Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: xAu6UP8gJciqOUFYrshmX0GO4AeYF1XFPaODbSSSuOU=
Subject key identifier: 5E:B5:B8:A8:05:04:46:E8:07:A7:72:77:DF:67:64:DD:13:AC:C7:CA
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019D371BAE2F9651A51A35E33F085A4591F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1595
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: J35ZEEwXVwwyGOQW/sy/OfrFL/i+lccZrAOjS1UJTvg=)
6: dop4_-0zlvctrufVT5v0wxv-AEk.roa (hash: dtFhCs02IJalxP2PiP4DNh5wKXd+5+aq9kRU5RiYqkg=)
7: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
8: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
9: x4wXEKXMOxtK_lFwko7eiWoBBHU.roa (hash: aj4RuLLfbpjb0EvT7ddowihSUQXljP0or+HYSFta5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ae:2f:96:51:a5:1a:35:e3:3f:08:5a:45:91:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=5eb5b8a8050446e807a77277df6764dd13acc7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:b6:4c:ce:1f:43:97:94:6f:50:56:7a:84:
c1:ad:7d:1a:9b:0a:1d:9f:28:25:2d:b3:a8:db:16:
7e:7e:fa:e1:10:dd:be:3b:8b:ee:76:36:30:ea:a9:
bb:6d:73:f4:91:87:20:70:46:c9:e2:54:5f:cc:ae:
90:d1:da:05:01:5c:2d:a9:c2:22:45:51:95:1b:64:
e3:20:da:d8:1f:10:a0:1f:e1:e5:db:38:32:98:37:
0a:82:f2:37:f4:41:62:e9:59:08:4b:b5:96:5e:4d:
6e:d0:9f:6f:6d:c7:c1:37:bb:e9:71:62:fe:61:f9:
a0:4a:7a:b4:c0:8c:e0:fd:a5:23:1a:f8:5f:a1:b6:
37:f8:b5:a0:e4:35:bf:05:13:0c:c4:f9:3d:6b:72:
dd:b1:69:f4:02:f2:06:df:ea:da:00:4f:bc:4a:3b:
5e:17:50:8c:46:f0:2a:a9:a2:92:a2:77:17:2b:5d:
99:85:63:1f:44:0e:ad:9c:05:40:c5:db:50:55:3e:
31:7c:3b:de:83:1a:3f:53:2c:3a:c1:88:eb:8f:be:
22:6a:28:6f:21:90:4d:56:a4:ed:ec:72:0d:37:39:
31:23:cb:83:ab:8b:b0:dd:37:8e:64:e7:31:fc:27:
b1:e2:78:03:1a:53:ff:f5:80:60:fa:c5:26:08:6c:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:B8:A8:05:04:46:E8:07:A7:72:77:DF:67:64:DD:13:AC:C7:CA
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:91:51:78:01:9c:13:30:64:a3:3b:cc:6c:37:55:a5:d8:1e:
a7:74:4f:5a:49:d6:07:4a:36:93:07:36:90:27:9e:75:00:8c:
4e:1e:fd:c4:8f:0f:2b:28:da:09:59:43:4d:6a:11:77:5d:91:
3c:77:36:b6:b8:b3:62:5c:7b:50:30:9f:4d:ca:35:7f:c7:08:
27:7f:8f:84:51:07:ff:c8:00:c6:a7:4d:14:06:4a:c3:0d:42:
8f:78:ed:df:5f:4a:dc:37:39:ad:5b:6c:a7:a3:aa:e1:91:8f:
d7:99:ab:44:41:a6:9a:5a:3c:46:0a:e1:6d:17:3e:c6:f8:6f:
b7:1a:a0:07:4b:03:a7:93:6d:81:64:b0:de:31:b2:61:50:57:
f9:1b:af:ce:cf:90:f3:8f:09:00:9a:b2:a3:e9:1b:a7:c6:a8:
61:71:0a:a4:b9:02:75:b7:a6:f1:f0:eb:70:6b:6d:aa:84:85:
32:b1:53:94:8d:1f:33:51:aa:95:2e:38:58:36:7c:8f:54:c9:
ad:59:cd:36:17:f6:35:5d:74:ce:be:2c:fd:e5:01:ea:e0:3c:
ae:ee:88:ad:22:eb:f6:e1:16:05:53:f7:3b:ac:59:1b:92:61:
22:dc:68:b6:95:4e:c9:fe:8b:6c:28:92:7e:e4:c8:42:f5:4a:
66:43:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client