Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.mft
File: CRIhOl2qlajIO8eB2DFda0fjktQ.mft (raw, json)
Hash identifier: gdaOj4FRoFWVl0gFaDC4Np+TVEdIJ88jhu6Nhvpm1lw=
Subject key identifier: 19:F7:A5:98:77:49:87:FA:FE:FD:01:96:EC:41:01:D2:6D:66:FA:A2
Authority key identifier: 09:12:21:3A:5D:AA:95:A8:C8:3B:C7:81:D8:31:5D:6B:47:E3:92:D4
Certificate issuer: /CN=0912213a5daa95a8c83bc781d8315d6b47e392d4
Certificate serial: 01A0CCDA1571FF6A988BF75C936F7241714F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.mft
Manifest number: 9B
Signing time: Wed 23 Sep 2026 06:00:39 +0000
Manifest this update: Wed 23 Sep 2026 06:00:39 +0000
Manifest next update: Thu 24 Sep 2026 06:00:39 +0000
Files and hashes: 1: CRIhOl2qlajIO8eB2DFda0fjktQ.crl (hash: c3ApV+nV7KvI6DWuMDkCuhSh4efwUdJAm/zRuG4gDyY=)
2: Zu-L_GJVw-o5KZrO-kgim9vemuY.roa (hash: kYg9o7w+e9dEEtU7zm/z730qJtEYPdVvBGkKjhCtxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:15:71:ff:6a:98:8b:f7:5c:93:6f:72:41:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0912213a5daa95a8c83bc781d8315d6b47e392d4
Validity
Not Before: Sep 23 06:00:39 2026 GMT
Not After : Sep 24 06:00:39 2026 GMT
Subject: CN=19f7a598774987fafefd0196ec4101d26d66faa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:94:ca:18:6c:3c:f6:10:71:6c:44:77:a6:
86:7e:52:64:c2:20:e7:92:03:32:c0:a5:56:42:aa:
37:4e:82:c6:bf:71:7e:c9:03:55:1f:9c:28:3f:eb:
c9:7a:56:06:dd:cc:7d:b4:98:05:23:87:c4:fe:7c:
25:47:ae:f9:30:6b:14:e8:47:7b:73:7f:4b:3d:28:
95:36:79:ee:b5:72:3e:9c:ca:ef:d2:28:16:8e:ae:
af:76:bd:fe:d4:24:57:9a:73:c5:75:c7:5d:aa:9f:
cb:55:c1:38:2f:c3:e1:c5:9a:d0:50:31:ea:4d:6a:
90:ee:db:aa:08:be:37:45:33:28:f1:87:2d:b8:61:
0f:99:e2:88:ec:90:6d:87:f1:25:3f:5c:74:7e:08:
db:d6:bb:0d:f8:5a:6c:bf:93:7f:34:26:4e:ae:d2:
39:26:ef:e9:7f:1d:3f:3e:f3:a8:ba:0d:18:b6:50:
59:f7:83:54:f4:6d:0a:5c:18:20:a7:88:e6:5d:70:
6d:f6:12:ef:ab:54:dc:e2:37:79:ef:6c:50:e8:50:
48:7b:6a:ca:77:0e:4d:24:bb:14:4a:d4:4b:c4:96:
bf:1b:43:ba:f2:18:1f:62:a9:8a:fd:58:af:18:e4:
a4:74:93:b7:d3:c1:16:ba:2e:7c:86:f5:7d:73:00:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:A5:98:77:49:87:FA:FE:FD:01:96:EC:41:01:D2:6D:66:FA:A2
X509v3 Authority Key Identifier:
keyid:09:12:21:3A:5D:AA:95:A8:C8:3B:C7:81:D8:31:5D:6B:47:E3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:1a:d7:85:18:ce:b0:42:d5:61:aa:5a:b0:11:d8:51:35:
3b:0c:8e:bc:07:c4:a3:70:07:8b:6f:70:a2:fc:7c:27:36:dd:
8d:b3:d6:fd:57:cc:81:79:ca:29:59:5e:9d:0a:fd:1d:89:2b:
6b:c1:5d:7e:79:3c:2c:bc:60:bf:a2:8b:57:22:b1:4e:a3:1b:
31:f3:ee:5a:13:15:9a:a3:13:7d:9c:c3:78:41:49:04:42:b4:
04:de:03:0e:68:f0:7a:4f:9f:7c:f3:36:0c:f4:34:fe:a4:91:
5f:97:fb:bf:e1:ae:74:1c:20:9a:ab:b4:31:4e:b6:59:eb:ae:
86:45:74:d6:b9:58:28:b0:a4:6e:d2:93:35:06:d8:b7:c5:cd:
6d:77:f4:0d:b6:31:cb:1f:87:33:6d:f2:d2:89:7b:a9:57:f2:
9c:f9:a4:1a:01:60:fb:f7:ec:ae:e0:f7:97:d9:68:cf:dc:ce:
82:59:07:3f:8e:4b:57:29:4c:68:b8:e9:ab:5e:02:d6:d0:7f:
ac:cc:9d:07:e0:97:b0:b5:9d:68:0e:0a:1f:a6:62:bb:eb:44:
ab:7b:99:3f:cd:f5:46:8f:2c:0c:57:ff:4d:a4:3f:3b:b2:bc:
11:a4:9b:1d:4e:4d:f6:c5:dc:d3:c9:9e:5f:0c:38:cb:d9:0a:
d7:cd:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:34:49 2026 by rpki-client