
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: OXl8SwBeSj34B2yCDGGdAgnoT4qO6ct9QCt6hw6sLzs=
Subject key identifier: 4F:E1:04:6A:42:63:D3:C6:45:EB:18:8B:90:19:E9:08:52:2A:48:73
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 019D3A1C36EA8160F0E6092B06908ACC62EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 05EF
Signing time: Sun 29 Mar 2026 15:00:20 +0000
Manifest this update: Sun 29 Mar 2026 15:00:20 +0000
Manifest next update: Mon 30 Mar 2026 15:00:20 +0000
Files and hashes: 1: QogyvWPisdntpmICPJEytHpddn0.roa (hash: HNTYMpcwAwpgRtJkBvumc5GBtbLf8MOK6w7oCd2sY4A=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: OfLiqbkR/+nC3DnJBlDWQ8HweTpQ2C9muOeqm2WLVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:36:ea:81:60:f0:e6:09:2b:06:90:8a:cc:62:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Mar 29 15:00:20 2026 GMT
Not After : Mar 30 15:00:20 2026 GMT
Subject: CN=4fe1046a4263d3c645eb188b9019e908522a4873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:0c:0e:1d:f4:31:98:8a:93:05:77:7a:9f:
5d:16:2a:0b:b3:45:ab:ee:5a:ba:c1:04:77:38:2a:
ad:3b:f7:1e:79:e5:d7:d9:27:67:a2:2a:03:05:e3:
95:fd:d6:1e:38:aa:f3:17:f6:d1:f1:3e:39:c4:2d:
f2:7d:9b:50:e7:14:2e:c3:3c:b2:5b:2f:6f:98:a0:
88:a9:2f:9d:39:43:06:a4:b6:e8:87:fe:cc:b8:a2:
31:b4:31:05:2d:f4:86:22:41:50:4c:c8:c2:a4:72:
d2:69:c3:aa:f3:57:02:77:58:51:17:b8:6b:da:14:
22:40:13:27:ca:29:07:1b:88:2b:64:08:8c:ea:95:
4f:64:46:e8:02:1b:c7:e0:3b:1e:ac:99:9c:ef:f2:
62:70:3f:33:70:28:a5:50:50:11:cd:18:33:c3:2c:
b0:ac:f6:19:dc:20:12:86:c8:5a:e4:68:e6:bf:63:
e3:ad:05:28:18:a1:08:82:f9:99:e7:75:b3:15:29:
c5:a2:7e:46:a6:f6:05:2f:1a:8e:57:20:98:40:83:
e4:06:86:29:0f:e0:6d:fd:6e:00:51:de:d4:d4:c9:
2d:be:29:ba:2f:0a:56:43:6c:a9:98:5f:65:0f:c3:
bd:03:25:99:93:69:40:e0:76:5c:43:5e:5c:2d:ea:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:04:6A:42:63:D3:C6:45:EB:18:8B:90:19:E9:08:52:2A:48:73
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:d3:8e:e3:ef:36:6d:98:2e:67:13:08:fb:ff:6f:96:8d:
b2:e8:3d:04:71:12:16:43:ab:6b:fb:a2:63:d5:a6:ab:a6:79:
36:c0:fb:a0:67:da:2d:a1:f0:5c:02:1e:bd:30:36:19:98:92:
b0:5a:af:dd:1e:62:35:61:d3:6a:54:3d:53:b5:38:6c:7d:bf:
f7:66:76:31:75:9a:31:60:e7:64:33:38:a6:e4:b2:54:01:e2:
e1:19:19:fa:bc:15:04:54:e8:2d:94:4c:66:fb:5d:b6:a1:e2:
58:32:bd:b2:a4:bc:fc:2b:fb:31:7b:51:97:86:60:ce:9b:2f:
5e:13:81:b1:e1:b0:40:be:54:24:2c:7f:a4:88:73:e8:72:ed:
7e:38:5a:b9:13:1d:05:30:9d:d3:87:4c:9f:99:fd:e5:4d:f9:
cd:58:ce:dc:36:53:80:c2:5a:b6:20:ae:b1:ed:72:5e:84:a0:
c9:1f:de:15:24:c1:dc:e0:1e:e1:90:bb:66:59:65:57:06:14:
74:11:1d:41:f1:69:15:31:f2:93:7a:6d:b0:3e:62:64:1f:42:
bc:c3:68:36:bc:85:a2:03:4b:b3:bc:84:9d:db:d7:ee:db:ec:
b5:b9:09:0b:e4:82:19:f1:da:bb:97:48:80:d9:8f:c9:4b:14:
ca:e1:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:41 2026 by rpki-client