Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: VNv29T04GbxduRUk2tuEpIJDOeov3w3WaHqlJuNEj+s=
Subject key identifier: D9:7A:5B:5B:93:6B:8A:CB:80:7A:BD:D2:C3:F3:91:1D:25:D5:B2:5E
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019D2816E805C50FBD27FEE814E4766E2DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 01B8
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: B2uugFzaZlE/vCe8kTGRvNhUyblLZ0qq2WHCO8AwF04=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e8:05:c5:0f:bd:27:fe:e8:14:e4:76:6e:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=d97a5b5b936b8acb807abdd2c3f3911d25d5b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:ed:2a:72:e3:1f:81:c1:d9:09:20:7a:f3:
78:f0:53:de:3a:a9:6e:fc:25:37:9b:f7:d4:f5:d9:
d8:bd:d9:7e:10:35:23:82:ef:75:29:7c:1c:54:0c:
83:23:7b:ff:c1:c0:71:7e:0e:cc:cb:46:9c:89:61:
e4:c0:c6:01:ec:f5:53:37:22:97:66:1a:cb:8f:9c:
e8:20:7e:93:9a:6b:32:c5:85:12:67:6d:a6:9b:fa:
5d:e5:16:7d:0f:a6:d9:aa:ac:37:d4:3b:b7:8a:47:
24:db:d6:c1:11:44:e4:c1:e2:22:5d:0f:12:6a:09:
4a:36:36:62:c1:bd:3c:52:db:c0:70:c3:b0:dc:0a:
84:ad:70:cf:40:12:db:68:ba:f9:03:22:03:a6:58:
3b:0e:83:21:69:a3:f5:cb:38:2c:4f:96:d9:0c:e3:
40:fd:d9:cc:91:67:ec:e5:4e:19:6a:7d:ea:55:4c:
31:84:64:31:86:66:93:51:fc:96:22:86:d8:23:f5:
57:f8:c7:8a:9c:6c:82:6a:bd:39:d4:3d:1f:b1:eb:
c9:a5:08:7e:29:ba:a2:20:67:dc:0e:ec:ff:93:14:
b2:d4:db:05:5d:92:90:8e:71:29:ba:91:33:8e:8b:
88:32:17:eb:fa:8b:07:2f:4a:40:52:66:b8:ba:63:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:5B:5B:93:6B:8A:CB:80:7A:BD:D2:C3:F3:91:1D:25:D5:B2:5E
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:d5:64:ad:a3:17:28:40:d9:b8:72:02:b4:48:f0:5b:31:
d4:18:e6:ed:d6:0e:5f:e2:2a:6c:41:f4:92:76:e1:54:8b:91:
e0:54:ae:47:85:14:39:9e:0b:99:b2:46:16:48:ec:3c:8c:fd:
77:f0:35:97:e1:da:26:55:7d:c7:19:9b:27:a1:d9:36:da:e6:
c2:9f:74:c3:b1:52:e5:89:ff:a4:c6:44:7e:12:8a:d6:39:c0:
7b:69:d0:25:b1:85:18:0b:cd:82:00:2f:75:04:53:64:e5:f8:
12:65:ea:43:29:e0:dc:29:e2:a4:22:85:26:b4:4b:b4:d4:9e:
60:c8:49:24:71:51:69:ae:44:c6:53:4f:af:ce:cf:74:ff:d9:
0c:3e:77:81:18:f7:6b:e6:89:9d:0c:2d:77:5a:f3:7f:33:12:
47:7c:ae:c2:a1:b0:3a:5c:2d:9f:00:37:d0:af:cb:98:28:1c:
4d:be:2c:17:cb:40:2d:e4:67:6f:2a:cc:0f:4a:de:a6:74:e5:
7b:8b:62:c3:09:68:64:fb:71:50:71:96:3e:d3:6b:ba:95:07:
00:ea:fd:de:74:01:a0:13:69:e1:ad:3c:19:f0:95:ee:4e:96:
c5:c2:68:9f:0f:96:54:f4:ab:52:f8:e4:f6:f3:fb:40:7f:ca:
32:37:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:15 2026 by rpki-client