Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: LV684Rdebm6GtiHdqMP7huFrONRashzDgcYW8gCe+2E=
Subject key identifier: BB:60:5B:16:8C:DE:6D:4B:1D:D1:1E:62:5B:C2:18:3F:8F:16:8C:64
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 019D3752292F316803060FA39DD28B7ED78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 16AB
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: PwQvETm7cRPxaiSCl5RIXoxMRHo.roa (hash: LgW22oFTQfKbq8qvGxkyVXGKtUsCBhBLz4XP/aisFIs=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: ZwAdDQCMFGq3okypX/9pNcAJFogeoh2G3SFsynS0Fi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:29:2f:31:68:03:06:0f:a3:9d:d2:8b:7e:d7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=bb605b168cde6d4b1dd11e625bc2183f8f168c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:47:ac:b2:04:69:f7:2b:36:ee:29:79:2b:
7a:a5:27:5c:35:f9:86:87:07:31:60:ad:64:01:19:
fc:70:cf:ee:86:ec:1b:58:66:df:4f:33:0f:31:d7:
1d:d7:b4:b3:8d:8a:36:3c:0f:55:79:0c:ed:c5:10:
cd:1f:c1:f5:5d:5a:93:27:23:a5:9c:e1:0d:e5:00:
80:74:0c:97:b9:18:31:aa:f8:b9:e4:a0:f2:a6:22:
f1:05:48:75:be:e2:be:ad:cd:22:41:de:10:d9:76:
83:ef:86:22:11:4e:ce:73:49:e1:2d:12:b2:1f:30:
f1:11:9b:84:b0:45:00:cb:c8:a1:51:66:bf:1b:76:
aa:e4:d6:8a:e3:d1:53:46:9b:96:f1:eb:3d:07:32:
75:3f:64:b9:2e:f9:92:6d:8b:9b:c9:3f:06:00:0f:
58:9c:4a:19:70:23:10:9f:c5:92:e0:b3:ac:41:81:
3b:cb:45:2b:75:9d:3d:be:e4:14:b5:0a:e3:9a:91:
b6:75:8b:0d:e6:a1:74:6e:06:00:c2:90:d9:ed:19:
78:36:5b:2d:67:bb:76:2d:11:a4:5a:bd:7a:ca:9c:
cc:f9:54:91:9a:d2:39:ee:a1:58:29:e6:f1:9d:2b:
1c:a8:9e:4e:e1:6c:c8:e3:36:01:ff:b4:a5:f6:eb:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:5B:16:8C:DE:6D:4B:1D:D1:1E:62:5B:C2:18:3F:8F:16:8C:64
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:66:23:2e:ab:bb:a7:ab:88:08:4e:01:e3:00:4f:9c:69:67:
04:d4:49:df:84:85:5b:66:62:06:4e:0b:44:ac:e2:bf:dd:eb:
4d:3f:d5:29:18:47:f8:ee:57:f3:6c:61:d1:f1:b3:c4:13:73:
25:83:95:36:ff:8a:04:08:36:dc:24:c9:5d:59:bc:5f:b9:84:
d2:b9:d7:12:d6:cf:c2:f4:bc:1a:9a:ec:f1:d4:08:00:de:d6:
d4:23:f4:04:3e:aa:85:2c:99:10:62:44:46:03:3a:66:9c:99:
55:8f:47:11:52:38:73:08:68:e2:90:cc:ac:95:13:98:ad:f2:
9e:ef:10:e8:48:42:12:84:02:11:36:cc:e4:10:88:89:56:24:
1f:3f:88:1f:5c:ec:e7:1a:12:01:df:4f:0c:3f:eb:ed:62:dc:
e4:63:ed:25:be:d6:35:91:0d:d3:0d:4f:92:25:c4:75:8f:50:
00:72:18:e0:75:bd:af:e1:d5:d7:6e:c9:db:f5:67:c3:72:dd:
c9:20:77:77:98:b3:0f:f0:ee:5a:99:b7:9b:80:68:72:52:e3:
16:b7:42:58:4c:de:23:c3:d3:aa:a6:57:bb:79:75:6f:1f:68:
ce:b2:49:c8:02:36:b7:fd:40:40:47:07:d9:0b:b7:3e:f0:96:
cb:b6:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client