Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: 4aXUjibkm33raUB6KiGVwkNGsruXI/KdTLj33kNO2Ms=
Subject key identifier: 13:C9:8A:09:64:5A:D4:38:0B:24:9C:B5:47:E0:FF:E4:42:43:6F:D8
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 019D27722C0A9241925E540A5393F880DE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 13DA
Signing time: Thu 26 Mar 2026 00:01:26 +0000
Manifest this update: Thu 26 Mar 2026 00:01:26 +0000
Manifest next update: Fri 27 Mar 2026 00:01:26 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: Il8G3avxQ4nVvXdvRON89gt3NHcyH7cT6f/v3J3BZtw=)
2: pUazdjRdFJkBrTHoULISxbR8Lyk.roa (hash: spesHfXOuqKlEX5RunxdrOt5uA0eHq4U5s/6CkWrMg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2c:0a:92:41:92:5e:54:0a:53:93:f8:80:de:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Mar 26 00:01:26 2026 GMT
Not After : Mar 27 00:01:26 2026 GMT
Subject: CN=13c98a09645ad4380b249cb547e0ffe442436fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:fc:8c:c0:70:7b:cd:72:29:57:17:af:c7:
ae:fb:16:04:1d:bd:ff:f2:88:02:3c:8e:8e:2a:23:
ab:5d:8d:dd:2d:21:d1:df:df:03:59:9d:5f:75:80:
b9:a2:d4:2c:15:20:da:16:2f:d8:0d:70:06:5e:f0:
06:d1:b8:07:84:39:be:55:cd:0e:ed:ed:25:05:84:
66:bc:f5:76:14:e3:58:89:14:66:de:3a:5c:c5:13:
1f:68:89:b4:b6:e1:b7:e6:92:72:ea:d1:7d:1a:0c:
86:40:83:7a:e0:a0:c8:53:49:f4:96:ff:0d:b3:ab:
ad:4a:52:81:79:5b:c9:37:3f:e9:96:8e:2b:09:dc:
16:ee:fa:bc:79:2c:e6:bb:9f:f7:27:1d:1e:6b:46:
94:6f:29:c1:e0:55:6b:89:50:0a:75:77:69:2b:ec:
c8:72:39:3a:ca:76:56:5b:b8:09:d4:3e:4f:f8:ea:
0e:d7:b2:56:80:7a:a1:06:a1:90:13:09:95:cc:7d:
07:17:3b:7a:58:0b:b5:f5:ee:f3:f7:c1:3b:7d:2c:
69:14:ed:83:9b:7f:b8:5e:90:6d:56:41:21:a6:8e:
b4:c2:37:11:be:54:85:09:8d:6a:3b:9c:be:65:07:
da:83:32:bd:21:70:1d:04:d6:30:d9:17:22:9e:e3:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:8A:09:64:5A:D4:38:0B:24:9C:B5:47:E0:FF:E4:42:43:6F:D8
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:d7:60:77:96:0b:bc:01:2d:0d:04:7a:76:ef:2a:c8:6e:
2b:8e:80:f1:1d:25:4b:97:bf:cd:78:e9:19:1e:ec:e7:c7:88:
76:f8:3d:8b:df:77:16:77:8b:6a:10:b8:6e:b7:11:11:c3:c7:
d5:d8:7c:ed:5f:c2:5f:e2:1c:9c:c8:7c:0d:d6:bb:1d:1e:e0:
c5:45:a1:62:74:c4:84:fb:1d:b0:a9:b6:91:6b:c9:8d:f8:1e:
19:95:25:23:4e:21:57:13:c2:fe:1d:d1:06:98:ac:31:c7:e9:
0f:20:5f:c5:1e:88:06:64:24:14:a8:6f:f9:da:c5:55:fb:a9:
3f:68:38:c9:84:3f:0f:15:27:68:27:17:93:8a:22:49:a5:cd:
4e:dd:78:91:d0:38:22:e8:c8:0c:08:72:0c:c1:65:4d:d4:0c:
a9:75:d1:9a:d4:a0:a6:b1:1a:21:63:0e:e7:be:da:7c:94:08:
24:77:05:3d:30:aa:dd:c1:00:14:be:7b:60:40:4c:31:89:4c:
95:00:56:d3:34:48:32:5b:e5:7a:a1:da:d0:87:fc:8f:ba:65:
dc:ac:d1:03:21:92:73:44:dd:0b:4f:ea:27:5d:b9:46:68:c3:
0b:df:54:1c:2c:ed:3b:85:19:27:e0:2d:c6:9a:cf:9e:e4:95:
7d:a3:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:57 2026 by rpki-client