Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: p8vsJZxzV3pGiqtL+6As6In03IhWG22bgQLXr5ANInM=
Subject key identifier: D2:D3:48:B7:97:18:93:3A:C4:51:64:19:3E:6E:48:AF:4D:5E:B3:D8
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 019D2A04D45882B4670ECFD644CF6B793D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 12:00:52 +0000
Manifest this update: Thu 26 Mar 2026 12:00:52 +0000
Manifest next update: Fri 27 Mar 2026 12:00:52 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: A2oOwscZDLVvW2EOl9Jm5/cdVocuDFo+EodOIH2gW3I=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d4:58:82:b4:67:0e:cf:d6:44:cf:6b:79:3d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Mar 26 12:00:52 2026 GMT
Not After : Mar 27 12:00:52 2026 GMT
Subject: CN=d2d348b79718933ac45164193e6e48af4d5eb3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:e3:72:b1:df:04:c5:34:3e:35:47:da:ca:
1a:ae:11:f5:b7:7b:ff:eb:b9:cc:2a:c0:e7:59:62:
a4:22:a2:75:6e:73:8b:ab:ed:87:eb:6b:f3:0c:ca:
c5:6e:bf:77:94:ab:2e:20:4b:c9:5c:fb:3c:19:0f:
17:a0:a6:ac:a7:55:71:00:ad:d2:02:3c:22:fc:cf:
a1:c4:06:73:c4:a5:5c:e4:ad:19:2f:6a:24:54:2b:
76:05:a5:19:fc:63:8d:9a:08:92:f3:c5:81:b3:44:
54:1c:a0:af:81:8f:b1:ed:0b:ce:b5:0a:6e:a8:10:
39:70:b3:29:17:e8:a7:95:2c:59:16:f4:ab:99:89:
9e:cf:15:80:a1:52:7a:8d:d9:45:46:ec:5a:78:b5:
1d:c1:a6:d7:f6:8b:2a:6b:f5:d9:15:df:3f:5c:33:
50:2b:94:b5:c5:53:57:39:54:36:74:9f:76:58:b0:
46:d8:7f:d0:bc:ad:36:48:54:b0:58:fd:0e:84:3c:
7f:2b:e2:af:c3:4c:80:2b:cb:b1:14:82:df:b2:28:
28:6f:be:f5:26:88:eb:4d:1c:db:d0:71:8e:cd:d6:
47:d8:4c:cd:94:16:4d:1f:1e:37:1e:95:54:3e:22:
f6:b1:d2:ba:c0:14:2e:67:aa:45:4a:38:71:bb:9c:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:48:B7:97:18:93:3A:C4:51:64:19:3E:6E:48:AF:4D:5E:B3:D8
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:43:d9:9d:de:2c:de:22:2e:df:8a:9d:51:79:cc:eb:34:
30:f0:c6:ef:02:7e:29:c4:83:09:cf:66:07:53:27:63:99:6c:
a2:64:83:35:8d:61:1d:83:49:99:96:10:88:70:df:2e:68:be:
8c:91:8e:69:f4:19:14:4b:bf:b7:74:81:b1:1f:05:13:12:47:
f6:30:5c:a3:ae:fa:16:90:41:e2:e3:de:a9:b3:bb:51:f5:20:
8a:12:d2:40:12:ad:a8:89:00:d2:af:5e:7f:d8:ee:fd:3a:f6:
0e:35:00:fd:eb:2a:70:ef:5b:5e:6d:54:4f:40:11:7d:90:5e:
2e:d0:86:73:18:24:d6:88:88:7d:80:6c:07:88:13:87:27:90:
a5:fa:35:ea:3f:7a:34:e8:5f:2d:46:f1:25:70:e5:1c:b6:0a:
1c:f9:5f:19:b7:1e:3c:21:cb:1e:33:a9:a2:e7:cc:ff:82:36:
07:0d:4e:7c:67:db:5a:f9:ec:50:d0:44:7b:99:9f:ac:ba:c6:
62:f9:ae:84:eb:be:9b:b5:2e:b2:8a:a7:d5:fe:b6:e9:2e:b5:
a2:4d:b4:d8:96:e7:d9:87:0b:3b:d1:63:c0:5b:fb:f1:2e:03:
cc:40:e2:d2:02:9d:df:73:83:03:19:fa:98:79:a8:e8:0a:8c:
72:fe:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:46 2026 by rpki-client