Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: sAFzfiT+y5rzujmmGBBzI0/nw5YftEaIcHIOyO1eWb8=
Subject key identifier: 57:3A:26:29:95:7C:1D:B5:C5:9B:9F:8B:EF:D0:F8:34:AE:89:05:49
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019D2816F2B175F595DC4B95C35023F13DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 114D
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: J8NvpJq6eev4k_tCNDubI7WjbOM.roa (hash: i38yaMfp3QW23D0QcRAmrQEj3pbk8iPpDiqjLtiH3ZU=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: LkUnns0yt3dYv2GkK2ClOkcFJe0gsZqrqDe2uvZhS80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f2:b1:75:f5:95:dc:4b:95:c3:50:23:f1:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=573a2629957c1db5c59b9f8befd0f834ae890549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:f9:aa:d9:77:fd:61:bc:7c:7f:be:7c:33:
28:81:1a:1d:20:8d:1b:34:29:86:68:3c:84:cf:58:
23:8f:46:89:90:5a:bc:d2:39:d6:1d:41:f1:31:a6:
c9:69:a4:12:bc:b0:98:61:72:50:16:7a:5f:d3:22:
93:b1:e0:81:cc:af:16:70:bb:61:c6:6a:96:78:68:
8a:81:b7:b2:59:cd:98:81:5c:ff:6d:fb:71:61:13:
ab:e8:f8:0e:57:a4:71:5f:ef:92:64:8f:68:cf:06:
91:fa:16:82:df:d2:ef:47:da:b1:b4:3b:3f:1f:96:
88:b8:f9:ac:d7:66:61:a8:93:5c:a1:81:8c:a9:0e:
b3:45:93:49:9c:60:65:76:74:66:6a:18:c5:49:82:
f0:88:4e:2b:02:f4:f2:9d:a2:85:24:a1:1b:6f:4d:
26:46:6e:37:1b:cd:3d:c5:c7:61:fe:a8:a2:9a:2e:
0c:9a:4f:fb:5a:43:49:26:bd:8d:19:71:e5:01:50:
06:e7:42:1f:25:03:1f:01:88:76:c1:7b:79:95:33:
6f:b4:58:e3:19:cf:2f:9b:df:dc:3e:92:b9:e9:56:
a1:72:21:94:b5:47:37:65:cb:50:c6:96:0c:e7:62:
55:29:5f:1e:a4:40:2b:b2:1f:60:20:e6:67:43:ba:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:26:29:95:7C:1D:B5:C5:9B:9F:8B:EF:D0:F8:34:AE:89:05:49
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:1d:fa:b4:10:19:eb:b8:c2:81:b8:7b:de:f2:42:50:46:
b4:f4:e3:55:46:a6:68:de:33:76:d7:e3:e9:41:ec:6d:5c:cf:
bc:89:5c:04:de:ba:98:d6:07:37:e4:8b:51:d8:9d:ea:59:47:
59:21:4c:62:09:fb:b4:bb:67:dd:3a:e0:bc:46:69:07:66:97:
a0:21:fc:e7:76:27:e3:e7:6a:0a:a9:f4:d6:fe:af:76:2d:05:
e0:9a:26:61:58:75:fe:d6:af:87:83:eb:b1:d0:c5:3e:e3:f3:
82:2f:5e:1e:87:a3:57:62:1b:fd:9c:05:5e:a6:ba:c6:20:fc:
57:86:47:69:96:ad:cb:7d:b4:d5:1f:20:eb:71:c5:f8:be:f1:
09:55:e1:a2:27:91:a4:53:37:11:12:83:9d:54:85:a1:0f:e3:
fb:96:e8:b0:49:cf:a1:a7:36:dc:8d:14:f9:ec:f1:3e:6b:39:
4f:42:bd:ac:83:3b:38:dd:97:4e:35:32:9d:83:ae:6f:21:8e:
4a:a9:03:52:0d:c0:39:e5:2a:df:26:dc:11:07:f3:f8:bc:8b:
db:74:f7:46:f3:ff:47:a6:33:a4:18:38:bf:db:ea:e4:c7:4d:
c0:9d:ef:ed:58:ea:73:8b:62:55:d5:ab:d7:05:5d:91:d0:9e:
ee:ac:14:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvKxdfWV3EuVw1Aj8T3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTI1MTMxNDRmOGVhZmE4MzZjNGNkY2Y0Zjc1OGQxY2Ni
NjcyMGEwHhcNMjYwMzI2MDMwMTI1WhcNMjYwMzI3MDMwMTI1WjAzMTEwLwYDVQQD
Eyg1NzNhMjYyOTk1N2MxZGI1YzU5YjlmOGJlZmQwZjgzNGFlODkwNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsH5qtl3/WG8fH++fDMogRodII0b
NCmGaDyEz1gjj0aJkFq80jnWHUHxMabJaaQSvLCYYXJQFnpf0yKTseCBzK8WcLth
xmqWeGiKgbeyWc2YgVz/bftxYROr6PgOV6RxX++SZI9ozwaR+haC39LvR9qxtDs/
H5aIuPms12ZhqJNcoYGMqQ6zRZNJnGBldnRmahjFSYLwiE4rAvTynaKFJKEbb00m
Rm43G809xcdh/qiimi4Mmk/7WkNJJr2NGXHlAVAG50IfJQMfAYh2wXt5lTNvtFjj
Gc8vm9/cPpK56VahciGUtUc3ZctQxpYM52JVKV8epEArsh9gIOZnQ7qQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc6JimVfB21xZufi+/Q+DSuiQVJMB8GA1UdIwQY
MBaAFHESUTFE+Or6g2xM3PT3WNHMtnIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYt
YTIyZjQ1ZGViZDRlLzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYtYTIyZjQ1ZGViZDRl
LzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkcd+rQQ
Geu4woG4e97yQlBGtPTjVUamaN4zdtfj6UHsbVzPvIlcBN66mNYHN+SLUdid6llH
WSFMYgn7tLtn3TrgvEZpB2aXoCH853Yn4+dqCqn01v6vdi0F4JomYVh1/tavh4Pr
sdDFPuPzgi9eHoejV2Ib/ZwFXqa6xiD8V4ZHaZaty3201R8g63HF+L7xCVXhoieR
pFM3ERKDnVSFoQ/j+5bosEnPoac23I0U+ezxPms5T0K9rIM7ON2XTjUynYOubyGO
SqkDUg3AOeUq3ybcEQfz+LyL23T3RvP/R6YzpBg4v9vq5MdNwJ3v7Vjqc4tiVdWr
1wVdkdCe7qwUqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:26 2026 by rpki-client