Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: E17RGDn/XJEwe0f2zNjy3LZZE/yRfDHTn9JJIDknRTk=
Subject key identifier: 2A:AB:5F:BA:D7:95:AA:3B:C2:8E:98:BC:1F:BE:19:9D:60:9D:54:1A
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 019D37893EB3B65C408669F27B77C9A7F972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 1042
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: cw6yPAs2Xf0IjGrArXrzJg/iDmrgQ1+Bb/HmxTTd9p0=)
2: WkDOgdUMhIbvisg1gB1VqlRy5CE.roa (hash: n8TyrFK/s854qKIOj2eeizMFn+Hfv9n1i9/epsUGYR0=)
3: ow55IcypodraGq5qBa3kayj01Ts.roa (hash: QBzRFkOgbS8ToubyKAp8uRDnvfFLz0Wij1mejxjFju0=)
4: qFX_V5K9S7pFc_wZHT0Iz0bF_ag.roa (hash: IQpJTlL5gYm7svny6BIGlabTeTBoMOPgbwqqpZYWraQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3e:b3:b6:5c:40:86:69:f2:7b:77:c9:a7:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=2aab5fbad795aa3bc28e98bc1fbe199d609d541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:0c:ae:90:cc:71:2a:a0:99:03:43:26:a5:
b7:87:99:36:dd:16:e9:57:bb:e0:16:02:e3:bb:90:
bd:8a:15:44:0f:b4:92:9f:07:b4:12:df:44:6e:ff:
ca:df:76:95:ea:e2:1e:e3:2d:0d:63:25:51:af:40:
f5:ec:08:b5:e7:f4:29:16:48:e2:10:5c:35:45:cf:
7e:cb:83:3d:fa:2e:20:f5:fb:1c:18:9a:a4:06:fe:
aa:3f:8d:f5:06:e4:19:3a:0e:dc:5b:5d:99:65:0f:
fa:29:a8:69:f7:66:3f:a8:43:a4:ef:d6:36:f4:45:
69:ad:3a:ee:e2:01:0e:bb:d9:a3:82:34:b1:0c:bd:
1e:28:8d:b4:a2:61:c1:7a:49:42:28:d8:a5:f7:30:
4f:f3:77:df:a7:2c:42:78:49:a1:c7:b1:41:16:2f:
c3:b2:8b:13:7a:82:c8:43:8c:df:9e:b6:2e:5a:89:
2e:56:1e:c9:00:a5:d3:d0:5c:21:e4:d2:a7:3b:53:
e9:60:ff:c8:2b:29:3d:7f:41:9d:28:51:fe:2c:93:
ff:59:03:bf:bf:d2:c0:ec:44:72:8e:3b:8d:41:fb:
17:5e:d9:5c:57:ab:7f:a8:50:8a:9e:99:48:ac:66:
20:d8:88:fb:97:3c:61:5e:20:18:9a:df:33:f8:fd:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:5F:BA:D7:95:AA:3B:C2:8E:98:BC:1F:BE:19:9D:60:9D:54:1A
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:87:a2:a2:65:99:14:ed:71:13:96:f9:5c:21:ab:c4:6c:
0f:ba:72:cb:4e:ca:36:f1:b4:fb:e6:a2:10:b1:cd:31:bc:48:
72:5a:f7:72:67:88:a9:78:54:37:97:b4:ef:ae:65:1d:65:4a:
20:be:f1:e8:6d:1e:b2:b2:9e:6a:4d:29:84:a1:b8:5d:30:a8:
58:63:a9:44:b8:97:fa:3c:14:b7:af:d7:7a:54:2a:6c:92:81:
fd:72:09:0e:8c:12:c5:1d:73:22:8a:87:af:39:10:ba:46:4c:
16:cc:95:06:50:0f:fd:07:1b:e3:e5:fa:6e:d8:11:74:24:99:
c4:63:a3:f3:48:74:ed:00:dd:fd:13:29:61:18:44:7c:b8:73:
e5:7b:88:44:f6:30:bf:4e:4e:03:aa:dc:14:b6:93:8e:ff:bc:
3b:3a:4b:50:12:64:09:73:26:e7:41:36:b6:29:da:7c:5f:57:
a1:4b:65:fb:1d:5e:96:c0:44:8d:2d:07:00:71:c6:9c:7f:27:
0e:5c:1d:3b:b7:3a:95:cb:fb:39:0f:cc:66:bb:c9:f9:97:f8:
02:6a:cc:d7:68:eb:ba:70:bd:ed:97:54:c9:4a:5f:62:f6:cc:
86:80:67:21:05:1a:0a:62:4c:90:d4:20:7e:29:29:e5:5a:48:
bc:ee:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:05 2026 by rpki-client