Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
File: CRiOI1NxcPsuRX8xLVRflL2d1-4.mft (raw, json)
Hash identifier: n12eQgnpcGemA/rqJsAwmlvK4pYlIo+EyM9Mvvmw4S0=
Subject key identifier: B7:D4:CE:CD:2D:41:A4:2F:E4:DB:10:A0:24:2B:59:BB:82:B7:1E:EA
Authority key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
Certificate issuer: /CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Certificate serial: 019D28BB6ADDB6E0147916AAC6047BE7EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
Manifest number: 01B5
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: CRiOI1NxcPsuRX8xLVRflL2d1-4.crl (hash: UUfoQphdh7LfUruEw7yZIf/iGCLTup6u9VhyJkadCcI=)
2: xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa (hash: SFaniO5YvRE/Q1MmXdLYQfC7ZkWwnx783aQKjO9iPwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6a:dd:b6:e0:14:79:16:aa:c6:04:7b:e7:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=b7d4cecd2d41a42fe4db10a0242b59bb82b71eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:2d:e4:0a:34:59:46:ff:71:9e:a1:bf:2b:
3c:cf:4e:97:4c:b6:38:34:82:57:2d:21:1f:13:f8:
7a:0e:ce:50:77:66:30:ba:7c:80:6a:2d:3b:d2:5c:
9c:c5:61:23:b3:97:01:8a:16:16:0c:a8:cb:9c:61:
39:8a:61:80:76:c6:b5:e1:ca:f3:cf:fc:96:70:4e:
ce:95:7c:44:52:35:e3:1c:e8:57:7b:5f:0c:9c:8b:
40:db:4c:e9:97:0c:10:b0:58:6b:41:e5:d8:76:e9:
0e:fe:79:50:ed:b2:88:9b:0e:36:13:72:a4:4b:cc:
ef:ea:da:48:ed:c7:f3:58:39:af:c0:37:10:67:3f:
ec:35:44:77:01:f9:3d:86:8b:7f:cc:fc:17:e1:09:
1d:66:92:66:b4:c0:33:74:5d:e2:4a:3c:76:3a:8c:
ba:f8:b1:b1:fd:e5:cc:b7:a7:9d:3a:d4:bd:24:59:
d8:08:47:30:dd:a5:2b:a7:a5:3b:8a:35:eb:2c:a9:
81:e5:f7:d6:45:e1:b6:8c:0d:a0:b3:01:0e:92:71:
02:40:29:bc:cf:ec:55:c9:88:bc:8c:e9:26:35:3a:
90:69:4b:29:33:64:de:31:99:6f:7e:53:68:a4:88:
21:4f:1c:bf:34:8c:7f:6b:cd:07:bc:4a:58:ac:4f:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:CE:CD:2D:41:A4:2F:E4:DB:10:A0:24:2B:59:BB:82:B7:1E:EA
X509v3 Authority Key Identifier:
keyid:09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b8:26:81:8b:da:bc:36:63:87:9a:61:f1:5d:f1:d6:81:4b:
0b:e2:88:a4:b3:65:da:78:11:13:4a:14:67:1a:45:d7:b5:6c:
3c:4a:61:9f:0f:98:df:70:86:b1:f8:03:54:4c:51:fa:00:ba:
a4:15:1d:59:42:ef:fc:ab:2e:e7:4a:05:55:ec:77:d5:0a:88:
da:19:9b:19:38:54:9d:73:fa:ad:7b:7e:c2:5b:1a:6e:51:5f:
35:7c:ef:05:52:8c:4b:54:09:c2:58:a5:87:6b:91:53:36:6f:
7e:dc:20:c4:f9:7b:d6:30:2d:e4:79:5a:26:26:97:75:ef:7a:
a9:67:e2:7f:29:ec:a4:a4:5b:4e:61:bd:78:24:62:bc:81:6c:
ec:b8:e7:e7:81:eb:52:eb:49:8c:6e:e1:d2:8c:c7:6b:59:6c:
21:cf:80:88:67:96:33:12:79:46:f8:db:0c:02:bb:7c:12:4d:
84:eb:97:c1:fe:b8:f6:fd:d2:b9:26:6d:58:1e:73:fc:62:4e:
41:a0:44:e8:c5:ab:35:25:0b:7c:e2:de:82:d4:51:89:66:e8:
a8:3d:01:eb:74:4e:7c:fb:40:1e:c0:c2:4a:1a:7d:1b:96:ac:
9d:8e:c5:3d:b8:ec:65:f3:f9:83:72:bb:c6:db:b6:4e:9e:bd:
6b:36:1d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2rdtuAUeRaqxgR75+2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTg4ZTIzNTM3MTcwZmIyZTQ1N2YzMTJkNTQ1Zjk0YmQ5
ZGQ3ZWUwHhcNMjYwMzI2MDYwMTA0WhcNMjYwMzI3MDYwMTA0WjAzMTEwLwYDVQQD
EyhiN2Q0Y2VjZDJkNDFhNDJmZTRkYjEwYTAyNDJiNTliYjgyYjcxZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EIt5Ao0WUb/cZ6hvys8z06XTLY4
NIJXLSEfE/h6Ds5Qd2YwunyAai070lycxWEjs5cBihYWDKjLnGE5imGAdsa14crz
z/yWcE7OlXxEUjXjHOhXe18MnItA20zplwwQsFhrQeXYdukO/nlQ7bKImw42E3Kk
S8zv6tpI7cfzWDmvwDcQZz/sNUR3Afk9hot/zPwX4QkdZpJmtMAzdF3iSjx2Ooy6
+LGx/eXMt6edOtS9JFnYCEcw3aUrp6U7ijXrLKmB5ffWReG2jA2gswEOknECQCm8
z+xVyYi8jOkmNTqQaUspM2TeMZlvflNopIghTxy/NIx/a80HvEpYrE9JUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfUzs0tQaQv5NsQoCQrWbuCtx7qMB8GA1UdIwQY
MBaAFAkYjiNTcXD7LkV/MS1UX5S9ndfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYt
YTg0NGFhYjA1MTFjLzEvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYtYTg0NGFhYjA1MTFj
LzEvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLgmgYva
vDZjh5ph8V3x1oFLC+KIpLNl2ngRE0oUZxpF17VsPEphnw+Y33CGsfgDVExR+gC6
pBUdWULv/Ksu50oFVex31QqI2hmbGThUnXP6rXt+wlsablFfNXzvBVKMS1QJwlil
h2uRUzZvftwgxPl71jAt5HlaJiaXde96qWfifynspKRbTmG9eCRivIFs7Ljn54Hr
UutJjG7h0ozHa1lsIc+AiGeWMxJ5RvjbDAK7fBJNhOuXwf649v3SuSZtWB5z/GJO
QaBE6MWrNSULfOLegtRRiWboqD0B63ROfPtAHsDCShp9G5asnY7FPbjsZfP5g3K7
xtu2Tp69azYdDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:31 2026 by rpki-client