Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
File: rcPkes8gE_hlTK21u8BSJoDj0CA.mft (raw, json)
Hash identifier: ms2u0uNqFM1Lovs7m6uetDnwrOx49bnwt6Wn9QqPG4M=
Subject key identifier: 0B:89:A6:91:07:18:1B:40:D4:1E:4C:08:13:4D:5E:0F:8B:C7:54:22
Authority key identifier: AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20
Certificate issuer: /CN=adc3e47acf2013f8654cadb5bbc0522680e3d020
Certificate serial: 019D3909A855DE95B34E466AED153EC36584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
Manifest number: B2
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: kpaNejaKmczszSeV4Kr3nQVsfCk.roa (hash: ae4+SDY4Ysgx2BqDFABpfVwYYmnIsIslEL496b85q74=)
2: rcPkes8gE_hlTK21u8BSJoDj0CA.crl (hash: rv8Hm3rH4PL2Cw7wugEjysjpSUqLZxe5zRxz09QbDVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a8:55:de:95:b3:4e:46:6a:ed:15:3e:c3:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc3e47acf2013f8654cadb5bbc0522680e3d020
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=0b89a69107181b40d41e4c08134d5e0f8bc75422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:db:ec:01:d1:f3:fc:d0:52:44:ea:32:eb:67:
71:a6:cf:08:8d:29:be:31:21:36:a0:e7:1e:fd:52:
fb:2b:88:9e:ed:49:80:19:b8:b7:b5:8e:9e:fc:ad:
94:b9:ff:15:5b:34:23:27:a5:dc:79:94:71:93:e5:
2d:66:c0:8a:46:d8:3a:0c:24:29:06:f7:01:f2:f9:
d1:57:a8:48:55:f0:29:94:0a:e7:cc:ef:e8:62:ee:
66:be:d1:85:c1:6b:9d:37:3f:52:d6:91:e3:b3:df:
b5:9c:81:6b:c4:43:fe:72:c9:cb:bf:e0:da:33:4e:
c4:71:4b:0b:05:c7:d9:50:a6:a3:1f:f1:ed:73:2b:
4e:28:96:d4:8f:ef:50:cb:c8:66:c3:7b:68:86:81:
0e:fe:81:57:21:e9:78:49:78:f7:56:ac:00:0e:84:
c2:7f:5e:1c:65:ed:e0:e0:0b:8b:6b:5b:52:78:f7:
05:c9:86:66:55:c4:f7:c8:c6:64:e7:7b:f1:c3:b4:
11:1f:25:19:f0:5c:00:65:37:fa:26:7b:ab:a2:b8:
16:0c:e5:fa:1c:fb:f0:8c:65:0e:fb:14:f3:93:c3:
bd:57:6d:8f:d6:23:e4:22:ae:5c:9c:3c:0a:60:c1:
00:f7:da:9e:a2:66:15:20:66:f5:3f:a3:84:08:90:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:A6:91:07:18:1B:40:D4:1E:4C:08:13:4D:5E:0F:8B:C7:54:22
X509v3 Authority Key Identifier:
keyid:AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0a:81:80:d1:51:73:fb:35:f3:5e:ac:58:bc:74:70:ed:55:
9c:a4:f9:f7:00:3c:e2:07:2b:84:54:87:06:78:e9:6d:1d:71:
c8:c5:29:4b:5b:ca:c9:d4:22:f3:c1:cd:7c:fe:16:2a:72:81:
79:49:56:5a:fe:b3:82:93:cd:f2:01:79:e2:56:87:0c:85:5d:
b1:20:e8:43:cb:19:ff:2e:f2:68:81:2a:6a:84:4e:7b:00:81:
0f:cc:9b:6c:98:b0:45:46:21:17:a7:2d:a5:a2:26:ed:d5:7a:
dd:26:00:39:5a:3a:e3:47:f8:73:d8:38:29:91:76:3d:c2:9e:
e8:3a:9d:15:50:85:e3:0f:19:9b:7e:98:b3:86:f9:37:67:17:
a8:5b:45:2b:43:11:ba:0e:04:c3:7f:52:b8:a5:5e:fd:6a:19:
17:cb:45:63:77:46:8e:79:e0:19:a6:70:99:68:22:6d:14:4c:
69:c1:16:6c:6a:da:b4:ee:e8:04:99:16:2c:06:f7:1d:d5:dc:
91:c8:a7:6b:4e:44:77:25:e0:b6:bb:61:6f:a2:c9:a1:7e:af:
8f:90:34:fe:e6:fa:63:f3:13:e5:88:14:69:2c:09:a1:ba:45:
46:a4:40:d1:b0:2c:0e:12:db:c0:5b:67:9f:bc:f6:25:4d:58:
ba:3d:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:54 2026 by rpki-client