Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: NhFlycGY1wVGvXXGSEFp7wzr1oZSf6TnkrZV13i5AG0=
Subject key identifier: AD:6A:26:E5:82:49:B3:14:85:C6:38:1C:5D:D1:F0:6C:52:DE:C1:F5
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019E1C0FABDA79AAECB819F149D648BB472A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:00:49 +0000
Manifest this update: Tue 12 May 2026 12:00:49 +0000
Manifest next update: Wed 13 May 2026 12:00:49 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: a5+Eaf/xTTSUF9YFib0jeHfCX1lmaNEXivMCMS143ag=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ab:da:79:aa:ec:b8:19:f1:49:d6:48:bb:47:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: May 12 12:00:49 2026 GMT
Not After : May 13 12:00:49 2026 GMT
Subject: CN=ad6a26e58249b31485c6381c5dd1f06c52dec1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:94:8a:25:6c:08:51:34:58:f0:8a:8c:0d:
0a:d4:85:83:05:d3:bf:3c:5f:bc:40:fe:4d:1c:5b:
1b:f5:b0:80:d1:18:df:e0:ff:c8:b0:95:aa:e2:73:
dd:40:5c:13:a0:14:13:71:62:89:9a:92:04:3e:45:
12:00:7b:5d:a6:a8:b2:80:0e:89:e4:bd:cc:77:11:
02:a4:c4:bd:8d:5a:ff:db:b8:0f:25:73:d3:47:0a:
f5:0f:14:c4:f7:09:be:75:3e:88:6a:77:94:70:ec:
5c:d0:31:f9:c3:a1:82:b8:9a:81:1d:9a:4c:7d:46:
f4:4c:97:31:f7:d2:4f:b2:68:ba:a1:fa:7e:23:f0:
b6:4d:ee:1b:d1:3f:3b:9a:b5:d4:94:72:4b:e5:5b:
12:af:21:35:0a:c7:95:b9:ba:39:d5:69:c3:da:3f:
35:65:4e:1b:72:3e:c7:3e:cf:03:c1:ef:01:b3:ad:
93:0d:bd:aa:c4:2d:4e:4f:49:65:8d:ef:98:5d:14:
3d:76:0c:64:5a:ce:af:1d:67:23:e7:0c:03:88:6b:
a5:19:a1:54:c6:02:ae:e8:79:ca:6a:9b:0d:c8:8b:
f5:4b:ba:97:b4:c5:31:d8:3e:e0:f6:2a:78:24:69:
9c:e0:61:be:e2:dc:6e:3a:94:5c:df:cf:71:e0:c1:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:26:E5:82:49:B3:14:85:C6:38:1C:5D:D1:F0:6C:52:DE:C1:F5
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:cd:ec:04:5f:8a:54:88:09:9c:8a:c1:a8:c9:16:54:1b:
51:7c:2c:85:9a:40:f7:42:31:15:db:31:fe:5d:e0:87:3a:04:
b7:80:06:fb:4a:37:20:38:6f:dd:25:c7:21:d0:e5:9f:51:ff:
3b:e5:84:0c:ba:4f:23:65:66:92:3f:a1:3d:80:17:26:05:e5:
4a:b5:47:a9:fa:71:da:7c:ce:2e:9c:ca:c2:3d:2e:73:0d:01:
f7:b2:36:0f:d7:c2:be:4b:cd:8e:f7:f9:ed:94:af:45:bd:77:
0b:cc:cb:9c:12:30:6a:0b:cb:6b:54:7d:4f:e8:f8:f2:89:40:
3d:d6:4f:39:28:a2:0b:11:6a:fd:12:06:a4:be:16:e1:d0:87:
cd:6f:63:2f:4a:a0:98:59:be:40:da:75:b5:31:05:5d:a4:68:
d3:6e:e0:1f:81:5b:a2:99:ed:48:eb:d6:27:55:df:07:d1:10:
05:49:79:fe:ef:04:5f:29:50:8c:ad:e2:63:46:55:be:99:00:
1c:0e:87:21:81:ef:d3:bd:9f:a5:87:94:79:71:49:02:ac:ab:
e3:e4:31:ec:27:ae:df:9d:2f:9f:c5:70:cf:65:c8:66:48:15:
72:a7:84:09:37:5e:cc:d4:fb:ce:ab:a8:f7:0a:c6:72:71:79:
91:3d:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:21 2026 by rpki-client