Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: LnVQMN4ns3XN+Tu1WcAaDFJOjcxPdPabv0+Phi6dIyg=
Subject key identifier: FA:AD:A3:72:41:63:96:A9:B2:11:E7:04:9C:B5:B3:4D:B9:46:41:22
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019CE7EDD7FCC9B1BEEB4272309EC3D0771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 11CC
Signing time: Fri 13 Mar 2026 16:00:49 +0000
Manifest this update: Fri 13 Mar 2026 16:00:49 +0000
Manifest next update: Sat 14 Mar 2026 16:00:49 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 7skg1ex6mSqoNoYHDrtPAP61c6gxt4wN4+EcL4DNFYA=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:d7:fc:c9:b1:be:eb:42:72:30:9e:c3:d0:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Mar 13 16:00:49 2026 GMT
Not After : Mar 14 16:00:49 2026 GMT
Subject: CN=faada372416396a9b211e7049cb5b34db9464122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:3c:f4:12:32:5c:a9:59:28:32:90:00:48:
cc:c0:92:c4:4a:7f:63:cc:93:79:5f:6a:49:5d:6d:
0b:72:dc:a4:89:4f:d5:da:c0:6a:d6:58:97:d3:cd:
cf:7c:4b:45:ac:c2:5b:6c:98:25:40:06:88:fd:15:
38:51:97:1c:10:4d:22:c9:84:09:5a:1d:f6:87:6c:
62:be:ec:9e:ac:ae:0e:3f:ac:f4:d5:83:aa:f8:52:
43:8b:dc:66:72:89:f3:ff:a7:72:52:80:6d:cd:45:
4a:fc:59:fb:1f:e4:72:cc:1f:b3:6b:7c:d0:f4:b7:
30:9e:54:c6:98:ab:9c:84:c6:88:02:f2:7c:e9:52:
98:e9:3e:b8:6e:60:04:6e:be:8c:3b:45:9b:ec:8f:
1e:7f:98:82:4b:79:80:77:28:bc:15:60:0b:86:3f:
ef:08:07:eb:7a:05:6f:2f:04:bd:6e:70:2a:00:b3:
4f:60:80:ba:b7:18:28:bd:67:97:7d:1d:5a:4a:50:
0c:da:83:8d:98:76:f2:3a:95:11:f0:73:9b:2b:10:
f0:83:bd:4a:cc:b1:5d:09:44:1f:14:15:7d:54:88:
f1:c9:b3:f0:6f:4b:07:b5:71:91:50:81:6f:c1:04:
bb:e4:57:aa:de:2b:8c:67:29:e1:55:80:55:88:42:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:A3:72:41:63:96:A9:B2:11:E7:04:9C:B5:B3:4D:B9:46:41:22
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:a0:92:1a:79:8a:e1:f9:66:4a:34:22:cf:f0:1f:93:c7:
8e:e9:c3:fa:de:f5:67:71:cc:4a:d2:52:5e:a2:20:0c:0c:52:
80:2d:0c:24:c6:05:25:44:2d:16:2c:d5:c1:ef:ff:a1:11:92:
fa:a5:5d:1c:49:0d:06:26:1b:34:4f:ab:14:fb:0f:4c:0d:97:
03:29:d1:b7:f9:28:e3:85:8f:f6:18:98:ce:0b:7b:8f:e7:42:
97:fa:af:8a:3a:d1:44:e7:d4:33:cd:07:ef:80:f5:03:9d:6e:
28:6c:0a:2f:3a:b4:c1:bb:19:60:ea:d3:f3:db:6b:9e:de:94:
e7:a0:f4:fc:9c:39:c0:2a:03:ce:e6:bc:f2:08:54:a5:30:9d:
26:2f:62:55:9b:df:30:2b:1b:20:3d:98:6f:2d:fb:4a:ab:27:
a5:7f:27:2f:56:35:0b:68:8f:4a:71:35:d3:75:6d:fc:ec:f8:
af:5c:a9:fc:96:e8:31:77:7e:3b:56:0b:85:61:64:9a:74:ac:
a2:57:d7:7a:6b:c5:ca:06:c1:1e:fb:fa:dd:83:cc:ff:69:dc:
b5:e8:ae:e0:3e:1d:84:55:23:80:46:98:0a:3b:39:82:6b:f6:
a8:4e:23:d9:a4:14:77:78:de:15:88:a8:3f:69:dc:3a:c9:27:
6c:2a:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:50:08 2026 by rpki-client