Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: C6pT1Eqd+fXLzQS23yeUqhHW+iJWFm/yqbkYk5fGPsU=
Subject key identifier: 22:0C:B8:61:85:9E:B6:45:D0:EB:44:E8:09:D1:44:FB:6A:5E:6E:42
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 019D37F71F5D2522E586633A0907DE31738F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 08BD
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: V2OXnV0ZeU6FH72vkngwJfeHU/JmMM9BPyH/ur3zoWc=)
2: iswbdq-9V8dK2lt-q7TWOV5NsnA.roa (hash: gjZR/5snwpqcxytGpgCEoK1OzMncCQSVwjv9VDuQVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1f:5d:25:22:e5:86:63:3a:09:07:de:31:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=220cb861859eb645d0eb44e809d144fb6a5e6e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:2e:75:2e:c5:30:42:3a:7b:56:07:b8:06:
9a:65:7b:28:38:a1:2c:da:19:d7:db:e5:c2:67:39:
24:9c:56:fc:07:db:68:80:c4:99:ff:bf:80:29:12:
63:b6:f8:d8:45:cd:89:80:af:38:1a:9e:4b:53:e0:
bc:a0:85:22:c7:68:ae:b1:da:e7:58:e5:e3:b9:a0:
a8:cc:64:3c:b7:05:5a:11:1a:6b:29:7b:20:21:5b:
69:45:29:d2:ef:b5:2f:21:70:a6:9b:bc:58:5b:09:
4c:45:24:7b:b5:e1:85:c1:26:f8:81:0f:9f:47:78:
39:ff:1b:6a:d5:ce:45:23:5c:e0:7d:88:52:36:ed:
2d:ff:fb:37:34:78:58:40:1d:bf:50:01:19:59:12:
dc:15:f4:1b:b3:2d:ec:29:c5:c6:27:e0:03:9e:cd:
d5:30:f9:65:92:ec:93:9b:29:6c:ed:b5:82:2d:a0:
07:56:70:b7:29:81:3a:ec:b0:4e:39:48:c0:61:b9:
19:23:c8:52:eb:cb:3e:f0:0d:47:73:78:63:8e:0f:
a8:86:41:44:6e:c8:c1:30:de:3d:ad:78:9f:12:28:
a1:e9:8d:28:0c:85:b2:32:03:4f:ed:93:82:99:03:
f8:6f:8a:b8:e9:23:c7:e7:dd:cd:cc:c7:1a:7a:1b:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:B8:61:85:9E:B6:45:D0:EB:44:E8:09:D1:44:FB:6A:5E:6E:42
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:ac:ea:ca:bb:32:2a:24:c6:b5:f0:0d:c6:9d:ba:ae:0a:
cd:9e:17:6e:b3:dd:28:14:e6:ee:a8:8f:1b:ed:9b:95:79:f1:
e8:3f:0a:6a:38:5c:77:4f:90:0f:0a:0e:1e:93:2d:5e:e8:21:
81:01:3a:78:32:fa:fb:e6:e2:66:e3:43:c7:47:87:16:80:74:
4f:b9:c1:ce:8b:f3:5f:05:16:84:03:08:e0:e2:75:a9:1a:b8:
98:3e:3b:d9:a0:29:a8:37:12:a1:41:fd:96:60:65:25:da:c0:
81:7a:51:66:df:9b:a8:6a:e0:0c:48:04:3d:a6:b6:90:f8:1a:
d0:a4:cc:bb:d6:2e:42:ab:39:5d:de:20:5f:7a:36:1d:98:1a:
2c:81:3d:47:72:dc:bf:f1:5f:a1:16:f3:7c:7b:c1:40:51:be:
02:f6:55:36:7d:d4:26:52:93:43:38:21:88:d1:3b:bc:dc:67:
c6:67:47:7a:4d:9d:84:d8:04:74:4e:67:1c:09:dd:5d:df:0e:
20:77:3d:87:b3:83:7c:b6:56:59:b3:99:1f:ba:a1:fd:63:e3:
8e:08:4e:cc:05:a1:67:9a:44:df:9b:71:95:bc:88:09:cc:2c:
bf:fe:76:b8:20:b1:2a:00:26:d0:4e:5b:67:14:46:f1:83:75:
d0:f5:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:29 2026 by rpki-client