Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: 9D7wyqfc2jgDoA9u/q38K0hOzpw8e4NjR+qSnN3De1w=
Subject key identifier: 69:9E:92:8C:CE:9B:59:62:70:2E:33:56:C2:F5:81:54:2D:CA:B2:BF
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019D3977AD3FFB6F246C4BE9E2F47CE00422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0CFD
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: eSiV1CJIA4sw/v+qHRFp0EchBJrVFrYama6Cfx5s2RM=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ad:3f:fb:6f:24:6c:4b:e9:e2:f4:7c:e0:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=699e928cce9b5962702e3356c2f581542dcab2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:6c:f8:34:05:91:8a:ba:b8:61:58:76:c1:
dd:d5:dd:31:a5:1d:60:8f:1b:da:ec:a8:c9:22:c4:
77:63:81:2e:4b:0b:a7:9d:cb:40:86:79:86:77:00:
a6:02:23:71:0e:77:b4:cb:a6:8a:f5:58:6b:2b:3d:
83:40:1a:b1:3b:31:a4:02:a1:fe:64:99:ef:95:c5:
20:5f:8f:5c:f7:d7:00:89:4c:a0:6f:04:b4:3d:b0:
7d:d5:5c:a2:26:df:d8:46:39:48:e5:92:61:fb:4f:
3e:b1:86:23:8a:20:dd:b0:62:be:11:04:12:f4:5d:
51:b3:09:e5:c2:f2:65:27:15:7f:9e:4c:f5:a6:44:
6f:d4:e0:56:a1:1d:e0:20:17:e8:97:3d:b6:42:88:
50:39:10:fa:97:f5:d3:f1:9c:e7:3e:9c:99:76:c1:
71:45:ff:7d:46:2f:47:85:9d:28:1c:5e:f9:8c:35:
c1:b4:2a:fd:20:5d:5a:b0:94:a2:0c:b5:fa:ec:08:
ff:c4:b6:3c:53:58:86:b6:e8:4c:c2:84:0e:19:da:
13:ce:07:51:55:a8:3e:d4:14:8f:79:64:e3:91:6a:
11:6d:14:38:b7:b2:18:9f:d7:12:2b:51:9b:8f:9a:
2b:f2:2a:12:e0:c1:5d:77:5f:d3:d9:4a:38:a8:88:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:92:8C:CE:9B:59:62:70:2E:33:56:C2:F5:81:54:2D:CA:B2:BF
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:48:d0:82:40:b4:f2:40:5c:21:ec:80:d5:7d:cc:dd:e6:af:
7b:85:83:7b:12:02:76:e9:91:e2:1f:9a:ec:25:af:76:fa:d4:
65:34:7a:26:d0:ac:53:e5:11:a5:d5:6a:0d:43:ff:fa:55:bb:
0f:a5:df:2f:d1:dd:6b:3b:54:1f:4e:c7:b7:29:1a:90:ac:54:
fc:42:99:d9:58:37:cf:9a:e7:15:4d:4d:35:7e:99:44:66:b1:
78:16:00:75:95:40:e6:c5:d1:45:9a:a2:f0:4b:32:02:96:01:
4d:68:37:32:f1:85:bc:44:3c:40:a6:88:c4:c3:df:d8:18:7b:
47:6f:10:08:fd:00:d3:d9:33:3a:88:d2:21:4b:b3:38:cc:e5:
86:c3:e7:ef:59:8c:9e:0c:16:2b:0c:94:11:6a:f9:35:fe:09:
00:a4:30:68:f2:ce:59:d0:18:9c:8b:30:84:8e:7f:b3:20:83:
96:b8:39:57:54:17:52:ea:fe:a7:12:2a:0d:3c:df:25:91:90:
76:8d:d4:df:53:67:91:22:59:da:21:45:c4:bd:42:b1:b9:79:
47:3b:84:7a:a1:1e:2f:18:88:63:59:51:cc:f0:32:15:bc:5e:
ff:01:15:25:64:9e:38:9f:97:9c:95:5a:44:64:ff:d7:c0:76:
8d:7f:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:16 2026 by rpki-client