Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: PYgVI+pPuXz1o/T7AiCxMIRZnjKdkxKn9jsVeIbg5Tw=
Subject key identifier: AD:A2:3D:5C:C9:9D:28:BC:36:FF:02:14:94:B0:E4:3C:A0:F5:0B:75
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019D2C9868A43B05DCAEB8A584DB865E1E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1826
Signing time: Fri 27 Mar 2026 00:01:18 +0000
Manifest this update: Fri 27 Mar 2026 00:01:18 +0000
Manifest next update: Sat 28 Mar 2026 00:01:18 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: B3lseCsXLI63bpTrZBtY5MjZv7XXZ+osbSbtLawfw6M=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:68:a4:3b:05:dc:ae:b8:a5:84:db:86:5e:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Mar 27 00:01:18 2026 GMT
Not After : Mar 28 00:01:18 2026 GMT
Subject: CN=ada23d5cc99d28bc36ff021494b0e43ca0f50b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:64:34:ae:81:af:27:ce:a4:70:11:2b:93:
e5:71:a0:b3:d9:9f:b0:60:c2:1d:ca:af:37:72:a7:
e5:73:6a:24:3e:93:d5:9a:d0:91:bc:7b:16:3a:d1:
93:f9:af:1a:b8:eb:be:ad:5e:0e:01:5b:96:22:7c:
76:cc:5e:6b:b0:84:a6:71:eb:ad:a9:76:e3:fd:5c:
bc:2a:be:aa:f8:ed:f6:7b:41:3d:c5:fa:b6:e2:3a:
02:ea:90:c8:a6:3a:9a:30:dd:82:4c:8a:6f:41:9d:
34:74:68:ad:bb:2d:e8:69:2d:7b:92:3f:6e:84:28:
88:ef:a6:b1:ab:08:58:d6:d9:75:6f:89:18:13:ce:
18:47:d1:26:20:0a:9b:5f:29:c0:ee:52:dd:a4:1a:
19:05:69:48:c5:d1:b7:26:db:84:e1:42:f7:9a:53:
60:c6:af:62:24:d4:94:9d:81:bf:9c:55:8c:0e:5b:
36:56:07:a6:60:99:ce:3f:0b:51:c9:cd:d5:7c:2e:
55:61:8b:87:8d:c9:58:e6:6d:0d:81:c3:d7:e2:e6:
2f:c6:ad:7e:c9:a1:84:78:b7:61:73:cd:a3:2e:d1:
cd:23:c8:f3:09:b5:54:f2:3c:7c:ba:10:35:78:c0:
f5:86:ee:50:d4:70:67:8d:dd:af:dd:e4:89:69:cd:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:3D:5C:C9:9D:28:BC:36:FF:02:14:94:B0:E4:3C:A0:F5:0B:75
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:54:3b:f3:fa:e1:7c:17:52:78:0d:ab:26:e5:f8:de:8c:42:
40:c4:d0:64:9a:23:d0:c9:cd:0b:da:ba:3e:e4:bd:e4:6c:a5:
60:79:a9:80:31:75:64:ea:18:35:36:85:74:92:fa:4f:33:6b:
35:fb:67:74:07:5b:a5:46:3c:1c:55:48:1e:60:ed:59:54:f8:
07:3a:3e:ba:7f:b6:15:d4:d2:c1:ad:b3:a7:7d:f4:05:d2:b9:
0d:92:db:c4:39:39:86:3f:58:68:a5:bd:7b:c0:1b:18:b4:55:
13:d8:61:22:af:cb:e5:48:a7:a4:40:85:81:3a:49:73:99:6d:
f2:e3:a6:a0:89:7a:07:44:05:ac:ea:38:37:51:d2:8f:1d:86:
1f:a6:53:36:4f:bd:d6:40:13:bb:39:3a:63:e3:d6:38:46:6f:
28:c2:a4:6c:96:9f:f8:1b:d3:af:5f:3a:94:03:f3:d4:bd:ea:
3f:8a:8e:08:6c:86:d9:f8:b1:af:f4:d7:8f:99:c7:27:10:15:
ef:ec:75:15:24:a7:61:d9:32:83:bd:89:ef:90:c1:e2:db:7c:
54:04:50:00:ed:5d:89:1a:eb:0e:6f:fd:1e:2c:30:a1:07:cd:
a8:03:15:f4:77:1a:c7:63:39:61:c7:0b:f1:f9:b0:61:48:94:
bf:70:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:24:20 2026 by rpki-client