Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: efSwpFJJeGzdYOu6rh0hN58ZiTdHPNlfIMFu6rmR2Uc=
Subject key identifier: AD:9A:AD:3C:EE:60:5B:6A:9E:B0:1A:96:34:EE:DE:1A:9E:F5:1A:5E
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019D3909B73894785580FF1DE383896A81C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: bmg0MW08TpNKLPKincXk7h9BB9dYiUNjn3WUakUjF5E=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b7:38:94:78:55:80:ff:1d:e3:83:89:6a:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=ad9aad3cee605b6a9eb01a9634eede1a9ef51a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:52:fd:4d:2a:50:83:ff:2f:7a:44:57:a1:
5d:07:9d:68:9f:58:b3:68:ed:1a:2f:82:0b:76:81:
ff:76:f0:42:2e:56:f7:19:1b:ac:94:7b:88:1a:ed:
76:81:26:5c:ca:20:52:e2:21:79:09:f2:fd:8d:f3:
3f:f9:1c:05:64:0f:69:d8:44:0b:da:c6:f7:9e:f3:
98:09:ad:b8:11:33:53:cd:0c:d9:bd:07:98:8e:a2:
3a:7d:a2:8f:92:e0:6a:09:e3:ed:20:65:b0:b9:f9:
59:1e:43:2c:ab:a5:cf:7d:ce:8b:d1:49:4e:a4:7d:
6e:74:08:43:ef:e9:11:eb:12:90:c4:ca:6c:46:e1:
be:fb:a8:0b:fb:cc:09:5d:83:8a:55:d2:69:4b:51:
e7:10:6e:bf:2d:e2:d3:1f:d5:3a:21:7e:ac:94:a1:
46:5f:0a:d5:ed:c1:2e:77:40:fe:d9:54:b0:03:24:
5f:73:76:70:a2:51:a2:53:37:4c:1c:70:30:c3:f1:
1f:9f:93:63:00:13:db:50:35:5f:b0:dc:7c:a4:11:
bc:be:86:af:00:ef:53:b8:1c:ad:a7:24:fd:78:c6:
3d:fc:96:ce:cf:e0:51:12:c7:be:53:19:cd:24:8b:
7b:65:39:41:cb:87:e0:90:65:17:a1:2d:43:02:31:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9A:AD:3C:EE:60:5B:6A:9E:B0:1A:96:34:EE:DE:1A:9E:F5:1A:5E
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:d4:b7:12:5a:37:1c:3b:30:9a:6d:4e:16:30:ef:aa:86:
e3:b7:75:45:43:17:95:9d:7b:05:18:23:2b:4e:01:0a:88:7e:
77:1f:b8:38:8a:58:3d:24:de:b5:3c:22:e9:e2:b3:cc:98:18:
c8:f4:25:a4:e3:32:75:6a:ca:a7:3e:9a:c0:11:32:09:1b:82:
13:f3:06:2c:73:8d:4c:9e:1c:18:35:57:0b:40:33:07:30:32:
f4:37:74:e9:3a:5f:2e:ad:65:02:40:04:78:98:23:12:c7:2c:
02:fc:ea:d9:5c:0f:1e:f2:7e:dd:c1:0b:83:a7:3c:c8:5f:8a:
c5:32:af:23:61:b2:c8:e3:2a:9a:4e:25:7c:fb:67:23:8e:e4:
06:0d:a1:d5:8e:7b:f3:2d:a5:e0:a9:9d:c4:ee:3b:9e:b2:12:
32:1e:ba:67:7f:42:cf:14:09:3e:b2:3c:76:84:36:85:a1:85:
cb:1b:7b:73:52:28:77:fa:e9:1e:e7:b7:cc:48:76:e5:d7:3b:
9f:dc:14:4a:13:ef:e3:8b:34:1e:f3:54:d9:d6:29:e3:77:ed:
18:e2:3e:20:b4:5b:f6:70:43:f9:c1:46:38:5b:dd:c0:44:27:
cc:a0:6a:e2:45:b6:0e:6f:e6:a1:77:15:24:3d:c0:60:f5:81:
29:2f:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:53 2026 by rpki-client