Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: XjEAW7W61IeDaEm+YwcyNibdkaYoEEX1N+4WutkecdI=
Subject key identifier: 3D:62:4D:DF:B0:B1:B5:F8:47:BF:05:FB:4A:52:7D:58:1F:ED:5B:94
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 019D37891DE25182A82C3C9F060B05D1A0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: /xwTjhRtD4v7XsA6zE8CkZBAE5lsprHrVyonT+PH7ew=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:e2:51:82:a8:2c:3c:9f:06:0b:05:d1:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=3d624ddfb0b1b5f847bf05fb4a527d581fed5b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:6e:2e:b2:2d:be:32:87:e7:5c:2b:84:1f:
fe:a8:9f:9a:dc:30:81:cd:6b:e7:5d:4b:45:06:aa:
05:f3:75:7d:90:6c:2d:81:00:1a:28:f8:78:b5:ef:
a9:67:ab:ea:ce:9f:ce:9f:92:0e:cf:e1:69:43:f8:
10:a0:ba:5a:77:83:69:74:cb:ee:f9:a7:42:3a:25:
41:da:50:fd:d9:74:d4:83:08:de:69:a1:7a:d3:85:
74:86:58:22:4b:4b:a0:6e:12:91:88:46:71:9a:30:
1d:20:b0:f8:42:c3:ba:41:7b:3f:ff:ea:64:55:fb:
71:12:7c:96:98:56:dd:64:74:7b:2f:bf:fd:2b:a2:
2c:fa:23:ea:c0:c6:1d:f3:c3:c4:d2:8a:86:d9:26:
0e:04:be:49:c4:d4:9b:96:c9:cf:b2:3c:c6:93:31:
b6:22:02:67:b3:e9:48:7a:9e:be:d6:a5:c5:e2:30:
22:4b:3c:c4:f4:bb:f0:18:93:1b:c8:d0:77:af:46:
2f:3e:b7:de:a3:fd:65:1c:08:ec:fb:b7:ef:da:87:
b5:87:46:fc:2c:fc:f6:5f:58:ed:3d:88:08:85:2f:
85:20:73:b8:71:56:bb:04:23:fe:78:65:d9:8c:58:
2c:98:57:82:d5:e3:10:01:d5:0e:d7:df:3c:70:d7:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:62:4D:DF:B0:B1:B5:F8:47:BF:05:FB:4A:52:7D:58:1F:ED:5B:94
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:9c:9e:0f:4d:8e:1e:dd:47:57:52:93:0f:92:80:ed:49:
0a:b8:a5:67:09:0b:fb:f0:57:c0:3b:00:4c:39:b7:78:ab:0e:
ad:1a:fb:77:a1:15:14:f7:a7:11:19:0a:f6:7d:d8:b8:90:3c:
2c:56:39:97:1d:1c:ac:5c:f4:b1:06:c0:a3:1a:8e:84:60:69:
27:20:69:ed:d6:7b:a4:df:88:1d:84:c9:e4:09:cb:4d:82:18:
f8:10:6f:d2:90:4b:e7:9c:2a:fb:63:04:26:76:27:39:81:88:
77:4c:0f:9a:21:96:4e:a4:3a:40:f1:36:28:93:be:0d:14:3f:
95:f0:0c:39:79:6e:d4:88:b8:51:09:81:90:a9:be:83:2a:93:
2e:bd:0e:2f:2f:f3:39:fc:d6:a9:5f:48:32:c8:54:66:94:08:
ce:26:59:be:53:91:d0:b4:27:bb:18:28:05:9c:89:e8:dc:35:
d8:34:4f:0f:76:d5:6c:f9:3c:52:2e:69:9e:47:40:37:ff:51:
43:bb:4d:4f:8f:ee:97:a3:a1:0d:4e:5f:a0:a2:64:e9:fc:b1:
87:12:ef:6f:8d:97:ff:14:45:ec:ed:1b:d1:25:bb:ce:e5:1a:
e6:7e:ac:54:da:c2:1e:61:39:d8:46:14:69:40:67:44:46:1d:
6d:2b:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client