Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: iquodQeG7KfdIuYLLrSrXLGJwtKULEC9Z4d0p5lv4ws=
Subject key identifier: 6B:3F:65:A2:29:0F:9C:3E:5C:66:F3:61:6E:DB:4A:D3:EA:A1:64:41
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019D38D357D9056082617A088E0DCCBC4583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: 4sUUJ2plPGrlHgJqJEpnOT8db0k.roa (hash: 9TkCWduhIaGb7gCxKXssPcvjYmu7Zi+zWKigf1ePUnI=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: gEeB2uPoRa4inxWrFDqHuo19ofQhRkAOYIZVdWLQrB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:57:d9:05:60:82:61:7a:08:8e:0d:cc:bc:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=6b3f65a2290f9c3e5c66f3616edb4ad3eaa16441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:2c:72:fb:95:8b:0b:8d:63:f3:9c:bb:95:
87:6d:d1:59:fa:ae:f7:79:65:92:a7:ad:db:61:46:
1f:cb:c2:7f:cf:8b:06:dc:61:79:aa:7d:34:21:5b:
91:8c:7b:82:c7:05:9b:da:31:7e:b2:74:d9:0f:e4:
f7:66:e8:e2:c0:45:9b:7a:22:2a:3e:89:91:0e:c3:
ec:08:bc:7c:c5:96:64:ef:de:12:e1:52:90:cb:34:
c9:19:63:f3:93:e1:e3:42:a6:9c:35:70:08:97:5f:
23:0f:23:fb:e7:0d:05:dd:7f:ea:1f:6a:23:03:f4:
db:5a:b1:57:2b:e0:a0:06:ba:34:35:ce:6f:83:ad:
ed:76:a1:41:40:4a:1e:0e:a5:b3:a0:e0:a4:37:b3:
4a:97:81:21:c1:6e:07:1b:4c:eb:e1:11:31:6f:11:
8f:4e:a9:a2:73:36:3c:8d:bc:0c:2b:97:b6:33:d4:
21:c7:19:91:a0:74:c4:39:bd:6e:46:53:65:c3:08:
c8:15:e7:d3:80:e3:7b:f1:8e:12:39:ad:9b:22:72:
38:e0:8c:ef:58:29:2b:48:30:92:1d:33:80:94:1e:
c8:29:13:56:29:28:d5:5a:bd:85:5e:d5:f2:27:e8:
c9:4f:50:36:78:e9:9a:8a:d1:48:42:24:ee:c8:18:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:65:A2:29:0F:9C:3E:5C:66:F3:61:6E:DB:4A:D3:EA:A1:64:41
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:30:30:be:bd:75:8f:08:57:ae:42:d0:6e:5c:50:98:b5:
c1:9c:f8:4f:09:c5:57:5b:ec:76:57:84:08:56:43:f4:f5:ce:
c6:97:52:35:cb:bd:ab:03:40:3a:a4:8d:50:1e:e1:5a:d8:19:
e4:4b:b1:b4:a2:96:f1:8b:7d:fb:e7:1d:23:ab:8a:b2:fa:fd:
56:ae:61:67:a5:8f:a2:58:de:a0:6c:9f:1f:53:f0:f5:09:9e:
b9:29:48:48:b6:63:74:25:97:e6:54:dd:fd:21:b6:29:08:fc:
f6:3d:08:7c:4b:39:dd:10:ab:cd:52:62:f6:6f:f6:45:fb:7d:
81:12:d8:3a:c8:e3:91:d6:b2:93:e5:7a:c8:30:a7:3b:d0:b0:
05:f1:db:71:9c:b6:00:e2:a1:3c:0b:4d:af:35:37:35:36:68:
46:b9:ab:4d:76:32:8f:9c:ae:24:b6:5a:4f:9c:20:bd:02:03:
dd:f0:b2:81:ad:6f:b6:26:8a:35:c0:97:75:3b:b2:1c:00:67:
34:e7:6e:9b:41:b6:64:a5:cb:ba:c2:4f:49:82:72:a3:24:2d:
84:b6:e9:16:82:34:15:59:91:f8:60:30:83:6b:12:90:db:02:
8b:c0:03:d1:1a:cf:cd:b9:48:71:9c:d7:52:a6:09:80:65:aa:
73:71:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:34 2026 by rpki-client