Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File: Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier: A4P2oRc6qWiT9I1yDNMOLmIsMwo3yrhaRv8Ow75DU7E=
Subject key identifier: A2:DE:DB:7E:C7:35:43:EA:32:EC:CB:98:B2:54:5B:A5:CB:12:9C:38
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer: /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial: 019D2A72537B5B950AF3032CECA03B1D6AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number: 2D
Signing time: Thu 26 Mar 2026 14:00:28 +0000
Manifest this update: Thu 26 Mar 2026 14:00:28 +0000
Manifest next update: Fri 27 Mar 2026 14:00:28 +0000
Files and hashes: 1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: vMkVZFzAZ4xkDOHxlhaWLV1Yxz7H2SwwU/HzKupYvys=)
2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:53:7b:5b:95:0a:f3:03:2c:ec:a0:3b:1d:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Validity
Not Before: Mar 26 14:00:28 2026 GMT
Not After : Mar 27 14:00:28 2026 GMT
Subject: CN=a2dedb7ec73543ea32eccb98b2545ba5cb129c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:ae:e9:db:5f:fe:33:37:6b:5d:29:ac:91:
51:dc:8d:3a:25:72:f1:d4:1c:2e:63:88:90:63:97:
9b:39:69:62:80:fb:05:ba:c7:5d:95:64:dc:c1:eb:
a9:8f:9f:bc:a3:ae:09:ef:85:21:58:46:85:a9:fd:
85:3b:37:66:f8:bb:85:94:c4:ad:f1:99:0c:4f:95:
88:66:bf:8a:70:c8:45:66:53:b4:ee:fc:79:f5:a6:
cd:4d:df:f3:1d:97:e1:07:d0:29:22:f3:f9:02:5f:
dc:d9:c8:33:fb:5a:a7:a8:29:f2:ac:a5:48:af:11:
a1:bd:01:dd:c1:df:45:6b:e5:8e:c8:22:8c:76:39:
1a:8d:fc:b6:4a:ad:48:8e:1c:44:85:5f:20:98:5e:
dc:22:44:d1:0f:09:e9:3c:65:28:f0:86:ef:bc:70:
02:ff:43:33:2c:11:24:9e:52:a9:b1:93:58:56:85:
51:fe:35:95:a0:d6:b5:68:13:2c:be:69:f1:7e:c5:
aa:77:ba:f1:5c:65:e3:10:56:7e:c9:c0:49:83:4b:
f0:b0:a2:45:4f:32:21:cd:ad:64:a6:df:3b:ce:d1:
82:56:2e:47:c7:19:af:44:dd:8c:57:20:23:26:84:
c0:27:46:bc:f3:44:30:9f:cf:0d:9b:64:67:32:bf:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:DB:7E:C7:35:43:EA:32:EC:CB:98:B2:54:5B:A5:CB:12:9C:38
X509v3 Authority Key Identifier:
keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:ed:97:39:f9:a8:7b:de:43:d7:16:db:dd:3f:c1:1a:c6:
34:23:a6:be:3e:9b:d3:ac:96:ed:c3:47:d3:d4:cb:6a:c1:ed:
6c:0f:a1:f6:2c:f8:dc:d7:81:98:ec:d2:5b:6c:ac:b8:5b:2b:
91:db:b9:60:9e:e7:a5:93:96:a3:ef:2a:7c:b3:f8:f1:32:50:
e7:ae:47:fb:78:1d:44:99:21:e4:32:c5:a5:e6:e3:9d:2a:76:
69:fc:1a:38:89:5c:9b:61:b5:13:af:e8:dd:bf:9f:dc:07:d9:
a6:19:d1:77:e9:e8:2f:9a:e8:7d:f2:05:ae:7a:85:1b:5c:f8:
a9:84:49:4d:57:bb:71:0b:fc:de:f1:ca:d8:f4:8f:ec:2b:08:
87:e0:b6:7f:b9:7a:f8:8d:25:72:b1:3f:0b:1a:5a:ae:78:85:
2e:0a:fb:9a:e8:e1:c4:c6:e2:af:6a:94:81:d9:da:ad:a9:93:
d4:fa:a5:91:81:3a:a0:30:9c:fe:67:ec:c1:5f:a5:71:03:73:
84:2b:36:18:3c:b1:06:95:e7:6b:22:4c:ca:85:ff:d2:50:7d:
77:15:70:0d:27:d4:ef:39:f3:93:ee:43:c0:61:bf:e4:b7:e4:
dc:f3:a8:6d:62:11:b3:64:bf:45:65:24:5f:53:85:99:ea:6d:
8c:8d:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:04 2026 by rpki-client