Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: UiK53qeZtMvEgE8otNUDVWEJfybfVULPCmacPO5/3+M=
Subject key identifier: 50:56:31:96:77:36:AE:1B:BB:D0:CB:ED:48:29:0E:BC:65:46:7E:B1
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019D3752BB942C81AC01EFB044EBDA9B5555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 363L+wJLaMO0t2uwk817CgsG1wSEuh5BUCjQol6oQm4=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:bb:94:2c:81:ac:01:ef:b0:44:eb:da:9b:55:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=505631967736ae1bbbd0cbed48290ebc65467eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:c2:77:70:95:06:31:58:ff:53:1a:03:ee:
71:37:00:a2:9d:75:ad:78:87:03:63:69:f8:da:de:
b6:26:25:97:ee:51:2c:80:86:13:7c:b9:3f:b1:4f:
f2:1b:70:ad:f8:39:00:98:eb:fd:4d:ec:5b:59:a8:
14:c7:fa:80:93:d6:f6:c9:b5:56:d7:36:d5:57:eb:
c6:14:97:e7:af:50:45:f9:6e:f5:ee:10:f6:3a:38:
d1:62:5d:ef:93:88:48:b5:4a:69:b5:3b:86:7e:23:
8f:11:28:62:eb:35:78:c7:cd:06:69:9b:84:5a:91:
97:82:04:2f:7c:6c:f0:9c:c5:45:4a:62:98:70:8e:
31:d2:e0:3d:84:a2:1c:18:ac:59:7a:cc:63:c6:db:
52:fa:42:cc:e5:06:be:30:e1:ef:e7:02:49:7f:f9:
f8:a7:64:48:19:71:e5:85:fa:bc:fb:55:ee:f5:b2:
10:5f:a5:99:02:7b:4a:3d:9a:49:e2:5d:5b:f2:dd:
dd:f3:a8:d0:9f:f8:30:d6:96:4c:9d:24:9e:28:c4:
42:31:db:be:3a:49:25:42:04:89:06:1c:26:62:50:
7f:33:69:1f:0c:52:0c:4c:aa:92:99:fd:dc:24:c2:
ca:d7:62:ce:e3:70:b5:82:a0:59:b9:ed:58:07:8c:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:31:96:77:36:AE:1B:BB:D0:CB:ED:48:29:0E:BC:65:46:7E:B1
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:aa:4e:88:68:d1:b4:17:6e:8e:cf:62:74:dd:2e:77:2e:9c:
ee:59:b5:82:2b:c8:c0:70:e3:eb:de:84:f9:fa:1c:0d:aa:e8:
29:f6:00:4c:a3:67:28:68:46:83:62:77:a8:c1:14:09:8f:b9:
c8:a8:8b:f6:86:00:a7:8d:13:22:87:01:41:f4:d6:b5:fe:fe:
a2:20:a5:0c:0f:87:b5:72:c3:f1:74:b2:33:2a:df:99:1e:53:
46:6a:5a:49:f5:13:2d:8f:0f:48:ab:99:d9:0e:81:e8:86:87:
31:dc:cf:03:83:d5:d5:bd:53:45:7b:f7:d6:37:2f:6a:a4:00:
ab:bb:5f:81:ae:fc:55:91:e4:5c:1a:a1:34:c0:59:eb:7e:1a:
b9:82:44:38:ee:89:c9:df:c7:30:ea:b4:58:e4:bd:80:c4:3e:
1f:3b:04:44:f2:12:68:08:b9:91:5b:ec:2e:e0:7e:10:b8:bf:
77:c9:53:63:ca:e0:05:a7:33:52:c4:c7:cb:9c:17:59:cb:1e:
5e:66:0d:1f:a7:97:9c:8d:62:98:43:19:49:af:c3:05:18:16:
72:15:af:31:c0:6a:e1:b3:43:9b:ea:4d:b4:93:c9:53:35:f5:
6e:b2:af:1f:46:90:39:6f:29:1d:ed:00:84:36:61:4a:28:bd:
1b:66:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:24 2026 by rpki-client