Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File: C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier: wrXGWUI/Ew/LJax2KtGQ1mWwQLQZVDMdHtRbTjzi0bY=
Subject key identifier: 02:A9:94:7F:CD:51:E1:CC:03:AE:B2:93:DA:F4:2D:E1:C4:3F:65:F6
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 019D389BDF1C36D0C927363DC82045E10C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: xTRQKZjBG+ksobA0tFqQJLYIk1Z/APUF22H3Bglw23Q=)
2: Pug_p9HITgpm7BJCSDWU0O14f6k.roa (hash: ZRQX3KG8bE/bbw5v9G0xJ8TDZlB8FFTvWWz9Ahu2Og0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:df:1c:36:d0:c9:27:36:3d:c8:20:45:e1:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=02a9947fcd51e1cc03aeb293daf42de1c43f65f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:9f:3e:01:94:de:40:c2:7e:87:65:3c:5f:
36:d2:43:d1:74:36:f4:fe:d4:72:53:5c:53:c1:03:
68:a7:76:49:8b:33:92:d6:ac:36:41:13:c1:48:54:
de:61:a0:64:82:bf:28:fd:a3:cc:f7:d9:78:a5:36:
7c:e8:8b:06:09:c1:b7:b5:79:e6:be:d4:10:27:ab:
ee:d5:54:75:3c:85:2f:b4:d1:a4:8d:79:a5:16:f8:
7d:56:9d:58:72:df:e1:24:cb:17:ec:32:02:b2:f0:
4d:b2:6f:b2:81:40:29:8c:4d:0d:3b:c2:ba:cd:ac:
24:12:91:4e:0a:85:90:b3:db:cd:2f:df:de:c0:b5:
ed:88:41:75:3c:49:25:c2:83:b0:f6:a9:45:73:7c:
fc:0c:ab:d1:e2:5e:ca:8d:1e:fe:5a:bd:7c:44:b1:
03:b9:2f:47:2e:c4:6e:d8:86:d9:2b:61:88:a2:1d:
66:b5:47:c6:6e:e6:56:02:30:0a:f2:f6:ec:69:02:
e0:92:27:d0:0b:89:64:6a:c7:8b:7c:a6:fb:ce:28:
90:56:ad:6f:b6:38:80:c5:55:69:60:94:74:d4:6f:
a9:5e:53:2e:d7:4f:1f:29:8f:7f:65:10:d6:a9:f4:
22:26:ce:7a:d1:88:65:73:af:30:c2:37:42:ca:14:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:94:7F:CD:51:E1:CC:03:AE:B2:93:DA:F4:2D:E1:C4:3F:65:F6
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:f0:c4:46:dc:12:32:9e:23:d0:60:aa:55:14:de:7a:e1:
ec:92:f4:80:0f:0a:af:53:0c:92:a1:64:fc:b7:67:9f:90:3d:
54:08:3e:eb:08:f2:67:a2:7d:b6:89:11:73:a2:14:16:04:6d:
64:54:85:c8:87:e0:d6:5e:a7:f2:84:dd:31:98:37:eb:1d:a4:
ee:3d:10:9d:80:e8:d9:76:26:d3:70:aa:2c:21:97:f5:dd:88:
5c:ab:e9:d2:d3:6e:b9:6b:e8:2c:c1:36:7b:65:9a:bd:1c:31:
33:9c:6e:fa:54:26:f1:f6:95:19:b2:55:bc:fe:6c:fd:c5:09:
c4:e0:e1:cb:52:39:5c:06:0d:19:7f:5c:45:5b:1c:63:3c:d8:
1d:a5:e6:a7:35:d9:f0:e4:b6:76:c7:a0:ae:9c:e8:35:1c:87:
a6:ec:6d:1c:0e:2d:a6:41:3b:d9:b9:f3:63:d9:f8:12:19:47:
f0:c1:e1:5f:b0:2b:f8:0b:79:3e:36:51:a6:ee:ac:1a:e9:75:
0a:bb:5d:01:c7:f9:60:4d:35:54:90:82:d4:d7:f7:c7:d0:e0:
1f:bd:fa:d9:9a:9e:ac:a5:9c:7a:e5:e4:af:5b:c1:de:6a:3b:
83:06:19:51:13:e4:d3:44:29:14:1f:c7:1b:da:4f:b4:69:f1:
98:95:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:06 2026 by rpki-client