Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: sTtfRRYpoN+cZ7Rj8AbcvuFSryadIw2ZMqjn+DirFgc=
Subject key identifier: 75:66:C2:5D:DC:D1:3D:8D:E4:F6:08:5F:87:99:77:46:DF:0C:CC:66
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019D26CD53AEAD861038BDEE8A2F121505E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0255
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: gS342MhJyWBknRhVN3AN8Gs6FTF/Ay9UKy5wIG1uS8g=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:53:ae:ad:86:10:38:bd:ee:8a:2f:12:15:05:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=7566c25ddcd13d8de4f6085f87997746df0ccc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:31:88:bf:b4:e7:15:10:90:04:aa:44:24:
4f:28:d4:d3:3b:27:84:93:b0:cd:d5:64:20:7b:47:
01:0f:e0:bb:bf:05:fd:41:e0:af:3d:26:6e:b3:37:
d0:d7:f2:f7:b4:68:be:db:04:61:3d:43:83:98:a7:
4f:90:76:fe:f7:5e:ec:73:df:8e:99:1c:b4:a4:55:
e5:4a:7d:bc:18:bd:54:5a:64:17:9a:35:15:1b:60:
a8:73:97:42:71:db:f2:35:ba:a5:60:3e:08:63:a3:
be:8f:b0:b4:b3:0c:c2:bf:df:8a:a7:a5:aa:63:7e:
2e:9a:99:ea:22:b8:88:36:39:94:af:c7:f1:e5:94:
75:1e:71:af:9c:b7:f9:ac:00:a9:c0:50:5d:2f:27:
80:c4:ed:c0:3e:77:e7:95:82:e6:21:01:46:22:ea:
00:a4:cc:42:5e:dd:ac:31:29:ac:50:2a:d3:f1:44:
7b:04:15:73:95:83:72:d7:ab:47:db:64:3a:da:50:
5f:5b:d9:9d:e5:cb:8d:4c:27:34:96:14:c1:a7:1c:
12:46:77:16:e2:3d:62:ea:9f:30:c2:ca:5c:00:bd:
24:9d:31:1b:e3:63:64:55:2a:d5:26:51:89:c9:b2:
f2:08:90:9f:3a:00:bf:67:62:dd:5e:5c:e6:ef:c2:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:C2:5D:DC:D1:3D:8D:E4:F6:08:5F:87:99:77:46:DF:0C:CC:66
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:20:a5:8a:3c:76:45:42:65:72:a7:c2:68:51:c4:f3:bc:e2:
64:96:4a:cc:da:2e:0e:7f:af:e5:29:37:7d:ad:89:fa:01:46:
d6:97:47:9d:75:9b:b2:ad:f1:c4:1a:e8:9e:b1:8f:10:cf:65:
d0:15:c9:9a:84:5a:d6:bd:ad:a8:ea:96:1f:22:01:b0:c5:dd:
52:a6:1e:41:2a:0f:32:ff:d4:33:55:92:c9:10:64:7f:ab:34:
81:37:20:b7:1c:ae:64:1c:a4:81:2e:27:d7:c5:d1:c6:b0:0d:
64:71:01:63:44:2c:32:52:1e:e3:c8:3b:1f:20:9f:c0:be:52:
ae:b1:e5:df:9a:78:7f:a3:2f:ff:21:1a:2f:37:f5:b5:cd:e6:
48:c1:40:64:bd:40:0e:26:1e:89:6f:3e:11:e2:74:14:b5:9c:
38:e3:97:e6:1c:95:fd:53:6f:85:cd:4f:45:67:2c:73:ac:ec:
70:a5:9a:57:87:d6:e7:d8:71:27:79:ce:6b:fd:42:39:bf:c6:
0b:41:65:23:7a:6b:73:e0:ee:dc:95:48:a8:1c:be:89:7c:b8:
8f:07:cd:48:76:92:04:7b:08:f2:b3:46:3b:3e:1a:f4:0d:68:
c7:cf:4f:2d:69:06:2d:d2:62:b4:16:c2:28:72:0a:a4:f4:f9:
c8:9b:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:59 2026 by rpki-client