:e6:25:2e:d1:25:79:83:3a:b0:c6:6f:71:
83:a5:e0:5d:e1:3e:86:c0:71:02:c7:f5:d4:5e:9e:6a:9d:e4:
6a:69:71:2d:ad:0e:d4:84:f3:07:e2:23:28:91:f5:7c:37:e1:
2e:ad:04:d9:e5:3d:62:0b:bf:e2:43:62:2d:a8:68:7e:4c:c7:
41:83:1f:98:c2:32:54:8f:9c:2e:20:7e:46:0b:cb:53:a4:7b:
11:2a:73:19:32:2e:bb:d1:e1:b0:64:8b:8d:6b:7e:8f:3f:47:
df:c3:84:8a:ce:e7:78:27:d7:3d:75:79:88:7a:c4:04:27:0a:
55:c0:f0:12:2f:25:81:b0:a2:c9:19:9b:01:93:fb:79:ce:d9:
21:e6:fe:a3:49:83:9f:8a:09:40:fa:5a:13:32:17:bf:65:d2:
76:cb:0e:56:64:5b:f8:3e:d2:5e:02:ef:69:eb:fe:5b:ec:ab:
45:2d:39:38:0b:a8:db:e7:b3:e5:db:43:74:e6:c4:de:c0:b4:
d8:a8:79:a5:d3:23:63:ce:58:37:c2:1f:f3:64:18:f8:6b:cb:
37:ad:5e:e9:a8:b3:97:d7:31:84:31:e4:b6:fe:ae:06:fe:04:
f4:f5:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:22 2026 by rpki-client