Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: KBqohqQAcXUp8v4bfsOpFlPcAxrHLLzRCZNeSDyTjIY=
Subject key identifier: 76:10:5E:66:C4:8F:8E:62:BE:8A:3F:93:1F:5B:36:6A:0D:54:73:C4
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019F90C7AEE7133115DB5C4D45164EBC2F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0395
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: IA5n8EJGQ2RJntirMIl+ftajQ62qm+Mzq1aTY+AE6dM=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ae:e7:13:31:15:db:5c:4d:45:16:4e:bc:2f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=76105e66c48f8e62be8a3f931f5b366a0d5473c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:00:14:e5:82:89:99:3b:8d:2c:19:4f:ff:
a9:21:2f:b6:0c:2d:f4:4e:2a:78:f5:7b:7a:35:cc:
4b:21:fe:a5:bb:6d:0b:2c:ca:3d:b2:da:fd:2f:39:
f9:b2:c8:71:18:b0:e5:cb:6b:51:da:76:8a:72:7e:
25:6e:34:f6:b1:1c:60:3d:fb:cc:39:b2:ab:bd:f6:
b3:30:bf:bc:61:e0:8f:5f:ac:b6:a6:02:4f:3b:63:
72:63:1a:cc:d0:82:bb:f7:2a:3a:68:0b:74:3d:4c:
79:fa:fe:f3:9a:76:1c:8e:2d:9d:3e:84:46:53:47:
02:34:d5:07:ed:e7:0b:94:ec:b5:75:44:83:c5:45:
77:0f:ae:52:4f:bd:9d:e8:47:2c:14:58:cd:bd:48:
25:0d:02:08:fc:3e:63:fa:e5:a0:23:3a:95:48:9b:
ba:de:75:6e:fa:1e:54:88:bc:4c:6a:15:51:6d:42:
0c:97:41:b2:e6:9e:a5:97:01:b7:75:05:76:ef:d2:
ff:65:b3:85:00:9d:25:4f:5b:59:e7:6d:2d:58:db:
b6:58:0c:7a:38:b2:ca:05:ff:3f:6a:b3:f0:7e:5a:
11:1f:35:d6:63:06:da:33:4c:86:ac:78:52:80:96:
50:1a:eb:ec:2c:7e:a4:55:b4:33:61:4c:ff:39:8e:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:5E:66:C4:8F:8E:62:BE:8A:3F:93:1F:5B:36:6A:0D:54:73:C4
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:63:14:45:d7:8a:3c:37:fe:1f:cf:a8:34:12:9b:63:b7:88:
51:d4:c4:94:62:ec:60:01:0b:15:28:de:5b:70:2c:02:2e:ed:
c9:f7:f4:c7:34:fa:73:a7:9e:19:ed:4a:f6:e0:4b:02:b4:b7:
e8:02:78:fe:63:34:d0:28:f0:44:72:d2:75:c0:b8:f6:0e:29:
bf:a6:72:09:6d:88:67:db:b7:77:9e:58:89:7e:cb:e3:13:ce:
22:52:2f:75:c8:3c:91:26:01:04:a8:39:73:27:e9:94:74:3a:
a5:df:d5:17:44:0a:c7:b8:65:32:44:92:a7:c7:ad:49:c0:d5:
7e:e2:a2:d6:2e:af:8a:6b:69:b1:27:3d:73:fc:94:4d:7f:d3:
db:cf:c3:75:0a:0e:1e:c2:56:91:95:08:5e:84:47:bc:79:f2:
c3:26:68:8c:53:96:fb:ad:19:44:71:52:ef:44:61:2d:a9:34:
ba:ef:34:5f:a4:76:1c:25:f0:7d:10:e9:6f:af:38:6d:d9:97:
6f:0e:28:1b:9d:3b:d8:63:75:03:f8:8b:10:6e:28:43:4e:9f:
53:75:a4:90:78:ac:58:2e:6d:3e:10:f5:08:fb:0f:cf:ed:19:
80:23:b6:8d:81:dc:dc:cb:3c:3e:0b:1d:e9:a5:20:ed:c9:e9:
b3:88:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:04:55 2026 by rpki-client