Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier: CFnZLwkvnM/HtRcVmqPbcOwuBXM9bFj7NV2FnhsgVI4=
Subject key identifier: 1C:CA:DD:A4:B6:7F:5B:FA:39:F8:17:C4:A9:31:50:5D:7D:AC:DB:70
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial: 019D3A1C82EACD01B68B8B4D77E6ABBBBE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number: 1487
Signing time: Sun 29 Mar 2026 15:00:39 +0000
Manifest this update: Sun 29 Mar 2026 15:00:39 +0000
Manifest next update: Mon 30 Mar 2026 15:00:39 +0000
Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: gpUVeoZKROyJhBPpB9Nvh0HCiflNHYGmnRy+quRsCMk=)
2: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (hash: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:82:ea:cd:01:b6:8b:8b:4d:77:e6:ab:bb:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Validity
Not Before: Mar 29 15:00:39 2026 GMT
Not After : Mar 30 15:00:39 2026 GMT
Subject: CN=1ccadda4b67f5bfa39f817c4a931505d7dacdb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:b5:ee:ff:2a:5c:58:14:98:10:ab:36:ef:
87:0c:3e:b9:cd:91:3c:7d:e0:ea:03:06:84:57:17:
30:eb:88:f0:9a:af:6b:2a:af:ce:26:05:e1:00:e4:
1e:95:ae:04:b0:79:89:ac:a9:e6:cf:10:e0:8f:0a:
56:c0:73:ca:ed:b9:a0:8f:43:e0:6a:aa:8a:c8:84:
e3:22:c0:f7:7d:c3:9f:ed:a9:42:cf:25:8b:14:d9:
9d:7c:da:13:42:92:4b:69:f6:f5:70:f8:dd:ae:d5:
a9:df:2e:f9:e1:cf:27:f2:9b:d5:95:20:50:5e:0a:
58:f8:18:93:19:99:5a:eb:ef:ea:17:6f:27:a9:bd:
a6:b6:a8:0c:4a:7a:9f:ff:2d:52:18:3f:d3:d6:a1:
a8:fb:ce:f7:e7:4f:96:1e:26:d0:ba:48:ed:16:b6:
4a:f2:7c:46:20:ae:42:b7:15:ab:e9:2b:f1:2e:44:
1d:7b:bd:32:d2:83:5c:5d:5e:08:de:3d:a3:53:f3:
1b:9b:85:d2:bc:7d:d0:f3:94:49:0a:ea:e8:ad:04:
18:2b:8a:af:bd:7d:c1:9b:ce:b4:eb:9d:ed:5f:a5:
cb:48:28:e6:76:2a:3b:74:b2:aa:da:11:01:06:12:
f3:df:99:c9:6f:34:63:83:b1:b2:d0:0d:7a:cb:f5:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:DD:A4:B6:7F:5B:FA:39:F8:17:C4:A9:31:50:5D:7D:AC:DB:70
X509v3 Authority Key Identifier:
keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7f:44:50:c0:f0:05:b1:9e:fb:b3:ac:93:a7:35:6f:83:6d:
8c:0d:47:18:4f:8d:b8:ca:e0:da:9b:5f:5b:c9:89:3e:7f:b3:
3e:55:b7:10:76:59:e6:0a:4f:8e:0f:30:c8:81:81:8a:81:fd:
01:28:04:16:be:48:1c:c7:82:de:56:a2:00:82:2c:62:b6:33:
ba:0e:6b:22:29:82:23:1a:77:fd:03:fd:41:f1:f3:6b:17:ad:
0b:7c:5f:a4:d7:d6:9a:dc:02:19:68:42:4a:38:41:84:8c:81:
a4:79:15:b4:b8:7e:cf:0d:57:de:e8:38:a0:29:cf:bf:07:1f:
72:9a:a4:cb:15:7b:86:2a:29:63:05:31:2e:07:66:87:15:b6:
84:17:20:0a:39:c8:2f:1d:e5:01:4a:9a:fc:e8:d3:7e:b0:fe:
f4:5e:29:dc:fb:e7:83:a6:02:1e:c9:46:0e:f7:0e:3d:37:94:
81:98:00:50:f2:99:4e:48:7b:ad:61:94:1e:b2:5e:0f:9c:fe:
9b:2d:97:da:ab:e9:50:72:30:c8:10:cb:a3:2d:3d:3f:2a:48:
7e:6e:a7:7e:ee:93:70:45:91:6b:ce:5d:0b:76:80:3c:0d:8b:
fa:41:f1:cc:bb:c8:c3:69:c0:ed:80:22:6b:78:21:d8:46:e9:
ec:e8:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:50:56 2026 by rpki-client