Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: Dem6EzaelF6q/MINTIg448OIrHgDX/y0EAaMSeS8toQ=
Subject key identifier: 59:65:4A:3E:28:C7:2B:A9:76:7C:10:24:4A:E1:7E:BE:8E:B3:D4:7C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019D36E53D05BC98222FEFBE6D72D62C7676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 12C5
Signing time: Sun 29 Mar 2026 00:01:26 +0000
Manifest this update: Sun 29 Mar 2026 00:01:26 +0000
Manifest next update: Mon 30 Mar 2026 00:01:26 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: rd6wVRYb6YK++0erMexBGhPDnBa1EPR2LDGC5bmsKOI=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:3d:05:bc:98:22:2f:ef:be:6d:72:d6:2c:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Mar 29 00:01:26 2026 GMT
Not After : Mar 30 00:01:26 2026 GMT
Subject: CN=59654a3e28c72ba9767c10244ae17ebe8eb3d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:86:54:de:ee:32:0d:95:03:3b:86:b4:95:
94:9a:c3:d9:65:1f:bd:6a:67:aa:48:6d:8f:10:12:
3f:9b:33:09:8d:38:dd:c8:82:d6:02:d7:96:f5:2d:
2b:8d:96:9a:6e:a1:98:4a:ab:8b:03:53:ab:e0:53:
e5:68:78:c5:74:62:cf:c9:fc:8c:18:ce:5c:b4:29:
c8:1e:ae:2d:2c:d6:51:d2:97:23:c8:7d:ec:23:10:
21:ae:e0:43:b0:7f:4f:ab:8f:38:e3:09:96:e8:ca:
59:c9:54:15:6d:ce:dc:ae:3a:1d:17:65:52:78:df:
63:41:e7:a2:fb:72:f1:23:d0:59:8b:49:7b:19:ea:
21:96:3a:f7:0b:17:4a:b5:56:e1:94:65:6a:97:bc:
fd:d4:aa:f7:72:35:a4:1d:8d:ab:0b:6b:40:16:0c:
0a:5b:0b:41:36:5e:bb:53:24:a7:15:ae:18:a8:12:
02:77:73:27:0b:d1:0e:68:21:16:d0:e2:39:c7:da:
27:7a:7e:2f:70:68:69:63:ca:f8:51:7d:dd:c8:3b:
26:50:63:0c:0f:d5:53:55:61:47:1a:0f:a6:ec:a5:
8f:f3:6c:78:ea:81:56:c1:35:ac:67:e4:8d:44:ef:
6f:d1:ea:e6:25:7a:3b:10:60:4e:05:98:4c:36:69:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:4A:3E:28:C7:2B:A9:76:7C:10:24:4A:E1:7E:BE:8E:B3:D4:7C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:6c:0e:19:a8:cb:54:f6:74:6a:8f:53:c2:98:59:a8:5f:
c8:bb:1a:63:5d:cb:e9:59:3c:b3:ec:e9:8c:68:61:9c:f7:f3:
8a:70:4c:63:91:3d:1f:91:ad:20:48:cf:fb:60:3a:58:63:3d:
bc:f5:56:28:dc:33:16:e7:e4:d7:02:08:e1:66:32:70:76:89:
e2:d7:bc:ed:eb:54:fc:f5:88:13:a7:25:d6:82:6c:4f:92:aa:
28:1b:54:a5:00:38:6a:df:b0:83:b2:46:0a:e1:5c:61:23:4c:
41:0b:97:59:4f:4d:0e:9c:97:12:75:4b:7e:e6:82:a4:2f:73:
58:2b:14:2c:75:08:d5:9f:7a:22:3c:9d:e7:b2:1a:41:04:11:
0a:d6:a0:0a:ff:b4:f5:7b:6d:46:73:1c:07:42:4a:68:9a:86:
12:91:70:68:06:8f:bd:8d:cd:d9:de:08:be:5e:ec:e5:6c:b8:
5e:09:2c:9e:d5:16:e6:f6:1a:a8:77:bb:62:3b:69:d3:57:52:
27:5e:5b:ec:c9:b9:eb:b3:4c:e2:e2:c9:d6:5c:60:8e:05:97:
91:60:6a:9f:4e:db:5c:22:00:e5:35:e6:33:27:d8:37:ca:d3:
c8:29:85:a2:dd:16:28:ce:c5:2d:7d:08:ab:90:3b:de:7f:bb:
b0:97:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:24 2026 by rpki-client