Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: qFQNg/D6/0vDfGRaGpGYdLwn4+5r1V1BDxbNt4uQW14=
Subject key identifier: 2A:02:F0:CA:05:B0:41:46:93:E7:45:40:CD:E7:C7:7B:ED:07:79:FC
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019CE7EE4BA35C5F7C583E08AD17E2C45413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 16:01:19 +0000
Manifest this update: Fri 13 Mar 2026 16:01:19 +0000
Manifest next update: Sat 14 Mar 2026 16:01:19 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: Zx1na5Nz1oo7nGxRnB1sgyOVzp0S6c4cqWl2h0JMLAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ee:4b:a3:5c:5f:7c:58:3e:08:ad:17:e2:c4:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Mar 13 16:01:19 2026 GMT
Not After : Mar 14 16:01:19 2026 GMT
Subject: CN=2a02f0ca05b0414693e74540cde7c77bed0779fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:9d:70:c2:ce:cc:a4:e3:31:25:ff:a1:56:
88:79:60:b0:e4:c7:3a:75:de:46:12:6b:54:61:ff:
68:61:06:4f:ee:47:2b:55:58:44:ac:73:ab:c2:2e:
e3:0a:df:4f:b4:c7:d0:65:d9:a8:b2:30:98:76:a7:
04:ce:ba:7d:e6:e8:04:05:c4:4e:e3:64:f0:bd:4f:
65:98:0a:34:c5:8c:46:d9:a0:a6:b5:a7:f7:ff:30:
dc:e0:b8:ac:65:8e:a4:06:16:c9:8f:cf:6c:e7:2f:
d6:09:48:4c:31:78:c8:09:d2:f6:14:99:8e:f5:f0:
65:31:93:10:b0:db:88:a7:20:a8:30:6e:e8:e9:9d:
51:50:5f:99:da:4b:78:a7:3b:17:b0:df:f1:85:f4:
56:d2:fc:e0:3a:ab:c2:ab:5a:1b:7b:32:98:7f:8c:
9e:43:91:fa:1a:7e:49:b4:42:92:e1:ab:0f:fb:d5:
78:5e:80:6a:fd:3f:1e:77:d2:a9:22:9b:20:5f:b1:
22:93:0e:33:f9:56:b2:e5:7c:88:05:a6:c5:02:ea:
60:71:05:8f:05:f4:88:83:88:fc:ef:ec:3b:23:a5:
b2:ab:52:33:59:f9:9d:99:35:fb:41:31:49:18:bf:
01:4a:3f:62:8e:d1:42:ca:92:19:52:5a:42:72:bc:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:F0:CA:05:B0:41:46:93:E7:45:40:CD:E7:C7:7B:ED:07:79:FC
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:6f:93:ea:a9:a5:d1:f7:0d:4f:81:c6:2d:d8:84:56:fc:
e3:ee:62:fd:9c:e0:3d:4e:74:50:ea:f4:85:48:5c:f9:5b:7b:
23:06:f8:ba:54:ec:f8:76:6b:c1:a0:ae:da:ee:c1:4c:0e:37:
f4:22:e6:44:78:40:de:bd:97:98:4e:80:c2:41:4d:24:1b:b2:
85:1a:27:64:84:44:26:b3:7f:01:26:8b:92:cb:58:de:6a:64:
62:ff:5c:5e:5e:ec:2a:e4:9c:8b:20:54:7e:73:16:0c:de:2e:
ce:8b:16:fe:07:f2:60:d2:ba:cd:6e:0e:bf:eb:85:d7:d5:c4:
fa:c5:71:93:9b:9d:7c:45:5c:5d:77:c4:96:59:30:c8:94:51:
f3:d4:1b:cb:e7:84:d0:96:cb:29:6d:16:c0:73:7f:32:84:17:
e5:af:83:32:66:0c:2e:35:21:53:a7:2e:d3:3a:ae:44:87:46:
61:74:ae:a4:bc:ea:ff:42:df:60:b1:da:6c:a1:2b:17:1c:df:
ec:b0:3c:4b:06:8f:dc:e3:4e:55:da:20:3f:51:bc:6d:29:e2:
90:4f:4c:59:6b:2b:9f:b1:2a:8d:a5:f9:ae:15:b9:6c:f8:6c:
62:bb:37:7a:92:2c:7a:d9:05:6a:3a:bc:9d:3c:e6:ba:20:59:
48:a6:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:47:51 2026 by rpki-client