Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: 9Syuk+/tbl0/+qpVncnJOfZIZ0/gCBALnfukHL6FabE=
Subject key identifier: DD:F4:24:7C:D9:CD:70:A0:2D:D4:7B:93:EA:93:41:04:B4:4C:9A:DF
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 019D3940905D78248EE1BDF8E92792D625FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0CD3
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: g9UJlGlc6UYgPu/vptZzlK2hwFXEa2ItIl0fXLy8c2w=)
2: xyOkTXVPZjz9JAhos1QM2vsm3W4.roa (hash: QXjoMKDwi6j1vpZqYsBGzsQGgoo9dIBXi5WlfEHsxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:90:5d:78:24:8e:e1:bd:f8:e9:27:92:d6:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=ddf4247cd9cd70a02dd47b93ea934104b44c9adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:5a:b7:a7:7e:46:83:01:dd:85:f2:0f:c0:
62:1e:00:06:ad:68:33:14:48:fb:7d:23:f3:2e:4b:
22:81:d1:ad:96:38:75:62:74:fa:01:12:6a:fe:19:
9c:59:20:c2:e0:d9:51:84:2a:cf:0c:0a:30:80:4e:
13:b3:3f:a4:6f:1e:88:c2:26:46:83:64:1a:38:9e:
22:bf:c2:89:d2:6e:18:4e:ae:ff:e6:44:e8:b5:39:
f5:ee:31:98:37:8c:ec:5e:a8:c9:d9:c8:bc:d7:8c:
ba:71:04:bf:00:ed:26:49:f2:d6:00:4e:6e:55:bb:
79:d9:2f:34:ff:5e:03:24:a1:ae:75:31:71:52:96:
86:1a:fc:d8:2b:b6:6e:04:01:cc:ff:a9:df:de:bd:
b8:f2:a8:f7:9a:38:89:03:b7:5b:b8:ec:ac:5a:da:
6d:a0:61:cd:0f:b3:5e:5c:4f:51:49:c8:49:5c:65:
f7:fc:7a:e3:91:b3:c7:94:5a:af:9d:46:5b:f3:27:
d2:bd:87:ef:1a:c9:66:f4:82:66:44:23:85:4d:d0:
9b:b0:62:30:c5:6d:27:69:ea:3d:d3:04:1a:d1:8a:
6a:68:1e:b7:f5:11:60:b1:d2:26:ab:47:51:4b:3e:
81:28:ce:25:a2:86:26:f5:fa:a3:85:91:7a:71:85:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:24:7C:D9:CD:70:A0:2D:D4:7B:93:EA:93:41:04:B4:4C:9A:DF
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:3e:0f:51:45:21:bb:4a:14:36:f6:0a:2e:1d:29:c8:be:
ee:db:8c:2b:56:f8:fd:d2:46:92:56:27:1f:63:c3:7e:f9:28:
a2:a5:27:4d:d2:f6:c2:08:a9:54:b5:76:b5:07:47:15:c0:50:
c7:3f:4c:97:b0:a3:df:48:71:7f:f9:4a:68:2f:7a:26:c7:43:
0e:2f:9e:74:dc:8c:95:a5:b7:f0:7a:31:c4:7c:e0:06:45:e0:
f0:95:ef:3c:f3:9d:ca:2d:c1:92:73:fc:b0:b9:28:20:1e:4b:
5f:33:6e:d1:64:4e:b4:41:74:25:d2:bf:19:35:f5:41:2c:02:
39:50:4c:85:20:a1:f0:f7:f1:df:7b:34:ca:19:3e:eb:fd:b8:
15:88:3f:5a:b6:f4:b1:f5:84:4e:65:49:48:3f:aa:61:68:70:
8b:c0:7b:45:78:bf:31:86:08:39:74:ef:41:1b:a4:dc:01:97:
37:73:a6:9d:ed:de:6d:b4:92:ad:cc:ef:27:fe:0c:9f:3f:14:
50:ae:37:31:30:6d:82:2e:58:27:ee:03:62:d8:01:3e:02:87:
84:c6:c7:42:5c:39:86:11:e5:17:33:7f:dd:92:6e:e5:ab:d4:
96:d4:b8:ed:43:54:1f:0c:26:22:28:2b:f1:7b:91:c0:82:b7:
ad:55:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:03 2026 by rpki-client