Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier: M03nLjV1slgHEaBgu5c5+wX8hNt9ROuovm3ZTmA0yd8=
Subject key identifier: 80:D9:76:B6:ED:D1:01:D8:32:FA:D8:1B:88:3B:C5:0D:24:26:58:B0
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial: 019D378911A06825D99D83C50E79C647F8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number: 0300
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: yh3DAUYrYa9kWsUqsVK4xA0XNUT9WqYypQXu6AGQGfA=)
2: MSRVEgtVF36hLTRoVhlT4zWJzuw.roa (hash: qRuvX1aY6QEfG+9q3uLQWZib4GCEJv3j+Wk3Azr+3ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:11:a0:68:25:d9:9d:83:c5:0e:79:c6:47:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=80d976b6edd101d832fad81b883bc50d242658b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:31:81:c6:cc:26:ac:0b:ef:4d:43:4a:ff:
29:30:bc:28:e6:cc:97:7d:a2:4d:02:bc:40:86:38:
2f:aa:4a:8e:c5:d1:53:6f:e5:97:2a:35:04:97:2f:
40:69:b9:13:a5:13:89:9e:9c:1c:b3:32:59:0e:63:
0d:c4:e4:83:4e:35:4e:de:56:ee:83:ee:8d:fc:cf:
d7:d6:89:d0:a1:66:f6:a3:55:e3:c7:af:d2:33:58:
cf:c8:92:5a:b9:20:c8:de:a0:fe:d5:05:0e:66:61:
b6:4c:63:87:b6:d4:64:c7:f9:a1:7f:94:af:fc:4e:
7e:8b:eb:a5:4a:68:ff:b9:11:31:9b:71:dc:93:2b:
3c:cb:2d:e7:43:9b:ad:7f:24:62:f4:0a:b4:5e:27:
70:db:71:3e:6b:59:e8:0e:75:3a:bb:01:74:71:70:
aa:5a:b6:e4:85:63:7a:9b:1c:fb:79:5e:e7:11:22:
8a:90:65:b8:ec:e1:f3:8b:44:af:b4:88:37:e5:3e:
1d:3e:83:c8:36:76:02:f0:29:a3:ee:ef:d6:c7:06:
02:44:be:30:ee:c1:42:4d:69:90:c1:ae:20:a0:2f:
94:dd:12:79:f7:de:d9:26:49:d4:4e:02:a2:39:1a:
27:96:1d:92:34:e9:a8:0b:94:fc:5b:83:1a:cb:58:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:76:B6:ED:D1:01:D8:32:FA:D8:1B:88:3B:C5:0D:24:26:58:B0
X509v3 Authority Key Identifier:
keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:80:33:72:0b:89:3f:91:3a:76:9f:2a:6b:aa:bc:4c:4e:af:
08:e7:76:ef:74:02:c3:bc:c3:a1:92:8a:bf:e8:79:65:f9:60:
fe:da:ab:ff:9f:f4:23:55:77:12:26:61:c6:dc:07:43:eb:f0:
48:68:6e:94:da:2e:ef:52:30:3d:61:40:7d:e8:34:ac:83:c6:
ab:6c:89:85:03:a8:47:08:4d:6d:02:3b:3c:01:c5:ed:73:a3:
5c:46:dc:ff:82:e0:28:5c:88:5e:7b:7f:25:11:c5:3c:f3:c0:
07:c6:6a:37:35:b5:ab:b3:ab:e3:ea:85:4d:08:ba:5b:fa:53:
2f:a4:5c:da:47:ed:d3:b7:d5:aa:47:ad:c4:bd:ed:71:26:50:
2e:17:69:29:a6:0d:c1:55:62:03:fc:21:24:71:72:8a:fb:42:
15:ae:e6:37:82:93:9e:ba:78:1d:e1:05:a5:42:a7:dd:ff:ba:
40:67:e0:ee:5c:f7:e1:29:01:9d:07:2e:3a:86:ba:aa:33:49:
f3:68:e1:87:d2:5b:81:51:a1:66:3a:51:6c:ea:5c:ac:56:b7:
95:e6:5b:ff:c9:e6:c0:6c:69:2c:0e:56:51:85:97:0b:57:2f:
ef:a0:ee:40:a9:17:87:9f:72:01:4f:07:63:90:f1:23:03:4e:
bb:f5:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:13 2026 by rpki-client