Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: +5QUO/mZfjiLNC9H9zqHeUght5XesMaLkzoillyS8sU=
Subject key identifier: E9:81:2B:B4:7C:07:9F:46:2A:48:F7:0B:D0:81:69:A0:17:A3:B2:C8
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019D389C4E0B9C180584C0478D45E0C1AEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: _4gEdkIozsQL-TWVwZR3ioaNfxk.roa (hash: ofd30ZN0wNQTf8/vD9ThRnfPhfJvZujQAS6qzYzazNg=)
2: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: NXi9+eROeHSep19dLjgdDbnYTryFrQCfSTgKYffZUq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4e:0b:9c:18:05:84:c0:47:8d:45:e0:c1:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=e9812bb47c079f462a48f70bd08169a017a3b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:46:15:ad:93:c3:72:34:d8:7f:66:30:c0:
0f:02:2c:89:95:a0:1d:97:8a:1f:40:05:45:2b:28:
ae:ba:5d:9a:21:a0:b2:77:75:b7:cf:79:48:40:b8:
0d:7f:17:40:3f:b1:1e:a0:06:3b:69:0b:d2:66:92:
c4:3b:aa:ef:d3:41:89:9b:2b:bb:5e:60:03:7d:fd:
6d:0e:21:e1:1d:84:ed:05:3a:a1:85:dc:54:a4:43:
57:37:af:4d:ad:05:00:c4:41:c3:c9:ef:6d:8b:25:
63:0a:16:df:35:bb:0e:5d:81:66:33:a4:22:84:ea:
06:69:cc:10:83:18:c4:c9:3e:18:4b:80:20:4b:e5:
fe:ef:00:0d:03:28:b0:c0:24:76:84:e2:ae:66:7a:
6b:5d:9e:79:be:c5:df:9b:1a:15:d7:c5:72:5f:fa:
a3:84:ac:3c:6e:92:24:3b:ed:72:d9:f4:cf:96:12:
3e:1e:61:0e:00:0d:7e:ed:72:45:76:a8:b5:8f:35:
91:6d:c2:8b:ef:58:09:3e:28:fa:fb:39:04:20:09:
6a:67:a9:de:20:08:46:4b:4f:81:0f:16:a4:ff:30:
ca:15:c5:ec:e0:f5:83:95:69:e5:89:7f:5d:65:de:
3f:04:75:ea:24:4d:26:4f:95:ea:c2:71:1b:fd:50:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:81:2B:B4:7C:07:9F:46:2A:48:F7:0B:D0:81:69:A0:17:A3:B2:C8
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9c:ca:b2:32:af:9c:68:98:3f:e4:0c:18:30:66:16:27:72:
9f:2b:a2:2d:28:23:04:b9:d9:d5:37:3b:ba:80:a8:c8:39:5b:
04:82:50:51:2b:20:70:e3:c5:67:4a:83:75:11:6c:90:56:c9:
ec:e8:6c:9b:78:85:cd:a8:41:70:04:22:1d:8b:52:45:08:e3:
51:ee:7a:b6:52:00:aa:12:74:3c:cd:4e:19:21:3b:ac:bc:e0:
db:f0:4d:83:f6:47:31:cb:1f:0e:fe:f0:46:dc:d7:35:fc:ee:
8c:c6:34:13:b6:f2:e3:7e:71:11:24:5d:a4:9a:4d:55:d9:c9:
c8:e9:0e:42:f5:03:73:57:1d:5c:82:f4:21:76:9d:9f:71:1a:
d9:6e:08:62:e6:ad:21:ce:62:71:27:f0:c1:a2:9a:39:ce:65:
bc:6e:be:05:1c:a7:38:11:f5:79:83:0c:3e:f2:b2:02:4a:8a:
ce:a9:05:5d:d4:d3:2f:c2:fa:22:8a:49:a1:f8:e4:ef:f5:fa:
cb:48:68:a8:57:3a:74:83:97:fb:e7:d0:43:6f:9f:fb:d3:4b:
ad:30:47:18:18:3a:b3:62:65:99:64:9f:c7:67:5a:8a:93:b6:
d6:c2:0a:55:4b:6c:12:e5:7b:af:0a:30:8e:26:07:82:6a:f3:
d8:ec:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:49 2026 by rpki-client