Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: s4ph4eM4yMxuE/igyl/79stBTBeCd2nYZq3vMrhPXt0=
Subject key identifier: D6:91:10:5D:5C:06:63:1F:43:21:E4:43:CD:9E:5F:93:F2:6D:D5:9F
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019CE3A3356CB09A78002A70A8E43DC5B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0CA2
Signing time: Thu 12 Mar 2026 20:00:49 +0000
Manifest this update: Thu 12 Mar 2026 20:00:49 +0000
Manifest next update: Fri 13 Mar 2026 20:00:49 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: AnzhRIN45J0Rt02Mu42BIB53cVhU2IINdJuqkxCPwHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:35:6c:b0:9a:78:00:2a:70:a8:e4:3d:c5:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Mar 12 20:00:49 2026 GMT
Not After : Mar 13 20:00:49 2026 GMT
Subject: CN=d691105d5c06631f4321e443cd9e5f93f26dd59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:b3:0e:d9:eb:67:93:c9:64:3a:21:5b:05:
02:24:b4:7a:ef:c3:91:e5:af:58:7b:8b:a9:29:f4:
d6:8d:84:36:52:bf:a2:31:79:82:7c:d9:be:55:a7:
33:9b:8d:4f:45:cc:66:df:40:00:d1:58:7a:e2:df:
42:6d:ae:55:e3:1e:39:a3:ae:65:c3:4b:05:00:ad:
33:12:b4:f2:01:5f:25:b4:53:38:dc:2a:6f:55:98:
0b:a8:51:b5:a5:88:d5:5b:b7:52:e0:1b:15:35:78:
fd:82:4d:cf:4c:e5:dc:97:13:87:df:87:8f:a6:fe:
c3:fd:45:97:e6:71:95:6f:af:40:21:9e:52:89:13:
a1:a4:af:48:e1:1f:5a:d1:73:c7:d2:82:3f:98:5d:
c6:8c:73:02:78:0b:7b:0b:19:a2:d2:41:ec:6f:bc:
66:0f:75:e7:f7:74:2a:91:11:a2:98:c4:51:31:ca:
41:0a:42:9f:66:49:af:86:c9:63:de:40:39:06:45:
6a:69:fb:c0:df:b8:ed:28:c5:8c:01:34:63:eb:96:
fd:8f:5f:ef:e5:b7:d8:73:06:e9:63:73:39:08:d0:
df:9f:1e:30:73:d1:f3:bd:d9:01:38:03:7b:a3:5e:
d7:ac:e4:f9:4e:59:61:38:1f:d2:28:16:7a:48:fe:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:10:5D:5C:06:63:1F:43:21:E4:43:CD:9E:5F:93:F2:6D:D5:9F
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1b:a8:80:85:23:71:2d:81:5e:e9:94:c8:5b:0f:62:90:e5:
cb:c0:8f:02:8e:20:1a:c5:5a:bc:ce:11:f1:90:bb:4d:60:3a:
5b:78:4d:a2:1b:37:d1:e0:81:a0:27:8b:ec:32:42:45:de:86:
b2:52:cf:fc:8b:3b:24:fd:b7:24:78:4c:2e:26:1f:1e:85:80:
5e:01:60:3f:47:21:1d:63:a0:d8:a0:44:7a:ac:65:02:22:bd:
43:12:e9:9b:82:f1:85:e1:c5:f7:2e:20:10:77:5b:c2:6a:73:
c0:24:27:f4:9e:2e:4e:fb:96:2c:92:be:62:a6:d4:f2:1f:3f:
6b:ef:16:88:b3:5a:a3:c7:ac:f1:69:bd:55:23:79:fc:7e:a7:
e8:86:49:64:aa:67:12:c6:45:be:88:94:1d:01:63:4d:30:a4:
b9:20:f2:fb:5e:7d:58:3e:27:44:f4:1e:5c:90:ed:92:38:33:
31:90:83:74:e4:43:7e:bf:3f:2b:18:a7:b2:25:f0:8f:22:98:
fd:32:4b:b1:49:a5:a4:3b:cc:6a:f5:75:3a:bf:79:e6:2e:97:
c6:17:29:2b:5d:a9:21:8d:5f:ce:1e:f0:37:5e:fc:c7:79:bf:
d4:09:5e:18:b4:00:1a:7b:e5:b0:f2:15:26:c4:46:e6:e9:0d:
2e:80:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:17:51 2026 by rpki-client