Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: CmwWvwJZGsdT6OUrJRBQE5Q8CWvQTAmYe8miKhxDwUY=
Subject key identifier: B5:97:9B:FF:DC:5B:62:68:25:A7:1C:7E:7B:2A:19:66:42:98:68:5D
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019D37C0139509601A58E658354ADE26D695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: efVPOs6F9BiHlIXVBbHFH7PfpKrBOOF57RwjexXFfrk=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:13:95:09:60:1a:58:e6:58:35:4a:de:26:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=b5979bffdc5b626825a71c7e7b2a19664298685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:ea:80:6f:9c:79:7e:27:dd:bf:c6:dc:de:
ba:c5:2d:2f:d3:43:e5:1b:1d:13:4f:a8:21:55:83:
ca:12:01:3b:1b:8b:bd:ad:47:2a:5b:32:f5:b8:d9:
21:b5:9c:2a:8d:19:28:b9:b4:99:95:47:e8:bf:65:
71:b0:5c:fb:db:85:9b:89:f6:89:22:05:4f:2c:91:
c8:d1:0e:b0:ab:ce:e4:c9:0f:04:ed:dc:bc:9d:c5:
a6:7d:ae:a8:21:f2:82:34:31:6f:8a:0a:4f:55:0f:
62:b2:ca:3a:aa:d2:84:ab:6c:17:3a:27:38:83:4c:
40:1e:db:5d:cd:fd:a2:8f:86:db:d0:5e:bb:39:97:
6b:76:ed:d0:2c:d4:a7:39:ce:31:6e:9a:9c:2a:32:
c6:d2:b5:0d:0c:01:f3:58:6e:d2:a1:a8:66:f8:a3:
8d:14:94:1a:ff:61:74:bc:5b:d3:b2:4c:5b:d7:c6:
90:fc:00:cc:f2:2f:01:03:d8:39:14:d2:60:60:43:
5c:a5:af:82:11:1d:de:85:e3:b2:e0:c2:6e:83:85:
77:3b:6a:01:7c:3e:6f:37:31:a2:17:0a:fa:f8:01:
aa:40:c0:9c:d2:f7:55:f9:93:65:a5:62:b4:67:3b:
bf:55:ca:19:b0:9b:51:1a:5a:ff:22:af:1f:86:e2:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:9B:FF:DC:5B:62:68:25:A7:1C:7E:7B:2A:19:66:42:98:68:5D
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:ac:97:d1:f6:5a:fe:74:6f:3a:f8:07:a1:cb:03:0a:87:
86:42:4d:68:21:0b:11:ee:b8:00:35:5c:35:a1:b6:2b:d5:45:
44:b7:82:1c:dd:a8:2e:71:6a:64:5b:b0:9d:60:46:aa:0b:72:
51:cd:1d:06:7f:4a:96:07:95:71:f9:f1:dc:b5:b1:fb:14:15:
13:96:3d:54:63:5a:2d:df:78:4a:3e:ea:7e:99:c7:15:c4:b9:
53:8a:d0:e9:85:85:4c:68:be:84:b6:be:9c:22:12:ce:89:d4:
f5:a4:ff:3b:03:69:97:16:73:2c:98:a2:fd:3c:82:53:ea:9a:
12:11:4a:6f:1b:50:85:8f:64:90:cd:60:41:b5:c1:af:4f:82:
fb:32:d3:49:11:34:2a:c0:a0:6c:85:86:4d:55:dc:7f:34:50:
31:6e:9c:84:b3:4e:a9:e2:b6:07:f1:a0:20:01:d7:17:4a:0d:
cf:9c:57:2f:82:ea:c6:2b:fe:ca:64:d8:9e:2a:f5:75:60:49:
cb:33:1f:58:48:ba:4d:62:3a:44:ee:10:c2:2b:e6:99:0d:0d:
e0:43:e7:38:97:bd:46:07:ff:de:47:5f:dc:8b:24:bb:38:c0:
69:a9:5e:6b:61:47:88:82:95:ef:54:92:0f:94:68:c8:20:c1:
9d:22:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:33 2026 by rpki-client