Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: FJ9VI3fRJtjisxP17z+M2avxW9WoieYeRFaH7jT2/1k=
Subject key identifier: 20:1E:8A:17:A5:9D:E0:FE:16:41:6A:42:67:37:01:D0:A9:E2:4D:BA
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 019D3AF88A88C189E9E5ED212403EC601A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 09C6
Signing time: Sun 29 Mar 2026 19:01:00 +0000
Manifest this update: Sun 29 Mar 2026 19:01:00 +0000
Manifest next update: Mon 30 Mar 2026 19:01:00 +0000
Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: yAC827tZoEzgl6qy1DdY5isRXOfq0tTd0w2GbsDfYhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:8a:88:c1:89:e9:e5:ed:21:24:03:ec:60:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Mar 29 19:01:00 2026 GMT
Not After : Mar 30 19:01:00 2026 GMT
Subject: CN=201e8a17a59de0fe16416a42673701d0a9e24dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:c5:64:79:d7:d5:7b:76:a3:34:fc:34:37:
e9:bd:34:f8:69:9d:44:b4:17:ac:36:5f:c2:f5:20:
89:dd:bb:11:29:ed:8f:2b:37:93:7d:43:3b:2e:20:
2b:41:87:b1:86:8e:5f:0f:38:f1:f5:0f:1d:8b:3e:
a1:98:58:03:10:ad:b7:e8:2f:2a:57:ab:39:68:66:
75:e8:c5:d0:a6:b6:80:1b:59:73:bb:58:87:35:f7:
4c:8a:51:1c:9a:b9:7e:20:0f:69:fb:bb:52:3e:5a:
88:76:c2:9c:15:3b:30:95:4a:69:87:ac:da:dc:94:
c9:3a:0d:bf:44:fd:64:98:02:00:b2:bb:5a:be:49:
ce:3e:4f:9b:21:ff:5b:79:2b:1d:f4:fe:18:8a:ce:
66:66:f6:dc:1a:aa:ec:e3:b6:d4:41:76:5f:0e:a2:
68:eb:bf:2f:a5:7d:77:b5:f1:46:ca:fb:b1:b3:06:
af:aa:01:ef:8d:81:12:c5:38:67:c5:de:ba:1b:2d:
7e:88:6f:85:bf:03:45:49:ef:0b:42:9b:1b:6e:02:
7c:1c:c4:98:21:3b:3b:43:76:8e:87:01:01:8d:ee:
45:4d:30:8b:90:67:cc:62:a9:1c:a5:81:e8:86:20:
40:63:2f:3b:aa:02:a6:46:f8:d4:8a:b7:04:21:05:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:8A:17:A5:9D:E0:FE:16:41:6A:42:67:37:01:D0:A9:E2:4D:BA
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:58:ca:39:51:ed:2e:b0:d6:60:fa:af:f3:94:15:2b:2c:92:
7a:f2:e4:4a:8e:0f:80:8d:73:bd:91:86:40:20:91:c3:44:3e:
9b:6b:5e:b5:6b:64:eb:51:2c:d6:5a:36:a2:be:a6:51:48:12:
aa:55:cb:4f:fa:9e:29:7e:61:31:2a:29:e9:52:66:12:f6:d7:
35:20:56:04:93:45:29:02:62:7e:1f:58:10:97:ed:75:26:3a:
72:3c:6c:6c:6a:e4:40:bc:bc:17:96:55:4c:00:8c:24:ad:05:
76:ac:2d:a8:c1:5d:3c:93:fc:33:1c:0b:0e:e0:a6:e0:9f:ee:
f9:56:73:22:e8:67:45:bf:30:10:76:ce:af:ab:20:55:7d:1a:
28:4d:7f:42:c2:07:2c:ae:22:0c:2d:d3:48:34:ac:3a:7c:b1:
b2:e6:36:f2:21:a5:e2:89:5d:5e:81:0a:ac:83:e1:7b:58:7e:
ef:44:40:8e:58:f3:c5:e6:51:2a:8c:25:16:c5:f0:81:4e:33:
5d:78:8b:20:56:cc:9b:ab:13:80:a1:af:9e:63:c3:1b:84:d0:
94:63:6c:0a:e9:81:ba:86:bc:d2:2c:76:b9:91:ce:49:1a:25:
4f:36:09:d4:ab:c2:45:86:01:bc:d2:cd:a2:72:14:86:e0:b9:
14:41:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:43 2026 by rpki-client