Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: dAeUr2/a4HrPuhz3+OpxWGb8Guh9lrLTupzjJfoOqAA=
Subject key identifier: 25:4A:0A:85:61:2E:5F:C9:FB:1A:6D:09:19:58:3C:4C:55:80:F0:D9
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019D38D3CD4E96DFF2884147D6D27C74C00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: vpYfWMfJpHQjY/EddSdbtmaN3X3sI8QvxoEV8Dm/oBc=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:4e:96:df:f2:88:41:47:d6:d2:7c:74:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=254a0a85612e5fc9fb1a6d0919583c4c5580f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:3b:d1:ee:a2:16:a1:43:9d:f7:1a:aa:f6:
1f:fe:76:98:1d:c5:3b:10:bb:47:3f:29:ad:ec:28:
c0:c3:3b:0a:95:4b:1d:59:f9:9b:e1:ea:ce:ef:79:
de:f5:af:28:d9:ab:9a:84:14:81:53:0b:f2:13:0f:
ba:ea:68:46:bd:88:1f:4e:84:68:cd:fc:ad:9a:1a:
c0:31:77:bb:f5:de:91:9d:bf:a4:13:93:ff:4e:2c:
a7:00:06:87:f2:68:0f:79:68:8b:63:20:05:37:e2:
cf:e7:bc:6a:f2:68:21:6c:53:21:bd:b3:8f:eb:52:
90:a3:44:17:89:4d:8e:a0:b3:a2:b1:d3:89:89:d7:
91:39:b2:2a:af:dc:7d:0f:eb:47:57:6f:6e:84:14:
cd:c1:1e:62:9e:54:74:75:de:b0:51:ce:d3:a7:93:
85:84:0b:f1:60:45:34:76:de:bd:05:88:11:85:c8:
6f:d0:a3:22:91:fd:8f:52:aa:fb:0d:ee:fe:6e:ce:
f0:1b:8b:84:98:31:4b:9d:1c:c6:de:4d:61:e9:fb:
6a:37:c6:a8:bb:9a:2d:68:eb:62:8b:c2:31:54:b0:
51:f6:89:f6:b1:c8:1b:f3:0c:df:81:ef:4d:2e:0e:
78:fb:c5:22:c0:6b:e9:07:5b:d7:3a:c4:67:39:8c:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4A:0A:85:61:2E:5F:C9:FB:1A:6D:09:19:58:3C:4C:55:80:F0:D9
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:ee:ca:17:6b:31:6c:73:ae:94:3e:3f:a7:6f:de:b3:84:
1a:4a:5a:93:4a:71:94:cf:4f:d8:c6:d8:e0:8b:3f:48:35:db:
a7:1b:4b:22:91:38:a5:3f:48:c4:0a:45:7e:e0:af:0e:fb:ab:
77:c5:0d:cf:4f:1c:01:fe:a2:6d:aa:af:f5:4c:47:ef:3b:d6:
78:a1:7a:7a:2c:f1:a2:0d:34:b5:cd:25:5d:96:51:ac:2f:62:
18:78:3a:f2:fb:39:f9:cc:e0:8e:06:45:d9:11:d7:15:45:d6:
46:48:dc:17:19:96:78:8f:4a:2d:06:6d:bb:77:e4:5f:da:9a:
28:ec:e3:77:1c:c9:ed:4b:a9:39:d2:b4:9c:22:02:eb:41:3d:
e0:19:0c:61:ba:5b:b3:b5:07:cb:33:0e:6f:25:59:70:78:e5:
f8:a0:b7:50:0f:22:e2:84:f1:e5:99:2e:c3:aa:fc:a1:de:9e:
8f:2e:8d:a5:6d:f1:4b:c1:8c:9e:c7:14:ae:0f:53:db:e9:79:
fd:37:f9:58:32:8c:77:d4:45:9e:5f:c4:89:30:73:e2:41:a1:
80:a3:61:f2:52:8c:2a:4c:fd:f8:c7:b0:9a:b9:c1:c4:b1:6f:
b1:71:ab:e8:77:53:b7:f2:1b:97:d2:c6:f1:fb:4e:65:ad:23:
33:6a:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:09 2026 by rpki-client