Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
File: c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft (raw, json)
Hash identifier: DLLL3Van24PUpDLLwBOmlKO0HrXeXGMx3QQqXFM6z9Q=
Subject key identifier: DC:88:75:CD:4C:D1:C4:91:CD:C5:E9:84:10:47:19:94:B0:41:6F:88
Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Certificate serial: 019D378921246903CDCF3FF2574BA330EA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
Manifest number: 0635
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa (hash: lP4WKQ/Dq546EBUx3DAqZW0kzkRHyk7qyZMudeX4Mck=)
2: b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa (hash: mDKFLIH7FuHNI+kvtJPVf/r21pBRJq19BldP6s0xeXo=)
3: c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl (hash: gAIrJNH/D6qW9eA+RCpf/BS2QtAOS0UskEIaeoU/33M=)
4: qZNOJzEV4DPh9ZPtyWo9Pd8MNJs.roa (hash: ojGpvLZ6COCZOIK883u42sTI+UZchWDbhIVZui0CDRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:21:24:69:03:cd:cf:3f:f2:57:4b:a3:30:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=dc8875cd4cd1c491cdc5e98410471994b0416f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:8a:3d:bc:05:3f:30:16:b2:17:46:e3:ba:
0e:25:be:e7:69:b5:66:99:c6:c7:fd:6f:17:91:48:
9a:dd:a6:02:f2:c0:79:7e:d5:20:96:14:26:c4:87:
56:18:58:e0:cb:f7:fc:ec:b4:ed:e7:63:24:7d:1c:
02:3a:d7:3c:e3:c1:41:42:81:f9:00:60:4c:c9:63:
ee:e6:f2:3f:ec:44:63:3a:9b:7d:1b:5c:7b:4d:91:
d0:e7:d2:f4:8c:cb:1e:86:97:35:a6:da:7e:f4:c6:
e5:82:71:a0:21:f6:9b:05:af:8f:a8:90:fc:65:bf:
12:0e:e4:f1:88:61:2a:a1:6e:89:8a:53:fe:ac:cd:
31:d2:63:95:07:05:d9:80:27:af:9d:8f:58:35:b3:
62:0d:e6:b9:e8:d9:44:7a:d6:e5:64:09:a6:74:2a:
f5:71:bd:23:8c:58:10:67:9a:ac:3c:e9:6d:fb:3f:
be:e8:f3:ba:74:af:02:27:2b:7a:52:cc:e6:d9:79:
00:b2:4a:1c:70:bd:63:8b:ac:b1:40:19:25:ea:32:
0c:ca:fa:5b:0f:01:3c:df:89:cd:a7:53:c9:bd:d7:
aa:ae:94:fd:1e:d2:a4:45:16:35:7d:e0:c9:54:e2:
fd:71:cf:ac:77:be:ee:ef:89:bc:fd:2e:4e:7c:0e:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:75:CD:4C:D1:C4:91:CD:C5:E9:84:10:47:19:94:B0:41:6F:88
X509v3 Authority Key Identifier:
keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:30:cf:9e:fb:e1:d6:20:aa:28:68:e0:15:41:b5:f4:69:26:
2c:91:f6:25:ee:f6:23:4a:ac:d9:e9:b5:a8:7c:cc:d4:45:7e:
92:92:b8:44:cc:40:7c:fe:58:f7:93:bd:10:29:82:01:b3:59:
06:91:fa:34:61:b3:11:5c:66:10:08:6d:66:84:51:09:b3:0b:
2e:ba:0f:56:27:3e:5c:8a:58:25:bc:9d:7f:68:f1:bf:8b:68:
61:21:9c:97:f1:b0:23:bd:9e:a3:8d:70:ab:81:5e:08:62:7a:
11:ed:14:71:e6:d7:92:06:7a:ac:82:da:0f:f3:2f:98:14:4c:
26:14:7c:bf:d2:fd:e7:72:35:be:48:73:69:45:a9:30:e0:8c:
cd:a8:16:47:34:cf:57:10:f6:f5:ab:7a:7c:e1:e5:fe:30:6d:
ce:35:f8:d1:bf:f8:6a:dd:f8:36:d4:fb:4c:a5:54:23:89:2f:
82:74:d9:90:7d:e0:5e:6a:5b:32:5b:50:e9:57:3b:c7:e8:a8:
a9:0a:db:b8:4e:2f:b0:bb:d4:e6:59:63:6f:ec:77:57:ce:ad:
ce:e5:4b:44:96:9c:a4:60:bd:b7:59:59:80:8b:77:3c:dd:ec:
ac:9d:a9:7e:73:e9:eb:dc:06:27:11:2f:6b:76:97:30:91:5f:
1d:2d:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:40 2026 by rpki-client