Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier: kEFbwkEgNkSCXyjPUvOzrJpGARZtQ0MafXuPN8OiKwE=
Subject key identifier: CE:F2:1C:46:53:32:19:2E:14:FD:8D:19:B9:4A:12:22:F7:8E:B1:7C
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 019D382DFB46A2D399FEF8513448CFA4572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number: 1697
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: CprHXAsrH8JdmMZSQZXivSSe6E4.roa (hash: FeFr2Lyz21YuPKbhFzqjbNPKoCmaSebQnIlOtdAGIx4=)
2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: ZKBA78gbct+8Z3SOxlUHVcalrAiMaS6T3I5K62s8Ncc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fb:46:a2:d3:99:fe:f8:51:34:48:cf:a4:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=cef21c465332192e14fd8d19b94a1222f78eb17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:47:6e:00:bf:75:85:19:06:74:1a:d5:12:
5a:7b:8e:c8:2f:2b:c4:0f:65:80:e3:0e:aa:62:a1:
c0:59:eb:a6:ef:2b:6f:38:9a:b2:7c:9d:12:61:3f:
64:2f:d0:9f:c6:96:aa:0b:9f:28:3e:b8:fd:8d:99:
0f:3d:77:d5:ad:30:1d:09:de:3a:b9:b2:b6:d3:a0:
d3:67:c5:7e:6e:73:f6:b6:89:f0:77:27:b4:6b:34:
99:c9:0f:9e:6e:d8:0e:e2:5a:ae:de:2e:25:be:ef:
a2:eb:65:38:f8:06:0a:b7:cc:8b:85:e9:a8:19:88:
f0:fc:26:1d:dd:d8:3f:9e:78:8d:e8:24:64:98:eb:
1d:ec:95:eb:e7:72:29:f6:9c:42:0d:3c:c7:c5:c2:
3e:e3:f5:23:aa:a6:46:3f:ac:56:8c:06:58:6b:52:
0a:75:76:8f:dc:6f:d2:0b:0b:1a:80:16:a3:cf:c4:
64:19:34:cb:30:d4:a5:31:f5:51:92:bf:23:9e:5a:
be:8e:73:b3:7a:ca:d4:f6:ad:de:6f:1b:f4:02:cc:
56:b5:8b:63:17:79:64:0a:5b:f2:88:8b:73:6e:f2:
5b:2a:87:78:93:60:68:72:4b:8f:60:f2:6e:0b:73:
54:23:a9:b5:68:91:d0:31:40:70:2d:a0:aa:86:49:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F2:1C:46:53:32:19:2E:14:FD:8D:19:B9:4A:12:22:F7:8E:B1:7C
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ae:e7:bd:e6:3b:de:88:45:d4:6a:02:2d:2a:c7:39:97:9a:
61:03:c5:b3:6a:37:d9:38:13:1d:2d:99:8a:3f:0a:7f:63:29:
3e:81:42:21:49:d7:58:7f:57:11:29:bd:22:c5:d8:b0:bc:23:
b6:25:bb:97:fc:76:51:cd:d6:ed:94:77:f1:f4:1c:40:eb:14:
55:f0:a8:97:0e:c8:2a:5a:be:f5:72:07:ca:cd:1f:41:e2:cb:
4b:65:28:5e:02:bd:74:42:f4:f4:fd:5d:2d:b8:8a:e2:b0:1c:
9e:5c:75:1f:78:e2:e5:af:ca:6e:ec:7f:f9:0c:59:83:7e:16:
ba:28:60:b7:90:5a:af:bf:b2:67:58:2a:64:97:59:93:b1:12:
ab:9f:37:ca:ee:79:22:91:67:7e:8d:9a:c7:30:22:2e:fb:36:
ba:95:16:9a:a0:cd:3e:df:27:43:33:a2:d8:86:30:03:b5:1b:
13:71:c7:7b:06:9e:ec:1b:dc:0d:87:9a:12:92:22:21:d9:2a:
48:96:c5:67:1c:91:bf:10:14:12:71:79:e1:ba:c9:d9:b4:af:
14:3b:78:25:a3:ad:0b:db:1f:d7:e7:65:f6:58:b6:1d:48:31:
a2:f7:71:26:1c:20:8e:1f:b2:48:10:30:6d:b6:06:69:c1:94:
f5:1b:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:10 2026 by rpki-client