Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: Pnnw6TMFmOkQ9yNtxe5M3CFO8ev8mQAQeAtBTDKXJek=
Subject key identifier: 9A:13:40:6C:21:FA:E6:34:51:FF:34:E8:39:4A:69:EF:6E:B4:13:B0
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 01A0D15C2991F43627FF3AA417E1AFA4B03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:01:13 +0000
Manifest this update: Thu 24 Sep 2026 03:01:13 +0000
Manifest next update: Fri 25 Sep 2026 03:01:13 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: CokqseVKBGXKPpBdybArLemHW6MpyBUjDZZ4kJPyttM=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:29:91:f4:36:27:ff:3a:a4:17:e1:af:a4:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Sep 24 03:01:13 2026 GMT
Not After : Sep 25 03:01:13 2026 GMT
Subject: CN=9a13406c21fae63451ff34e8394a69ef6eb413b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:96:ad:e8:d6:6c:27:7a:aa:9f:60:ec:1a:
cb:71:b9:e2:6a:1d:ca:40:19:d2:93:09:16:94:48:
36:88:7a:b1:be:f4:18:0b:1d:36:1a:bd:72:87:80:
9c:f6:d6:20:3c:11:50:99:72:c1:95:13:56:25:52:
fb:ea:21:27:dd:11:01:df:86:53:37:39:dc:69:91:
28:11:a1:9a:bf:b6:5c:bd:19:fc:e0:bf:59:b2:f0:
12:39:96:c7:62:45:ec:e6:f3:d2:d4:94:f9:62:b0:
a0:e0:76:cc:46:20:41:94:19:87:3c:1c:da:3d:79:
32:0f:53:0c:b3:1d:11:e7:25:24:6c:a9:6b:93:1e:
a7:98:c6:8c:cd:81:ba:c9:df:0b:66:d7:51:6f:c6:
8d:46:6a:83:89:7a:46:e8:9c:3b:96:c5:e2:40:5b:
4f:46:78:d1:ca:3a:b9:4b:a5:a2:3c:35:9f:55:b9:
77:22:ed:4f:44:e1:c5:1c:50:e6:9c:84:a1:32:43:
8c:95:0c:60:e5:45:8c:33:f8:0e:89:23:38:0e:98:
17:3c:a6:3e:38:ad:18:ff:52:6a:68:01:7a:96:67:
cc:5a:b8:b7:e1:67:85:c5:8b:11:8f:42:95:fd:80:
3e:1b:13:41:81:f1:19:b9:05:06:f4:ad:57:ee:d3:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:40:6C:21:FA:E6:34:51:FF:34:E8:39:4A:69:EF:6E:B4:13:B0
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:11:9e:1c:05:3d:2a:e2:77:ff:37:8d:47:d7:36:5d:75:3a:
2b:4d:06:4b:0c:fe:f1:d6:ca:b2:cf:84:eb:f1:f9:69:35:af:
9e:16:22:d5:0c:62:9f:77:15:f6:0e:18:ad:8e:7d:a7:ff:1c:
ef:cf:6a:61:0b:b3:b9:67:8a:75:6f:80:ee:4c:69:c3:cc:15:
12:7a:81:12:8a:cb:80:a3:81:02:bd:9f:69:4f:69:18:52:77:
0a:e4:9c:71:b0:4a:41:cc:b2:cb:cf:a1:e9:44:0c:57:ea:51:
b4:d9:54:e8:3e:b6:b5:b8:be:f2:58:7c:c7:b0:68:a0:23:3a:
26:5b:2d:45:91:b2:1d:a0:08:b5:a9:29:cb:86:41:7b:6d:50:
44:42:d3:42:22:06:bc:4e:67:4c:6b:21:01:60:d8:5e:12:01:
f5:93:ba:a6:56:6d:70:8e:29:82:ce:0a:27:57:0e:1a:f2:b6:
0c:be:5e:90:c0:cb:b0:42:40:63:24:99:05:cb:59:f1:7b:a4:
b3:a8:21:57:a2:2d:18:af:d9:ad:ea:02:97:fd:b6:b5:ac:f2:
90:18:2c:aa:7a:50:6a:e6:e2:f5:54:e4:db:ec:d2:c5:05:5c:
f8:85:7f:37:65:fd:26:df:d7:eb:fc:27:21:b1:25:2f:35:59:
1c:c9:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:06:27 2026 by rpki-client