Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: T6LxCDLv+SNsN4Wk/Zfka/wnwZCICdJpwnRn/NW/hGE=
Subject key identifier: D3:94:C5:2D:01:DC:58:03:C6:14:99:57:9A:9C:7F:75:74:57:F0:20
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 019D2627FF80EBF4224A28F353FBD25DFC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 0426
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: HEwGHV/B/F1vIuY9WnzOR4vXWhBteMI49vKWpx50FGQ=)
2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ff:80:eb:f4:22:4a:28:f3:53:fb:d2:5d:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=d394c52d01dc5803c61499579a9c7f757457f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:ea:39:a7:73:7b:4f:b8:d7:bc:6b:f4:7f:
20:59:4a:27:bf:ea:2a:b5:b2:1e:9d:3a:63:1b:95:
f3:37:bb:b7:58:3d:41:3e:2d:9e:35:8e:09:c7:ad:
7c:48:ee:d4:37:c3:c6:75:8c:23:37:3b:18:05:30:
3c:f1:a2:06:e9:6c:a7:23:98:49:aa:63:49:9c:7b:
d7:3c:a8:ea:9c:e3:7a:3c:90:62:ba:5f:4b:0b:0d:
eb:72:da:95:43:8b:c4:24:47:4f:a3:1d:65:18:59:
b8:56:fc:e8:90:32:67:d7:9b:ed:73:64:b9:6c:17:
d3:f2:3a:b0:5a:c9:68:a6:b3:b7:cc:94:f3:1e:38:
97:67:ef:76:e4:c0:1a:2d:43:e0:af:2c:da:ff:07:
8b:7b:5c:59:f3:73:c7:66:2c:b4:38:40:d7:b4:6d:
0f:50:87:57:53:5c:a3:6d:51:10:7c:d3:48:75:26:
5d:14:20:7e:e1:6c:b3:a3:86:81:c6:9b:47:39:5e:
8c:a4:b2:cb:fa:31:8f:6a:20:77:62:a5:77:73:62:
d6:13:96:1d:fb:92:63:a8:bb:53:5d:6f:f1:9d:d9:
e8:e4:9f:e6:c7:f2:0b:a3:e2:43:d0:7c:73:b0:f4:
5d:fd:b4:ee:20:d7:94:52:38:64:81:8a:d2:e9:00:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:C5:2D:01:DC:58:03:C6:14:99:57:9A:9C:7F:75:74:57:F0:20
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:72:a9:88:dc:1e:15:db:e4:1f:2c:92:bb:55:7f:9d:3e:69:
80:35:42:58:75:ef:2e:84:7c:aa:58:84:3e:d2:3d:a7:15:b8:
10:89:b7:a5:39:96:fb:08:9a:87:9e:ea:e4:05:e8:c9:9b:0f:
55:00:b7:63:a7:8e:f1:66:dc:4c:93:6f:cc:84:26:c8:91:3a:
fa:d3:d5:e9:1e:bc:7f:34:cb:b1:c0:57:0e:18:f5:b0:0a:3e:
8a:65:6b:54:8d:67:0a:93:30:e3:62:14:ae:be:1d:41:a8:b0:
28:44:15:51:f9:36:cf:12:61:6b:e2:5e:e7:64:47:61:87:f4:
8b:af:ae:8b:77:ec:47:f7:88:15:ff:f6:91:88:e5:87:b8:9c:
1f:6f:5b:40:46:27:06:31:28:9d:77:39:0b:5d:09:f6:62:f9:
c8:34:ac:fa:af:e0:c2:08:13:ce:eb:4c:71:61:81:0f:06:76:
cc:ed:ae:30:9c:70:af:cd:7b:42:a5:f9:69:a7:bd:a7:a5:33:
c3:34:b6:68:e9:de:ee:74:08:35:65:2e:64:25:6e:09:41:f2:
ab:7c:33:66:d4:5e:e7:44:da:b7:34:28:76:e3:fe:fa:73:31:
01:f8:b1:6f:70:79:90:75:1f:9a:f8:c6:ab:9b:64:28:cc:c5:
cd:3e:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:07 2026 by rpki-client