Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: xbL5OHlo6MtslNnlHNaH91u9pyPXcNQKcl6o2SRWpQk=
Subject key identifier: EE:8A:42:AD:E4:FF:77:D3:AD:38:D8:9B:88:1B:A7:26:BB:CF:10:D0
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019D39407ACD4B4F016CE757785709E56F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: 58q7hriA3nMJpTxtNNe6xKOy5adaemLwVPuOLQEcgIU=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7a:cd:4b:4f:01:6c:e7:57:78:57:09:e5:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=ee8a42ade4ff77d3ad38d89b881ba726bbcf10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:81:97:45:98:9e:8f:20:f2:c5:5e:cd:f5:
aa:f5:bb:7b:22:5f:53:ae:50:c6:bc:28:ac:4b:00:
b8:a6:04:e3:86:b9:f3:99:4b:48:f1:a9:7b:1e:4d:
41:5f:b0:db:38:c8:8b:a4:ee:a3:c7:9e:95:c5:7e:
c2:00:42:5f:f8:43:37:24:ba:2a:ed:b3:c1:e4:2a:
52:80:cb:78:7c:93:9e:59:3d:02:57:00:df:ba:9e:
a9:e9:3f:29:9a:cd:d5:51:57:d8:32:86:b0:8f:4f:
7d:62:30:69:4d:f2:57:11:9d:cc:07:d5:fd:ce:1e:
41:c9:b7:05:ba:56:52:6d:b8:5a:5f:21:a2:02:64:
ac:f3:a6:02:73:61:03:1e:d7:47:76:14:4f:3b:1b:
43:c0:8d:7f:05:e5:2c:3f:78:58:25:0c:4d:b1:82:
2a:c8:03:e8:63:ad:72:9f:79:0b:5a:9b:32:75:71:
aa:f4:a3:f2:76:ef:50:eb:17:e8:e4:60:e6:7d:78:
68:74:60:34:bd:4d:4c:66:a2:e2:03:35:56:84:60:
4e:29:f1:fe:69:ae:93:23:b9:5c:2d:04:3f:b6:0e:
c2:2c:80:19:f1:5c:7f:ef:ab:a5:7f:b6:e9:78:6e:
20:93:8b:08:1d:6b:55:dd:c4:51:b5:0b:f2:dc:48:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:42:AD:E4:FF:77:D3:AD:38:D8:9B:88:1B:A7:26:BB:CF:10:D0
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6a:0b:ed:59:8d:40:3f:5a:42:a7:5e:7b:c2:01:54:f2:0f:
74:15:d5:ac:67:b3:a8:0b:e4:04:07:87:56:22:a4:53:2e:b8:
9c:63:29:47:5f:cb:65:f0:2a:8f:40:44:c8:6d:bc:0f:96:24:
bf:b3:12:17:be:00:b1:35:c6:dd:38:14:a4:47:20:14:ff:0e:
fd:4e:29:f6:fe:95:4a:07:7b:8b:81:c5:94:8a:33:80:ba:01:
b9:94:36:68:ac:fd:86:01:b8:8f:a8:59:fe:ea:e6:79:a8:87:
74:bc:fa:61:56:c7:8f:a0:6b:18:fb:40:66:fd:2f:63:8c:cd:
74:f0:a9:5d:f1:2e:f1:cb:65:63:17:08:b9:b4:73:db:39:3d:
56:9b:93:6a:e4:bd:21:5c:8d:b7:45:e6:b6:22:86:30:68:d0:
9c:6d:25:ce:18:8a:31:d8:22:5d:7f:8a:67:64:0d:41:13:4c:
26:46:a9:0c:a3:2f:76:4b:60:50:f6:8c:4f:36:d7:88:fc:6d:
ce:ae:fc:43:67:5e:99:bc:f8:e6:52:77:34:f5:0c:5b:7e:d9:
e2:50:01:54:6e:c6:86:0c:7a:b4:7b:be:fd:48:b1:4e:be:2b:
66:80:ad:6c:1e:eb:af:f9:48:83:9a:dd:9c:e2:dd:38:69:9d:
2e:e4:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:06 2026 by rpki-client