Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
File: CRiOI1NxcPsuRX8xLVRflL2d1-4.mft (raw, json)
Hash identifier: yvNTylosjj9UEzFlo/fQsFIgLNIfxDNlIasHmAZnE0Q=
Subject key identifier: 5B:5A:24:F2:BE:14:71:75:36:C9:ED:7D:EA:0B:95:65:3A:42:7D:20
Authority key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
Certificate issuer: /CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Certificate serial: 019F90C7D1A56A3798F559203C2C7EBD919D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
Manifest number: 02F4
Signing time: Thu 23 Jul 2026 21:00:42 +0000
Manifest this update: Thu 23 Jul 2026 21:00:42 +0000
Manifest next update: Fri 24 Jul 2026 21:00:42 +0000
Files and hashes: 1: CRiOI1NxcPsuRX8xLVRflL2d1-4.crl (hash: PEn4s8SQbivj95dAoGUQpTbAGTwvJ7xWiURP+VIJ2YU=)
2: xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa (hash: SFaniO5YvRE/Q1MmXdLYQfC7ZkWwnx783aQKjO9iPwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d1:a5:6a:37:98:f5:59:20:3c:2c:7e:bd:91:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Validity
Not Before: Jul 23 21:00:42 2026 GMT
Not After : Jul 24 21:00:42 2026 GMT
Subject: CN=5b5a24f2be14717536c9ed7dea0b95653a427d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:a9:8b:c9:37:c6:71:a1:50:2e:9d:c4:01:
49:4e:21:bd:cf:29:dd:05:cf:f7:e4:37:aa:34:60:
1b:4d:ce:3a:15:e3:7b:7f:18:97:23:7b:09:6c:48:
d2:5e:bc:55:02:e4:10:69:8a:a7:2a:5f:1d:95:78:
0a:47:52:0e:f8:e8:94:21:57:97:18:31:3f:a0:98:
0e:f1:5e:e5:e9:4b:d3:16:8f:96:c6:ec:f3:16:5a:
5a:cb:4b:0f:e3:60:f1:4b:b0:e5:25:01:e2:8f:36:
3c:c4:d7:da:15:f1:ee:7f:f5:b7:f0:4b:f3:36:77:
7d:b7:86:5f:9e:b8:9b:a0:95:d6:95:0a:37:88:5f:
94:81:9b:ae:c4:21:ae:19:4f:7f:5b:d1:58:99:43:
e7:d1:b5:12:c3:74:f3:38:6e:b9:2b:86:03:1b:28:
e7:8e:4c:0c:a7:ca:6d:8e:6c:ad:96:dc:82:6f:b6:
9c:c7:58:f5:60:89:9d:d0:99:e0:4b:bf:a2:09:0d:
ea:3c:67:e7:07:1d:ad:a4:87:d7:17:51:29:63:d4:
0a:fc:66:c3:9d:e2:07:b4:9d:e5:7c:fe:be:d0:57:
7e:a0:44:65:b2:2d:b2:19:d3:e6:44:64:ed:83:28:
be:9c:8e:70:37:4f:c1:c7:98:e4:c0:db:b9:12:b1:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:24:F2:BE:14:71:75:36:C9:ED:7D:EA:0B:95:65:3A:42:7D:20
X509v3 Authority Key Identifier:
keyid:09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:74:f8:ac:43:b3:db:ff:28:2c:06:56:6c:16:e6:b5:43:
33:4a:74:e8:ff:cf:7a:ff:9a:fa:8a:21:f4:10:bb:72:83:84:
99:f5:cf:ef:15:05:9d:41:f2:43:53:e0:04:af:95:2e:43:d9:
ad:f2:e2:fb:ce:6a:30:f4:30:d9:57:c5:4e:0e:35:fd:ae:85:
74:0b:a1:4d:52:71:1b:90:ad:69:62:d2:15:70:40:05:f2:1b:
23:e1:da:da:4c:b0:da:63:01:eb:91:cc:87:9e:f6:a8:b6:bc:
03:19:d7:c6:31:80:fe:fc:44:cb:fb:68:6e:60:eb:8e:73:f5:
71:6e:bc:2e:9a:d7:97:f6:9e:cf:f7:c1:73:8d:ab:ef:60:bb:
b4:f6:50:bf:03:c3:f4:40:3f:87:bd:37:35:f4:79:c8:e4:e2:
4e:0b:a2:71:42:2b:74:e6:d4:12:ce:2b:c6:7c:49:7f:94:35:
f0:4e:9e:40:89:9b:3c:e1:5c:e8:7e:62:8f:c8:59:62:7e:53:
08:03:72:eb:96:40:f9:cc:8e:4e:62:ba:98:31:e2:04:2f:d3:
99:d7:d3:04:7b:b2:f1:bb:c8:2f:77:93:6f:a4:b9:26:0c:64:
13:81:1d:28:da:45:80:ce:4f:c5:39:fc:7d:de:20:e5:57:b6:
1d:4b:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:31 2026 by rpki-client