Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: nYQmP/AT+SnFD5h+5rP17zbT3QDICv7NXJJSIlPwVIo=
Subject key identifier: AE:63:9E:C9:8B:FB:E3:16:42:EB:F4:15:41:1E:75:E5:36:28:2B:9E
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019D27E00C00CF01CCDCBC33C4C4DB392BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 057C
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: L4gih39MqNud0mxTDraUCOv/A5BhhR7t9MuukJU8u8o=)
2: tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa (hash: 4N/4Cs97VSolZG2uH4kNH6VCwjqzoA3qCO8vzH4tvd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0c:00:cf:01:cc:dc:bc:33:c4:c4:db:39:2b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=ae639ec98bfbe31642ebf415411e75e536282b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:39:37:85:22:ef:af:5b:de:61:1d:ee:05:
0f:e8:5e:e8:5c:ad:8a:cf:e3:c4:cd:ad:2c:f2:75:
2f:57:e4:53:27:f9:98:42:dd:db:15:ec:5a:46:ae:
3d:87:86:34:ef:2b:9f:c7:cd:eb:85:98:fc:03:88:
86:f4:be:a0:f7:c5:5b:0e:47:bb:21:9c:dd:09:e7:
a5:b1:0e:f6:e6:f2:cd:26:ce:82:10:18:db:52:de:
48:d4:3d:df:13:e3:31:91:c3:41:0c:6d:05:2c:ca:
3c:36:2c:58:69:52:fd:13:cb:f6:b6:3c:6d:a8:bd:
36:b7:0d:7f:67:84:0f:45:83:f1:8e:14:27:ac:a5:
da:c7:14:34:e6:16:52:41:9b:ba:85:db:21:c6:e6:
69:50:f0:f7:e3:32:24:f8:2b:fb:3c:07:3d:63:13:
ac:d2:ff:78:b8:a3:89:e2:ba:8b:98:4f:02:13:20:
be:6d:46:41:29:34:03:98:cc:bb:c3:52:d6:b8:31:
a9:2c:fe:97:10:b4:be:04:f8:27:22:07:95:17:c2:
58:55:1a:a9:4e:6b:d1:29:f7:83:88:d2:c7:8f:dc:
1b:67:c5:48:30:b9:6a:43:b8:12:4a:3d:52:27:12:
23:e0:43:e6:17:27:ac:10:a2:4d:57:e6:df:51:84:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:9E:C9:8B:FB:E3:16:42:EB:F4:15:41:1E:75:E5:36:28:2B:9E
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:b6:5d:68:88:4a:09:8d:96:7c:a4:cb:97:ae:53:79:06:
5b:c8:56:e3:e7:ef:b3:a1:41:f6:b9:a9:22:66:1c:76:04:8b:
1b:fc:4f:f3:a5:42:0f:90:69:57:24:4b:64:69:a1:42:15:15:
f9:1d:ca:e7:d2:3a:b7:ee:8e:75:0e:18:c9:55:98:00:0b:36:
47:49:60:5f:b2:e3:7b:cf:fa:43:70:48:6c:78:80:33:86:f2:
2f:c1:58:db:35:f5:fe:e5:3a:96:ca:cb:d0:c1:55:7c:79:f4:
35:e8:5c:24:fe:f6:74:b6:ba:7c:bd:d1:6b:c0:b9:e0:e9:09:
37:e9:91:25:84:65:32:9c:ba:ab:62:74:f2:c9:14:2b:73:bd:
17:9a:4c:6c:4f:43:40:b9:8a:52:cd:c0:9a:a9:19:98:60:df:
96:ca:bd:f2:31:13:93:8b:46:b8:e8:9c:1a:62:71:8f:9c:73:
12:2f:c8:77:aa:b4:be:15:8b:99:95:c0:c4:e5:74:ed:b6:00:
c1:0f:d1:2f:14:8d:2b:fd:ef:0a:20:1e:f7:34:72:4a:93:47:
bd:35:39:98:b6:ee:60:c7:d8:13:cb:1c:e2:09:4f:64:2f:64:
a1:89:1d:85:df:61:35:53:42:9c:eb:0e:58:44:08:bc:5a:e1:
5d:a9:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:33 2026 by rpki-client