Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: KNtTCMt/mjFxATK081xHbAwMWdqfCxk2hT2h3maIykU=
Subject key identifier: BE:FC:D2:12:DD:A8:85:37:AF:C0:85:60:58:00:EC:02:59:65:CC:E1
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019CE7B703AE2416C0BEB4899C333C967054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 085A
Signing time: Fri 13 Mar 2026 15:00:56 +0000
Manifest this update: Fri 13 Mar 2026 15:00:56 +0000
Manifest next update: Sat 14 Mar 2026 15:00:56 +0000
Files and hashes: 1: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (hash: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs=)
2: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
3: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: R3vsU9/BbRjvYf2flvjHyMGzqIsI3iuqsIWR4ARgwkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:03:ae:24:16:c0:be:b4:89:9c:33:3c:96:70:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Mar 13 15:00:56 2026 GMT
Not After : Mar 14 15:00:56 2026 GMT
Subject: CN=befcd212dda88537afc085605800ec025965cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:c3:31:59:8e:b9:00:ba:92:18:7b:85:43:
aa:1c:ee:37:7f:c6:37:81:00:25:5c:84:48:fe:de:
da:d3:15:b7:53:29:c0:1d:67:db:63:91:89:3c:39:
4e:98:bc:33:b9:a7:cb:2f:36:2e:23:f5:17:77:1b:
c1:70:da:3a:3f:b1:a9:3b:42:10:4d:0a:9f:8a:5f:
43:b1:db:a7:e4:74:ae:d8:17:4c:78:cc:bd:40:97:
4a:99:20:ff:ab:91:83:62:27:51:76:9b:07:ff:71:
d3:51:81:b2:b2:3d:dc:2f:fb:b5:9b:e5:ab:fa:ec:
bd:04:b1:a8:40:8b:a7:82:85:42:d3:9e:84:7b:c0:
c6:56:66:30:8d:b8:9f:55:42:f5:e7:22:e2:d3:a3:
1c:c3:f1:ea:37:43:64:7e:98:bd:7b:9e:39:96:46:
a8:05:e8:43:a3:cb:86:b9:98:86:3b:c1:ef:7a:cf:
0e:56:82:c1:21:e6:24:24:93:59:af:1f:f3:c8:18:
5b:d4:85:fb:a4:92:54:d5:e5:5c:a7:53:2a:4a:cd:
61:19:87:13:64:da:3a:5d:35:15:10:e9:ed:5b:16:
df:9b:58:8f:a8:6a:c1:1a:0f:41:2f:57:96:cf:4a:
de:6f:52:79:98:ac:78:cf:dd:c4:48:07:e9:4e:28:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FC:D2:12:DD:A8:85:37:AF:C0:85:60:58:00:EC:02:59:65:CC:E1
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:63:1c:43:b6:4d:81:dc:52:a7:c2:52:3c:e0:77:00:73:
db:c5:dc:2e:69:17:14:39:df:4e:5d:78:b2:a8:ec:47:b1:50:
d4:ff:fd:45:77:63:ff:09:97:53:fc:54:34:cb:78:e9:63:4a:
fb:70:35:a8:62:e2:96:7b:e9:bf:d5:bb:b4:e8:61:f5:ec:7d:
cd:7a:2d:5c:7e:d5:18:06:61:b3:d3:99:62:35:0a:8c:ee:ec:
95:cc:0d:19:65:82:e8:ec:91:a7:4a:9b:a3:6a:92:3f:c8:c7:
32:01:96:f0:b8:17:e2:19:a5:d1:cb:cd:93:94:5e:58:71:f2:
d5:01:44:f3:4c:44:81:1c:bb:47:ce:77:80:2f:cf:51:6b:dd:
05:c7:cd:72:86:78:54:61:15:79:33:da:e8:d1:d7:51:68:56:
b1:a4:af:7b:05:28:0c:fb:2c:a5:08:17:ed:6c:1a:35:56:f8:
4b:f8:0b:77:3d:af:ea:58:3e:61:e0:00:d8:1f:f0:bf:97:f7:
3c:19:8d:db:3b:5e:ff:4e:e6:b3:8b:5a:1d:91:82:d7:6c:8d:
4a:fb:70:35:71:1a:3c:55:6b:15:96:2d:d5:db:5d:60:39:a6:
f4:0e:de:9b:91:59:34:dc:a4:fb:52:0e:03:5e:75:58:52:99:
5a:2e:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:55:52 2026 by rpki-client