Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: yeNWOOmtg2fGNEFpZqLTICFOFz7pxkqYdkjygcBN5VM=
Subject key identifier: E5:E0:DD:B0:8F:5F:46:B9:FD:9C:D8:5A:0B:32:AA:36:75:CE:F1:7D
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 019D37F758BDCB4FD4B32E6A996EFB5586C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 102A
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: aNkxjl6mJ7U0oVG1MjOUYii7PSEhJSRWcQF91S3R3k4=)
2: zbGnMHvperUTVfkkQ2o3OIxLJb4.roa (hash: yA4AYsSS3JozPB6SQxRvVSqD1ZvucRznxAMaRPbA/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:58:bd:cb:4f:d4:b3:2e:6a:99:6e:fb:55:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=e5e0ddb08f5f46b9fd9cd85a0b32aa3675cef17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:58:8f:8b:97:c9:d7:cd:0b:7f:1f:e2:d8:
d4:b1:34:20:11:5b:60:25:82:2d:d7:15:60:ad:dd:
6d:77:ec:af:92:d3:31:7c:e3:b2:ca:f4:11:9e:a9:
a3:82:d5:1d:cd:5c:40:43:75:16:f2:d4:75:d5:ca:
5f:a7:78:bf:d5:7a:16:43:bd:3c:db:18:de:75:44:
57:66:54:40:2a:31:5a:f3:45:28:12:b7:8b:e8:52:
6d:39:6b:12:5e:7c:1b:e0:c0:27:56:48:c8:ab:ca:
83:00:ad:9d:9c:54:5c:66:5d:42:3f:39:c6:ff:1c:
0d:75:19:a0:66:01:d3:1c:16:d0:97:67:23:1d:5b:
1f:1e:55:9f:8e:aa:eb:8c:c6:3a:72:01:30:da:5c:
27:0a:92:d6:2e:3b:07:5b:7b:b1:d3:67:9a:05:2a:
35:64:f2:26:5c:46:29:14:9c:15:53:6b:9a:75:98:
9d:f6:89:5f:e7:5c:bc:8a:f9:4b:1e:99:e1:a7:23:
bc:54:c6:4f:38:0e:0f:0d:29:ae:47:42:2f:a6:4b:
4a:ff:c0:0f:be:97:40:a0:23:e0:aa:0f:21:27:1c:
7e:e3:00:c7:95:81:08:fd:a4:c9:0e:0a:29:df:2d:
ae:50:39:c0:a0:bc:d2:5a:a1:b4:fa:08:da:42:e0:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:DD:B0:8F:5F:46:B9:FD:9C:D8:5A:0B:32:AA:36:75:CE:F1:7D
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4d:11:91:70:b3:a2:f0:8b:71:b3:27:10:5c:93:cc:7d:2f:
9c:92:d5:24:07:78:b7:b5:37:b5:9e:21:4a:90:26:76:d9:54:
07:35:ef:2f:09:f8:be:46:92:ff:e8:ca:bc:3a:b0:2e:d0:ad:
0d:ab:f0:1b:58:ec:62:6f:f3:0a:83:7d:ee:34:3e:d3:f9:f9:
8c:a4:d6:08:c9:b5:6e:a0:5e:22:8e:c1:be:38:52:b8:bf:cf:
a9:aa:23:0f:74:8a:62:ce:ee:ba:d6:d4:eb:e8:f2:1d:b0:1f:
31:ee:9b:17:77:6b:af:5f:17:c0:3a:0f:ef:42:4e:3d:13:cd:
1d:3b:d5:01:bb:8c:07:c2:08:5f:07:da:3e:15:d8:51:04:f9:
d5:bd:b9:95:99:07:b0:e9:00:38:d2:7f:66:d4:3a:45:af:51:
ec:00:55:ef:66:78:b2:eb:7d:4b:d0:cb:de:fd:91:43:5f:dc:
4b:a9:77:ce:fd:96:ea:bf:b0:35:af:ad:ff:14:c7:88:70:3c:
91:13:45:2a:c4:83:a5:7d:d5:0d:9a:86:b2:3b:80:99:88:f5:
27:00:74:47:01:25:78:71:c0:48:0a:89:24:ad:f9:b1:08:a0:
80:fc:9b:9e:fc:8b:82:28:43:73:31:ba:bb:34:0b:ef:a6:15:
1b:f2:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:19 2026 by rpki-client