Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: gd/NrIOGZo+OlOoUBtrY+UyTweZpvRiEdCtiiENp+0U=
Subject key identifier: 8B:4D:59:9F:25:B0:BC:57:47:0C:02:35:44:34:D1:01:95:7D:BA:97
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019D37890E3CA09B690B6EBD564E3FC97B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa (hash: PycaTW4K59wW80aiPDoqRYwdmZTOHKaA4NMu7/9B2n0=)
2: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: LyCuyHAich426XV3P4a6bO5re68Si/IECI8IoGTkNrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0e:3c:a0:9b:69:0b:6e:bd:56:4e:3f:c9:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=8b4d599f25b0bc57470c02354434d101957dba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:26:ef:ad:28:53:90:f3:7f:a5:1f:c4:b2:
a1:d2:dd:f8:fc:03:0c:a7:2b:fd:49:b3:92:3f:b1:
00:1a:71:39:5a:2e:74:0a:83:ea:69:8d:49:9c:25:
08:18:60:ac:57:7f:96:a1:40:ac:8b:68:5b:38:1b:
b1:c5:11:31:14:25:c7:87:85:00:36:20:0f:6f:34:
89:f5:19:cf:90:38:57:38:d9:a1:92:81:10:4f:a6:
f3:d3:02:1b:5e:12:3e:59:a0:b1:dc:90:d5:87:1e:
44:b3:c3:2d:fe:84:f2:6d:d0:f4:6d:ce:45:e0:67:
04:8e:df:78:7d:96:c2:7f:f4:0a:5e:b3:3d:e3:6e:
a9:dd:e8:86:27:02:7a:44:05:3a:06:f3:ca:dd:9b:
71:72:9b:b0:14:fe:42:3a:19:18:56:b2:bb:7c:42:
73:1f:ad:90:b5:f0:98:0a:6c:65:96:06:8f:5d:e1:
d1:e7:e3:24:81:58:f7:58:bb:7e:82:2a:4c:42:9c:
14:1b:a7:10:50:e7:6c:d8:58:cc:84:94:88:03:fc:
e5:6b:b4:32:2e:77:2f:a8:79:70:df:90:dc:53:76:
81:4e:40:66:a1:b7:f8:8b:b3:e2:a4:98:35:ad:64:
26:93:af:f3:d9:0f:eb:32:7e:8a:bb:be:b0:06:cf:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:59:9F:25:B0:BC:57:47:0C:02:35:44:34:D1:01:95:7D:BA:97
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:fc:a5:dc:52:d8:3c:b3:b7:60:a8:3c:4e:3f:ce:57:4d:
0f:35:60:9d:be:77:47:4d:fc:aa:c8:ca:88:ff:9c:92:37:ff:
41:00:16:55:5a:a2:94:41:d5:bb:63:59:26:bd:2f:04:0f:9b:
50:9c:8a:e7:3a:d6:55:3d:fe:58:c0:75:ca:2c:ec:d0:6d:18:
5f:e1:53:a7:28:ce:29:72:22:34:ca:ab:5a:42:8b:ae:94:9a:
65:43:9c:70:12:93:ea:21:2b:56:f1:a5:56:a2:d4:f8:c6:8d:
80:a3:66:11:3a:44:a4:8a:04:16:22:6c:91:29:5c:53:aa:83:
ec:95:25:44:53:16:67:bd:fe:39:90:be:0f:6d:20:7b:82:1e:
23:66:85:89:d4:2e:6d:b3:c6:3c:e0:8a:31:06:89:7e:02:33:
81:f0:d1:fe:06:0a:36:a3:02:de:48:3f:a4:f8:fd:63:b4:a6:
a1:e7:be:53:f1:99:3b:6f:5e:e4:10:ff:2e:e4:ae:fc:8f:da:
04:0a:36:98:f9:89:86:d7:16:26:e4:31:88:64:ae:83:b3:6e:
21:e7:a5:fb:70:01:59:f3:37:18:3f:60:2e:d2:76:d8:be:c9:
6e:86:c3:60:d6:9f:8f:43:72:4f:93:a4:31:a4:ff:2d:ce:12:
1b:99:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:29 2026 by rpki-client