Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: i91wNAmOCPaLY6pFMzGocCk4ofN0VzI/SWiA9vjfI+I=
Subject key identifier: B1:37:4E:20:5A:09:EB:77:93:B1:6E:1E:2B:A8:2E:59:C3:EC:81:27
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019CE55A85A64E25C588ED04C595E7FA126A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0688
Signing time: Fri 13 Mar 2026 04:00:40 +0000
Manifest this update: Fri 13 Mar 2026 04:00:40 +0000
Manifest next update: Sat 14 Mar 2026 04:00:40 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: ZtHLrfKXYgzJ6LcxcxIxdBBbL/GFpYbJnl6iGabbK+c=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:85:a6:4e:25:c5:88:ed:04:c5:95:e7:fa:12:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Mar 13 04:00:40 2026 GMT
Not After : Mar 14 04:00:40 2026 GMT
Subject: CN=b1374e205a09eb7793b16e1e2ba82e59c3ec8127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:23:22:ee:8a:15:a4:0a:3d:73:36:5c:d2:
a1:d7:e2:fe:8c:19:85:f3:05:ef:72:ae:e6:35:6a:
f4:2f:32:72:32:8b:24:3c:e1:4d:4f:bc:45:9b:66:
0c:70:57:1b:45:26:04:79:a1:50:76:05:f8:c2:72:
43:fc:d6:05:63:41:41:c5:d1:52:9c:52:d0:b2:71:
36:7e:a1:52:29:91:cc:11:3e:f1:c6:75:fe:56:b5:
6c:8d:df:6b:84:19:61:e5:58:bf:61:57:8d:13:ce:
47:a8:3c:54:1b:8d:04:10:b8:b4:2f:2b:1e:a2:bb:
85:6f:16:0f:69:a5:c3:f1:1f:b1:83:a8:8a:e7:e0:
9e:d7:86:82:e7:81:b0:94:25:78:e4:26:f2:16:74:
17:0f:87:32:4a:b2:66:ce:8b:56:3e:72:d9:d9:58:
06:aa:a8:b1:cc:4c:f5:ea:47:cd:3b:87:fc:96:74:
c1:95:ce:5c:28:59:6d:bc:e6:27:de:68:70:0a:0c:
46:ec:f0:90:da:34:f3:5c:01:3b:55:91:7c:5e:e1:
e0:ac:9f:76:af:22:4d:e0:02:95:f2:1c:ca:6a:04:
e1:65:90:28:b2:3a:44:cc:bd:7b:6e:18:04:3c:1e:
6d:f5:8a:41:db:f4:2a:bd:7d:9c:63:a9:7c:5b:bc:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:4E:20:5A:09:EB:77:93:B1:6E:1E:2B:A8:2E:59:C3:EC:81:27
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c6:6f:17:64:ad:74:1c:a0:c6:28:fa:6d:52:85:a9:b8:43:
c8:02:c4:44:33:61:2e:2d:1c:06:75:83:8a:ad:b2:51:9b:75:
00:4c:9e:08:cc:ef:b2:50:16:30:99:de:5b:e9:d0:8c:a1:0a:
5e:74:41:9b:bf:69:fe:65:c7:a3:6f:f4:ea:31:42:38:aa:4e:
e2:f8:20:eb:a8:94:eb:1e:34:ca:c6:83:49:28:f8:25:55:2b:
48:28:cf:2c:13:75:9f:c0:98:8c:03:f0:0d:e7:6b:a3:b6:98:
7a:58:98:07:eb:f9:38:b1:a2:2d:00:78:0d:e6:68:5b:5c:fa:
65:0a:69:14:c9:a8:33:cf:91:9c:9c:e7:a7:df:c9:b0:49:cf:
23:ba:a7:45:39:78:a6:45:e5:3f:90:4c:62:80:33:fe:65:f5:
78:1f:45:73:e2:d3:50:80:0c:1f:1a:da:7d:70:30:09:b7:a2:
f2:9d:8f:f7:48:cd:70:ed:4d:2c:5d:01:9c:04:ed:de:1c:fa:
74:e9:93:b2:f8:6e:2f:5b:13:39:af:80:54:e6:fe:d3:1e:be:
44:44:5d:64:b2:9e:44:79:74:96:fe:42:0f:ac:76:e3:4e:3b:
5b:a9:7c:b6:ae:64:bc:b5:ef:0b:51:42:de:09:3e:4d:33:4a:
97:12:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:44 2026 by rpki-client