Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: AMCXRxO/eIjZd/T4dITg/s2zlN42oYqB4v3dzMcEKwQ=
Subject key identifier: 8F:EE:4B:51:6A:9F:45:1A:55:E2:DD:B1:74:DB:5A:DE:AA:2D:CF:DB
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019D386556EE0B7C0CC744BFCEBC38F0183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0CAA
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: kC3ECIAQMfINLIuah7huV9sWZVjnYpFZ9lgDSHIqWZU=)
3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:56:ee:0b:7c:0c:c7:44:bf:ce:bc:38:f0:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=8fee4b516a9f451a55e2ddb174db5adeaa2dcfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:06:84:66:f0:8d:34:8d:7d:40:94:18:3b:
7c:5e:cc:25:40:81:ce:2b:1f:e1:57:69:af:4c:1f:
24:80:5a:e3:d9:6c:ac:43:88:de:13:d7:50:18:64:
ff:17:7c:80:f0:5c:d9:e8:b6:f4:80:13:97:38:38:
d5:47:db:d2:01:02:06:cf:a0:c3:9b:2f:ff:1e:96:
cf:d8:26:27:3e:52:37:85:5f:dd:7e:fe:f6:86:02:
b3:46:2d:bc:9b:d3:27:31:37:6d:66:c8:8d:cc:67:
9a:63:c4:bb:c6:30:c3:93:6f:d7:8b:56:ff:95:43:
9a:34:24:a3:ee:63:8a:57:87:75:9d:c9:49:57:b2:
8b:49:33:23:b4:96:51:bc:d0:a9:6e:1d:4b:36:1d:
42:12:6e:99:28:cd:47:6c:82:9e:10:36:67:82:cc:
1f:a2:75:e7:2b:ed:fb:11:68:eb:c3:d3:36:62:b4:
a0:ae:d4:07:3b:a9:1f:0d:00:62:8a:a9:2e:52:1b:
19:c9:35:d6:7a:ab:6d:b9:d5:b2:b6:b9:2c:d9:94:
92:17:35:4c:1e:fc:21:f1:3a:cd:c9:9b:6a:f0:02:
b8:d4:f5:33:27:76:60:be:22:5f:15:17:42:48:eb:
1e:bc:c8:a8:de:96:58:6b:84:ee:d1:44:d5:63:cf:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:4B:51:6A:9F:45:1A:55:E2:DD:B1:74:DB:5A:DE:AA:2D:CF:DB
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9e:2b:67:36:ea:eb:28:91:6a:5f:57:6c:d0:a9:4b:8b:20:
4c:16:d5:67:71:19:7a:fb:d2:8d:13:0b:d5:5a:0f:43:46:45:
12:39:8d:5e:c0:d5:dd:34:f7:b4:11:52:ef:bd:18:e6:5d:5c:
9c:52:77:39:35:9e:3a:29:57:35:29:9e:70:26:af:22:c4:9a:
27:59:d2:0e:9d:e0:80:f1:d7:0b:ab:38:72:c6:a9:16:7e:63:
51:ae:73:cd:27:45:a0:1e:58:d8:40:96:8a:f5:f6:68:13:b5:
26:54:c9:c6:ec:a9:e7:73:61:d0:c4:5a:79:a0:af:dd:13:c0:
aa:e7:42:25:be:1f:73:42:3e:84:8e:5e:df:1a:d6:cb:71:7f:
4d:f6:8b:78:1c:17:25:0c:a1:6b:60:0a:5b:85:82:47:d6:e0:
f3:06:6f:bc:cb:89:aa:bd:01:5f:12:4a:46:5b:59:a1:90:f3:
b0:4c:1e:ce:e1:d7:84:9f:8c:f4:9b:d6:6a:47:bd:0c:7f:90:
5e:fe:22:48:53:a8:67:04:a7:bc:6d:99:c5:72:5b:2e:05:81:
bd:b3:88:de:00:5f:68:e7:ab:d1:bb:0f:84:fa:63:5e:fc:66:
78:be:78:27:9e:18:be:44:3f:3c:86:c7:57:fa:33:c3:a4:0a:
41:bf:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:53 2026 by rpki-client