Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: i008/0WtRqScFSqYgHrfkaVCTrgXa4VRBTqQaX/MiHs=
Subject key identifier: 8A:AD:EB:5B:7F:29:96:25:EC:E6:88:0C:DB:2F:FD:DD:78:12:8C:97
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01A12A31DB6154DD447E2C388F938D4B4D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1A37
Signing time: Sun 11 Oct 2026 09:01:12 +0000
Manifest this update: Sun 11 Oct 2026 09:01:12 +0000
Manifest next update: Mon 12 Oct 2026 09:01:12 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: KULLfe0AMyyE3GMN3S06C/IURCYdv/Wa52MuuhgLq1k=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:db:61:54:dd:44:7e:2c:38:8f:93:8d:4b:4d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Oct 11 09:01:12 2026 GMT
Not After : Oct 12 09:01:12 2026 GMT
Subject: CN=8aadeb5b7f299625ece6880cdb2ffddd78128c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:ce:d5:e7:3a:b1:69:b2:e7:45:17:5e:ec:
6b:1f:11:db:42:d5:71:a3:54:21:f8:09:b3:c5:18:
fe:8b:1f:22:66:2c:51:dd:2a:66:f4:e0:12:e9:e2:
a5:1d:f4:b2:0e:39:78:7a:54:22:ef:12:51:98:27:
07:06:ec:4a:a8:80:70:7a:f0:b4:43:5c:d6:a4:99:
1d:17:46:c6:97:c2:80:9c:62:53:08:d3:ae:20:80:
ba:a6:16:3a:e2:6f:7f:da:f6:c5:b7:73:2a:62:54:
97:e9:25:c3:dc:2c:2d:f8:f8:a6:86:9f:df:a9:0e:
4b:9a:de:54:2e:2f:84:4f:2b:fa:03:2a:8f:b2:9e:
9f:03:ed:c8:eb:88:9c:dc:be:e3:93:f1:82:7d:92:
50:d1:2e:ba:ca:57:52:55:ed:fe:eb:14:7f:5e:c3:
82:10:f4:3f:1f:4e:d9:28:3f:69:9d:dc:48:5c:48:
79:e3:69:4e:d6:2a:7b:3e:50:b3:68:c7:06:f0:d8:
db:9f:e5:a3:74:97:0d:a1:9d:09:3d:57:5d:d4:ee:
e6:30:36:86:3c:f4:d1:e2:d2:fb:a5:d4:9c:5e:6a:
7d:f7:27:77:cc:88:ed:43:a8:b0:89:3a:3e:63:41:
23:01:a3:2a:2f:0e:3d:ba:6c:54:0f:8d:52:d3:77:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:EB:5B:7F:29:96:25:EC:E6:88:0C:DB:2F:FD:DD:78:12:8C:97
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:5e:c9:af:90:35:ef:41:03:3c:1b:09:b8:43:4d:53:32:
56:23:73:93:86:b1:7c:12:25:2f:f2:40:70:4c:b9:dd:87:ff:
74:d9:b8:e6:1e:18:a5:f2:30:42:19:39:d8:94:7e:f9:02:9c:
ce:56:f4:94:f7:ff:e3:f6:20:c7:aa:7e:48:d3:f6:90:99:59:
d0:30:f2:66:42:e1:44:e7:7d:53:6f:e1:42:e5:bc:a0:3f:1a:
bc:50:47:bf:f0:5f:ca:48:81:53:8a:4b:de:17:35:08:f1:1f:
26:70:a2:46:31:41:17:bd:07:2e:65:70:36:f7:89:3b:d2:39:
72:e7:ec:b9:a2:7c:41:72:22:aa:c2:61:ed:51:a7:75:df:5a:
2a:4b:7c:da:92:f6:d8:1f:06:ea:d7:f1:3a:84:8f:c1:20:be:
f3:90:72:db:39:42:57:44:77:f9:71:fc:7d:83:de:2a:53:9e:
96:74:0f:70:01:8e:68:d6:eb:78:1f:d7:c9:9c:ee:c7:e3:fb:
fc:96:df:80:1e:57:a7:9f:72:0f:14:de:b2:d1:bd:7c:c5:ad:
69:ca:00:ab:58:14:55:2e:f0:29:20:8f:ac:1d:f0:6f:4c:de:
48:74:f1:28:a1:ea:33:fe:b9:e6:e1:41:93:76:bf:e2:8d:78:
52:3f:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:52:11 2026 by rpki-client