Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: WojSDj9mUtc8fSkohe+7Evkr60h7sgoH44kvLi53yX0=
Subject key identifier: 12:79:13:68:3F:CE:22:28:AA:69:D7:A4:35:2A:7B:2D:97:6D:A7:C1
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 019D37F71C10D3ED2F4AB44F15B1C2D7B8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 1259
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: dQmxgg7akjnCNeJ08WLOwQkRaYRsp8/TREFN1aszEKQ=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1c:10:d3:ed:2f:4a:b4:4f:15:b1:c2:d7:b8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=127913683fce2228aa69d7a4352a7b2d976da7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:97:af:3c:da:08:48:c0:56:fb:53:17:e4:
f9:24:b1:f2:28:80:c3:81:db:21:bf:2b:c5:59:cd:
b9:65:79:5e:6a:83:19:97:33:56:53:59:e8:e9:7b:
eb:7f:fd:9a:80:80:9f:7c:96:16:05:a1:b8:c5:10:
9a:04:45:7a:8d:61:40:ac:54:54:a5:6c:06:94:73:
25:33:05:a8:49:6b:ba:3c:8f:bc:a3:93:75:e2:69:
de:11:8d:f5:cd:b2:3b:5c:57:60:bb:61:25:48:c6:
06:22:e4:18:8f:84:b5:50:8e:7f:aa:cc:97:6f:48:
56:a5:21:2b:82:31:4b:2f:a6:98:92:ea:5e:e2:68:
94:63:b9:9f:77:82:20:8f:bc:8c:fa:98:3d:5e:f6:
cd:64:21:4d:c2:85:d3:9e:41:83:67:34:b0:74:1c:
14:f0:03:d7:80:59:82:d0:d3:19:ab:71:f4:a2:48:
d5:23:e8:60:ca:ae:45:1a:dc:4e:ae:4c:47:82:78:
e0:a7:f3:47:da:89:46:11:f1:b8:fd:6c:2d:27:4e:
44:8d:17:9e:16:bc:c6:51:0b:ff:52:e3:ab:d4:02:
4a:c4:8e:26:33:b8:f7:e0:66:71:ec:83:95:ca:aa:
5e:45:4c:61:74:77:9a:7a:11:d0:e8:74:eb:3b:69:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:13:68:3F:CE:22:28:AA:69:D7:A4:35:2A:7B:2D:97:6D:A7:C1
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0f:15:1a:20:1c:cc:1c:8b:e2:36:0d:36:3f:e0:12:e5:88:
89:11:ea:5d:9d:d5:64:ed:82:67:20:91:a1:0c:3c:79:b4:8e:
6e:c6:a1:f5:4b:95:22:a2:bc:30:71:1f:a7:d7:8a:74:98:a7:
1d:fc:33:af:74:08:33:2a:9c:f3:8c:83:b2:f0:23:2e:1f:fc:
d5:aa:ef:70:e1:59:7c:de:58:fe:ad:84:17:91:74:2f:42:37:
57:83:8f:46:cf:9e:25:79:38:2a:ce:72:e5:3d:fa:d2:b1:ab:
ae:24:73:bf:ef:16:aa:3b:5b:0f:6a:88:3b:86:d6:f6:f9:78:
7f:a5:a1:5c:0b:cb:54:a1:24:e6:83:b8:34:83:1d:7a:84:33:
54:7e:34:19:7f:c8:d2:e7:90:f8:96:f0:91:a6:82:f1:e5:a5:
ea:04:88:46:43:ac:e1:81:e7:30:69:bf:68:5d:80:19:71:04:
7f:23:14:7c:3f:52:a0:8f:9e:94:e2:cf:cd:c7:ef:17:f4:3d:
2b:6a:ac:27:a9:50:7a:6e:58:d2:71:75:f8:a3:4b:0a:c8:74:
da:66:38:96:53:72:0a:fe:45:bb:91:dc:3c:46:cb:89:54:8d:
3a:0a:45:78:40:11:50:11:df:cd:a7:fa:9e:e4:3f:10:94:69:
5a:e4:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:46 2026 by rpki-client