Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: sjVEUbPc1DorBw1x50KFTaGwXpl5Bsk3sBQxjJ/RGCg=
Subject key identifier: 70:C1:A7:87:E0:7B:AD:37:72:D4:56:8F:44:56:A0:73:B2:07:36:47
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019D28169ACDFD4A5B8F316EC72BFB47048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: QvbD1jOdUx6HbNUbA99645THPL4.roa (hash: S7/2P7Mm3OHJNvAa4PXnZTEjRSISksVJdSbgwYAQoks=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: joB7Z/Urjkz+fk4A4t9lT94G/3hq7ABt5z6u2wGIWGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9a:cd:fd:4a:5b:8f:31:6e:c7:2b:fb:47:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=70c1a787e07bad3772d4568f4456a073b2073647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:ad:4e:8c:a9:ee:a5:09:69:b2:93:8a:05:
5b:a1:16:cf:c9:42:f3:fe:55:33:7a:2d:68:7e:21:
17:c4:23:52:39:45:32:cc:0c:0e:a6:77:df:52:80:
f5:4f:7f:29:39:20:5b:dc:83:d7:a0:a6:c6:e7:cb:
c3:54:75:68:e2:89:00:dc:8d:d5:cc:3a:fc:9f:8a:
62:d8:d4:62:d8:e2:da:d1:da:7f:3c:5c:02:2d:26:
7b:da:a5:f1:65:6b:b8:42:17:4a:a7:1b:6c:60:68:
cd:c2:0b:02:61:d0:c2:fe:45:1a:d3:69:a7:56:81:
a4:35:9f:03:e2:13:2e:90:e8:7c:4b:d2:ec:f4:26:
55:a2:1e:39:f9:20:3d:eb:a3:04:4a:b7:5f:46:61:
c8:d6:5c:da:77:ea:d4:a3:0f:29:27:a9:83:1f:ef:
20:dd:9e:13:10:70:ba:6b:13:40:10:7f:fe:e5:78:
be:b8:09:01:bd:f1:65:6a:0f:65:2d:42:2f:6c:ac:
ec:75:8b:63:0d:58:33:24:95:19:c8:e3:0f:03:89:
c8:80:a1:9c:7e:45:4d:b8:12:64:73:83:0d:2c:e0:
33:02:7c:49:f6:77:6f:ed:12:be:7f:14:3c:53:75:
2d:da:56:55:72:65:fb:a2:b0:4e:21:b6:77:59:3c:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:A7:87:E0:7B:AD:37:72:D4:56:8F:44:56:A0:73:B2:07:36:47
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:2c:13:f0:1b:71:79:63:91:b6:f8:cc:5f:9e:7f:84:32:
f4:72:ec:86:45:f1:a5:6d:d2:b9:c8:48:f5:1d:8b:ed:0b:d1:
c1:e3:e0:b9:59:f0:31:46:7c:fc:28:1d:03:21:da:b3:fc:fd:
66:66:03:9d:a1:19:34:0e:00:3b:3a:f2:b9:18:b3:0b:55:df:
71:a4:4b:6e:79:dd:26:90:f1:4f:49:53:39:e3:11:75:d4:94:
b5:cd:ce:e9:9d:e5:e8:f2:8e:8c:8e:ec:57:0f:02:f0:ac:61:
ca:72:27:c0:b9:eb:fb:46:dc:fc:9a:cd:39:5c:06:1a:d1:88:
05:13:ad:53:96:81:91:21:0b:ef:11:8a:da:7b:70:9b:4f:88:
73:ed:a9:2d:57:fe:0a:8a:71:34:63:65:9d:12:f2:6b:92:d0:
8f:0f:e0:1e:e6:6c:81:a3:26:24:83:b6:98:c1:24:0e:2b:80:
e7:ea:02:5b:99:c7:93:06:88:3c:de:e0:13:b8:67:b7:ab:c6:
01:5d:68:31:58:c9:5b:cd:30:c2:ef:2c:22:60:e8:20:e4:e7:
75:da:e4:6c:ae:6f:d2:5e:49:c4:8f:32:d6:e4:33:47:0a:2a:
c4:40:f0:ca:8e:0b:6e:0e:41:52:25:f6:56:9a:79:68:ae:cc:
fc:24:2f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFprN/UpbjzFuxyv7RwSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjI1ZDg1OWZmMDZiZTFlYmM5N2FkZDVkZWMwNWQzNmZj
ZGNhMmQwHhcNMjYwMzI2MDMwMTAzWhcNMjYwMzI3MDMwMTAzWjAzMTEwLwYDVQQD
Eyg3MGMxYTc4N2UwN2JhZDM3NzJkNDU2OGY0NDU2YTA3M2IyMDczNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4etToyp7qUJabKTigVboRbPyULz
/lUzei1ofiEXxCNSOUUyzAwOpnffUoD1T38pOSBb3IPXoKbG58vDVHVo4okA3I3V
zDr8n4pi2NRi2OLa0dp/PFwCLSZ72qXxZWu4QhdKpxtsYGjNwgsCYdDC/kUa02mn
VoGkNZ8D4hMukOh8S9Ls9CZVoh45+SA966MESrdfRmHI1lzad+rUow8pJ6mDH+8g
3Z4TEHC6axNAEH/+5Xi+uAkBvfFlag9lLUIvbKzsdYtjDVgzJJUZyOMPA4nIgKGc
fkVNuBJkc4MNLOAzAnxJ9ndv7RK+fxQ8U3Ut2lZVcmX7orBOIbZ3WTyn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDBp4fge603ctRWj0RWoHOyBzZHMB8GA1UdIwQY
MBaAFHKyXYWf8Gvh68l63V3sBdNvzcotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMt
MTIzZmEyYWI5NDA4LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMtMTIzZmEyYWI5NDA4
LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSssE/Ab
cXljkbb4zF+ef4Qy9HLshkXxpW3SuchI9R2L7QvRwePguVnwMUZ8/CgdAyHas/z9
ZmYDnaEZNA4AOzryuRizC1XfcaRLbnndJpDxT0lTOeMRddSUtc3O6Z3l6PKOjI7s
Vw8C8KxhynInwLnr+0bc/JrNOVwGGtGIBROtU5aBkSEL7xGK2ntwm0+Ic+2pLVf+
CopxNGNlnRLya5LQjw/gHuZsgaMmJIO2mMEkDiuA5+oCW5nHkwaIPN7gE7hnt6vG
AV1oMVjJW80wwu8sImDoIOTnddrkbK5v0l5JxI8y1uQzRwoqxEDwyo4Lbg5BUiX2
Vpp5aK7M/CQv3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:37 2026 by rpki-client