Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: SU7dzl1pI0fkA+cPFKysZbvSf/XuuXoncsAHnT/xXSo=
Subject key identifier: 17:8E:AB:CD:A2:E5:06:82:CE:66:37:E5:D0:88:6A:32:9F:75:FB:E4
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019D26CCF604943F00C62BD34811DF69B620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: rXeA3kKnHr097mXkU0wU7nQczXW6cRmYqiiu6dfpbsk=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f6:04:94:3f:00:c6:2b:d3:48:11:df:69:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=178eabcda2e50682ce6637e5d0886a329f75fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:be:15:4b:d4:ba:3e:bd:1b:47:9a:ca:79:
5b:4c:96:33:eb:70:e5:56:02:fd:99:95:85:d4:3c:
8f:85:5d:7e:c0:04:30:72:90:85:66:91:64:5e:b8:
58:68:75:e4:a1:98:d8:46:37:ce:04:40:ed:4c:c0:
df:4a:2b:a1:08:c7:c8:7e:d4:c6:55:77:ea:9a:63:
1d:a3:a4:9d:0a:a9:db:e4:2b:54:64:0e:a2:4a:2e:
78:22:a0:c7:b5:83:4d:99:24:3d:4b:e8:bd:bd:61:
05:e4:15:aa:06:89:bb:ec:f2:b3:2a:1d:3e:fd:34:
e3:69:39:dd:20:44:3e:39:ef:98:41:4a:90:a9:b8:
7a:30:31:d5:c2:de:6e:b3:57:fd:47:85:87:a2:b1:
14:29:6a:f7:f2:2f:e9:f9:94:b9:43:f1:f2:ca:99:
07:e3:b9:12:ef:52:6b:9b:69:5f:4f:f8:79:93:05:
56:ac:05:e6:06:43:c9:cc:a8:9e:22:06:6c:ed:75:
0a:48:a8:02:b6:95:e5:bf:1b:7c:28:13:60:5f:6d:
6e:01:62:9a:a0:c6:55:04:b4:eb:f8:7a:d0:c0:41:
4c:af:62:91:5f:bf:4f:13:07:32:48:fa:fd:0e:dc:
c7:87:58:04:20:f1:3c:4e:e5:1f:e8:24:01:ec:2f:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:AB:CD:A2:E5:06:82:CE:66:37:E5:D0:88:6A:32:9F:75:FB:E4
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:cb:56:b4:c9:03:5b:93:09:45:96:22:e1:4e:de:d7:e9:
fe:21:57:1d:e5:2d:24:a8:c1:e7:b5:ae:48:66:cd:16:01:83:
28:46:a9:49:6d:03:17:1e:9b:23:3b:63:e7:fc:fa:b2:2a:6a:
b0:0e:8f:7d:ad:1f:6f:60:38:d2:c5:77:08:10:92:bb:de:37:
74:c1:77:af:e4:6a:dc:b7:87:0d:dc:7c:aa:19:79:dc:98:70:
e4:b9:42:d9:bb:0a:37:36:42:d1:90:c3:7b:46:72:8c:fd:16:
35:3d:dd:cc:03:80:a7:f8:4e:22:01:0d:e5:45:4e:59:6b:17:
1c:d9:0d:36:78:6d:4f:dc:35:cd:c5:57:7c:9a:03:7f:d4:f7:
45:01:81:24:49:07:cf:07:23:ed:f7:d9:af:17:75:e3:56:52:
66:6c:84:1c:b3:e6:17:0d:bf:eb:42:88:83:a1:49:95:7d:17:
17:9a:d6:e8:ef:b4:4c:82:66:2f:ea:03:f4:e8:65:49:2b:96:
3d:3b:e6:c1:b0:ff:38:7a:31:17:3b:8b:65:7e:4a:c6:f3:1e:
cc:56:9a:f8:c8:92:e1:3d:96:76:3a:00:28:9b:18:a4:bb:78:
20:a9:53:ed:0d:22:34:c3:0a:7b:9d:7c:60:90:d4:89:c8:f1:
df:84:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:36 2026 by rpki-client