Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: ndMBmGAfyjBIQPd/K+eA+UWVH/wWCWVGwtGPgGyZHYY=
Subject key identifier: DF:AC:72:5D:58:AB:1D:BB:32:11:7E:D2:59:37:82:A9:83:08:66:F3
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 019D394122821E1F18521CB6ED0F8BFA90CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: 02FD
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: TaoqRVy7G_jEt0HESH3wN5n6mvI.roa (hash: R8307lrtH91HT+4pfCapN7jLYcBGbwE8JwAjSXA57TU=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: F0fOvhQFKyp6esKhUZ5g/9xidQs72Wkhyy/xl85FBNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:22:82:1e:1f:18:52:1c:b6:ed:0f:8b:fa:90:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=dfac725d58ab1dbb32117ed2593782a9830866f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:1f:db:a1:8e:03:26:08:01:14:33:ef:98:
1f:4d:ce:be:e6:6d:02:4b:b4:4d:dd:c8:dc:b9:91:
d5:e6:d2:7b:b4:aa:2b:89:18:0a:53:69:f2:d2:ce:
c5:31:7a:ad:68:7a:73:14:f9:64:9b:40:6e:44:ac:
2c:41:35:50:d2:1a:e4:42:c5:a6:d9:46:1f:26:06:
54:3d:86:f8:a9:ca:a9:2c:6e:ae:05:d7:b0:4b:5b:
87:0e:ec:d6:1a:06:38:e5:2c:a3:e8:96:14:b4:68:
07:23:29:78:34:76:28:d5:c6:39:70:e8:c8:d6:3b:
f3:b8:39:4e:49:92:a9:ec:c0:71:a9:b2:65:7f:7d:
9b:78:b9:c4:55:6c:d3:a2:d4:da:50:9f:b2:7c:7c:
11:e6:a3:f8:89:af:6a:ce:5d:bf:64:f1:f7:f8:38:
84:11:46:e3:8c:f2:0b:f9:9b:71:68:a2:f9:4d:17:
e7:55:3e:a0:ac:99:43:7a:fb:f8:0c:12:82:64:f6:
ab:1c:2a:a9:21:20:39:a9:45:04:0f:20:ad:5a:55:
b8:ff:59:76:b3:45:a6:98:15:06:f5:38:54:7c:5a:
43:ee:d9:ea:0c:82:a0:5e:69:d8:f7:52:a9:58:94:
05:4e:c3:1e:b1:56:5a:54:31:10:24:13:47:4c:24:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:72:5D:58:AB:1D:BB:32:11:7E:D2:59:37:82:A9:83:08:66:F3
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:81:81:32:38:4e:91:c7:cf:fd:96:dc:66:61:6b:e3:7c:
d9:8a:2c:2c:7e:92:79:04:3a:2f:8e:72:11:0a:be:81:b8:80:
c8:8a:44:47:19:0c:0f:d4:33:b7:1b:35:d2:8d:86:bf:5a:1a:
5f:dc:de:eb:09:36:ca:9b:f1:ca:1b:99:62:9d:85:4e:f9:10:
7e:d5:4c:06:71:14:4e:6b:07:dd:f7:3a:2a:99:be:65:23:9c:
b0:33:ac:72:fc:02:63:03:62:98:6e:ce:94:3f:45:b7:96:c8:
d6:83:63:eb:61:da:ac:3a:08:4b:79:e2:7e:a2:c6:99:7a:99:
38:c7:ad:e3:f9:b3:18:69:c0:87:29:53:25:64:b1:87:96:a5:
ef:d4:15:fb:54:de:f3:e8:90:f4:74:a8:82:01:eb:bd:bc:5f:
fa:b6:0c:2a:2d:22:fc:9f:aa:71:c0:7a:e6:31:eb:25:e7:27:
de:91:13:e7:68:34:2e:c6:6b:a8:f8:84:c1:a4:f3:6c:e3:c3:
25:3e:d8:32:0c:dc:6f:6b:37:c5:0b:d7:54:b6:e6:4f:7a:a4:
97:6c:b0:1a:aa:72:d6:a5:20:41:14:1a:ed:66:71:b6:1f:b6:
de:95:cc:6a:e3:d9:b6:9d:16:03:19:d4:9b:75:c9:22:d8:6f:
af:b1:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:33 2026 by rpki-client