Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: OgrJ8vOAUdhwpMpELoCeoqwc9RwbV+4GtkhwHamSwLo=
Subject key identifier: 04:67:2B:57:F2:AB:EC:64:5F:60:A0:CF:64:F2:1E:B0:55:B9:2F:E6
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019D3375A9BF658346022DE1EB56B6AF690C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 08A4
Signing time: Sat 28 Mar 2026 08:00:42 +0000
Manifest this update: Sat 28 Mar 2026 08:00:42 +0000
Manifest next update: Sun 29 Mar 2026 08:00:42 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: s9ipc8piPT4HFpm6Wxedr/gqERAsvZDXQPK+wxugVUs=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:a9:bf:65:83:46:02:2d:e1:eb:56:b6:af:69:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Mar 28 08:00:42 2026 GMT
Not After : Mar 29 08:00:42 2026 GMT
Subject: CN=04672b57f2abec645f60a0cf64f21eb055b92fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:53:44:14:31:42:e5:28:87:17:0a:53:80:
dd:43:3c:8e:1f:25:c2:a2:99:63:e7:ae:ea:92:ec:
d7:e9:9b:9e:31:e4:fe:6a:f7:f0:5f:3e:78:40:b8:
6a:a5:9a:bc:a7:9a:d6:b3:3d:45:f8:6e:b3:61:e9:
82:9c:f9:92:87:38:d9:36:86:04:c0:31:07:4f:39:
ac:7d:a2:5e:35:4c:7e:06:30:5a:28:fe:a5:24:52:
e7:af:58:29:19:9a:1d:ca:79:c5:f9:03:aa:41:a5:
09:3b:73:bb:da:97:01:1e:14:f8:26:f7:cb:8f:44:
59:b9:ed:66:1c:8d:6c:8d:1c:65:b8:ef:18:de:d4:
d3:95:4f:8c:cb:ec:e6:fb:13:b2:0f:cc:d4:3f:17:
3d:4c:1f:99:34:3d:70:b5:61:04:b0:72:f3:74:c9:
4d:29:fc:9c:42:5a:82:24:0c:1c:a9:b8:86:26:fc:
bc:f9:6d:d1:36:2f:70:0a:c5:63:c5:74:a1:d3:4c:
1f:21:c7:61:e4:fe:a3:24:76:7b:ca:3a:ad:e1:56:
d6:b8:c4:20:54:6a:4f:a6:29:36:ff:75:51:be:fb:
4d:2c:46:77:fd:19:ad:53:80:d2:75:ac:46:57:52:
d4:ec:25:22:38:12:1f:35:e3:51:11:8d:68:30:eb:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:2B:57:F2:AB:EC:64:5F:60:A0:CF:64:F2:1E:B0:55:B9:2F:E6
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:a1:97:29:e6:75:49:bb:6a:3c:76:3a:fd:94:cc:c0:2c:
71:88:e8:fa:ca:5c:2c:61:43:2e:9e:fe:ae:34:35:cd:7a:b4:
84:d1:73:be:98:75:ef:c2:28:44:60:6b:c7:b2:d6:d5:fd:3b:
3f:64:32:1d:00:39:3d:de:8e:e0:09:be:ef:f6:7a:e4:80:a2:
e8:82:8e:93:78:08:d9:e3:e5:66:5c:81:71:7c:ba:ab:d5:80:
7b:04:60:a3:49:53:1d:80:4d:a9:a2:e3:f3:8c:b3:24:4c:2d:
49:d3:70:25:fe:20:4a:ba:4a:15:6a:cf:02:6f:29:8e:a5:3f:
c1:19:b8:d0:63:d6:ba:8f:a6:d9:0a:25:ed:da:2c:de:07:ac:
46:8f:84:3b:8c:84:31:75:66:ee:8b:8a:32:8a:25:d7:fd:fa:
30:7f:ce:2b:b6:e4:72:7e:b0:13:68:13:3a:72:51:fe:10:b3:
06:39:f3:67:f9:f1:79:c5:20:4f:e7:0f:0a:8c:3b:f1:5c:e5:
5d:d4:5b:cb:71:d0:2d:12:3d:8c:fd:12:73:30:46:09:ce:46:
72:67:5a:0e:42:82:bb:64:aa:1e:00:9b:77:75:6e:04:11:9d:
3f:1d:47:3f:f2:fd:a8:49:af:7e:ef:97:52:ae:8f:c6:39:f7:
d6:b5:2c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdam/ZYNGAi3h61a2r2kMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhN2JiY2RlNTdkODViM2ZiMWFhZGNiYTljOTk3NzVlMTll
ZWVmM2UwHhcNMjYwMzI4MDgwMDQyWhcNMjYwMzI5MDgwMDQyWjAzMTEwLwYDVQQD
EygwNDY3MmI1N2YyYWJlYzY0NWY2MGEwY2Y2NGYyMWViMDU1YjkyZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzNTRBQxQuUohxcKU4DdQzyOHyXC
oplj567qkuzX6ZueMeT+avfwXz54QLhqpZq8p5rWsz1F+G6zYemCnPmShzjZNoYE
wDEHTzmsfaJeNUx+BjBaKP6lJFLnr1gpGZodynnF+QOqQaUJO3O72pcBHhT4JvfL
j0RZue1mHI1sjRxluO8Y3tTTlU+My+zm+xOyD8zUPxc9TB+ZND1wtWEEsHLzdMlN
KfycQlqCJAwcqbiGJvy8+W3RNi9wCsVjxXSh00wfIcdh5P6jJHZ7yjqt4VbWuMQg
VGpPpik2/3VRvvtNLEZ3/RmtU4DSdaxGV1LU7CUiOBIfNeNREY1oMOuK4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARnK1fyq+xkX2Cgz2TyHrBVuS/mMB8GA1UdIwQY
MBaAFAp7vN5X2Fs/sarcupyZd14Z7u8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYt
ZjA5MGQ5MWRjYmY4LzEvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYtZjA5MGQ5MWRjYmY4
LzEvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5uhlynm
dUm7ajx2Ov2UzMAscYjo+spcLGFDLp7+rjQ1zXq0hNFzvph178IoRGBrx7LW1f07
P2QyHQA5Pd6O4Am+7/Z65ICi6IKOk3gI2ePlZlyBcXy6q9WAewRgo0lTHYBNqaLj
84yzJEwtSdNwJf4gSrpKFWrPAm8pjqU/wRm40GPWuo+m2Qol7dos3gesRo+EO4yE
MXVm7ouKMool1/36MH/OK7bkcn6wE2gTOnJR/hCzBjnzZ/nxecUgT+cPCow78Vzl
XdRby3HQLRI9jP0SczBGCc5GcmdaDkKCu2SqHgCbd3VuBBGdPx1HP/L9qEmvfu+X
Uq6Pxjn31rUsXg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:04 2026 by rpki-client