Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File: Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier: AKXjWJswlhVNgPNJT0NiUYxS+D3Wxwoz8LwioX3yB/k=
Subject key identifier: B7:6A:7D:95:91:53:F3:48:88:31:99:EF:88:EA:6A:1E:BB:C5:5B:0D
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer: /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial: 01A1DD946B2A27658DC96761A62E385B807B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number: 029C
Signing time: Sun 15 Nov 2026 05:00:53 +0000
Manifest this update: Sun 15 Nov 2026 05:00:53 +0000
Manifest next update: Mon 16 Nov 2026 05:00:53 +0000
Files and hashes: 1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: MdpNaiK251Bu6tcR6URHcCr9ng23lbTeBlaAfDyFgVU=)
2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:6b:2a:27:65:8d:c9:67:61:a6:2e:38:5b:80:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Validity
Not Before: Nov 15 05:00:53 2026 GMT
Not After : Nov 16 05:00:53 2026 GMT
Subject: CN=b76a7d959153f348883199ef88ea6a1ebbc55b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:8a:71:8a:62:d7:3b:dd:e7:76:6b:67:47:
b2:dd:ed:b6:29:29:4b:30:34:86:c8:a2:8b:58:a3:
ef:ee:d1:8a:f0:eb:61:ef:bf:8d:b0:97:7d:f3:43:
fd:92:50:be:46:1a:c2:a7:89:67:14:07:a5:5b:70:
34:b7:5e:06:f7:ea:d4:67:48:6d:dc:70:1b:43:67:
ea:64:cb:5e:fc:85:f9:9c:40:d1:7f:75:ad:38:44:
93:f1:4f:56:69:01:ce:dc:ae:df:ce:a4:28:e8:91:
b6:a0:b3:c6:e0:fa:e5:53:64:93:c2:70:62:92:f6:
4a:a8:e7:e0:f3:f2:7f:06:fa:be:ba:34:66:d0:45:
53:97:92:bb:e3:8b:00:a9:20:54:6b:f8:1c:2e:80:
8f:a7:d8:9e:03:72:c0:8e:84:bd:fa:09:96:3a:e8:
6a:d2:3c:74:9d:d2:c2:d6:6a:9d:96:63:ea:f1:34:
f7:71:69:b6:df:40:8a:9a:8a:bc:84:24:d1:7d:cc:
42:53:32:53:43:4c:59:56:9d:05:ed:84:32:04:b5:
8d:dd:01:8c:19:4f:72:6f:83:67:97:ef:bd:b5:e1:
02:df:a7:88:e9:73:ea:4f:0f:b8:94:ff:31:ab:52:
1a:c3:b3:63:fe:bd:7f:59:4b:10:c0:86:49:b3:f9:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:7D:95:91:53:F3:48:88:31:99:EF:88:EA:6A:1E:BB:C5:5B:0D
X509v3 Authority Key Identifier:
keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:04:53:e2:6c:2f:85:b2:09:76:b9:1f:de:49:cd:45:8f:
75:be:de:34:24:0a:85:dc:02:eb:b7:24:c9:21:d6:f9:d5:6b:
7b:38:0b:46:d0:f4:2a:32:f2:fb:15:b8:7e:df:75:51:f1:e2:
c3:8f:6a:2b:44:6c:f7:f5:21:f7:ea:f6:f5:1a:56:14:f3:e1:
c0:bc:53:fd:16:34:4d:0d:7c:4b:0a:c3:15:01:45:42:60:4a:
c3:8a:1c:0d:16:6d:5b:94:59:3f:fd:56:84:88:0c:77:75:67:
75:7b:1f:c7:c1:7f:b1:6e:ed:a4:f6:47:38:8b:75:f7:b6:4d:
3c:e6:7f:f8:58:90:63:73:32:16:8c:0f:a8:e6:e0:5e:dc:d4:
de:69:83:3a:27:de:8a:45:ec:2c:ed:67:06:4d:da:04:75:ee:
14:9b:13:43:75:d4:37:a9:c9:0c:aa:9f:29:69:12:45:c1:50:
f4:29:7d:d7:30:18:58:1d:df:98:3a:54:32:22:1a:57:28:ac:
2d:8b:23:a2:ab:7b:8f:a5:d4:65:f0:5c:d1:b4:46:fd:b1:aa:
90:a4:f6:26:ad:6c:67:d1:93:85:b2:5a:a3:29:3f:19:98:44:
2e:a8:65:b2:61:de:b9:e9:e5:1d:2e:23:86:bb:dd:f6:85:55:
16:5e:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:49 2026 by rpki-client