Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: QewfNSUjlYou1U3KinrioXL4dMttygDdgzMZhwnihoM=
Subject key identifier: 33:ED:93:CD:B3:AD:38:23:48:23:A6:C2:3A:C8:9D:87:0C:7A:D0:B2
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019E20FFA07FE5F60B204C6CF45B23DBEA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 091F
Signing time: Wed 13 May 2026 11:01:24 +0000
Manifest this update: Wed 13 May 2026 11:01:24 +0000
Manifest next update: Thu 14 May 2026 11:01:24 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: NNA6m1N56ceHXshbheNcmqjWd6pyXgDAJcIYy+GpoFI=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:a0:7f:e5:f6:0b:20:4c:6c:f4:5b:23:db:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: May 13 11:01:24 2026 GMT
Not After : May 14 11:01:24 2026 GMT
Subject: CN=33ed93cdb3ad38234823a6c23ac89d870c7ad0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:94:4c:b9:07:de:35:95:4d:8c:15:2a:f8:
83:60:72:12:8f:28:b7:45:18:a7:0b:9b:e9:c3:28:
fd:c9:6b:cf:80:3d:f4:50:37:5c:ee:7a:36:38:63:
dc:8f:c3:34:58:96:5e:1f:6b:30:fd:40:b8:d1:7f:
31:06:1b:fd:33:98:7f:6f:bc:db:c4:50:68:7f:ad:
79:a8:45:64:d4:74:fa:73:f1:f0:71:37:ad:c7:b8:
9b:cb:5e:55:dd:7d:ac:2c:ac:b7:be:9c:7c:41:78:
5b:1b:59:e5:11:6c:c1:75:09:2e:35:c6:8a:df:ac:
30:5e:98:9f:3c:3b:f4:2b:05:51:e0:e6:cc:32:ed:
04:de:8a:83:98:09:8e:3f:d9:ee:d9:81:0c:e3:a0:
fe:85:6f:31:35:9b:80:7e:93:97:21:68:c1:f6:4f:
b8:dd:86:ce:67:30:c7:28:f2:ee:d4:50:65:1d:f8:
e8:a5:4e:10:f5:9c:35:23:06:24:8d:3b:fe:4f:0d:
13:06:3c:5b:24:35:74:f5:57:aa:d0:5d:c6:bd:f7:
a4:64:39:bc:06:7a:53:e4:8c:4c:a3:b6:9e:a8:b7:
f2:c8:24:bf:f2:35:5b:88:f3:24:6c:8f:c5:c7:2e:
ed:40:74:0a:18:a3:92:eb:1c:fc:18:07:48:65:f9:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:93:CD:B3:AD:38:23:48:23:A6:C2:3A:C8:9D:87:0C:7A:D0:B2
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:93:31:c4:a0:1e:77:36:47:41:dd:43:29:59:6f:c7:18:d5:
84:f7:06:fb:43:26:28:78:55:99:4c:74:b2:d1:20:f5:8b:7b:
85:02:89:4d:d6:14:4f:04:0d:b2:39:6f:3e:ec:64:42:68:c7:
82:90:73:cd:60:ca:25:7f:5b:0f:e3:ef:52:5e:fc:5d:ce:1b:
bf:3e:83:a2:65:45:e9:16:ee:00:58:83:42:44:49:2c:37:d0:
fd:1f:5a:e0:7b:ca:ee:5f:5d:a4:78:d3:78:cc:cd:e5:89:6d:
f5:ca:b2:cd:b0:93:d8:00:4f:e0:a4:f6:8d:b7:e1:19:13:ea:
ce:46:9d:48:e9:37:b2:33:51:6d:d7:a9:bc:0d:38:90:e6:1a:
11:52:cb:1f:b4:07:51:f3:9e:8f:e8:71:39:ae:78:62:17:50:
25:65:c6:2d:82:ca:8c:2f:96:78:80:9c:a2:34:56:f4:93:96:
21:0f:40:2a:01:aa:c0:29:d0:16:4c:78:44:af:c9:4b:ff:7d:
ac:57:b6:11:c5:41:1a:52:cb:9f:2b:49:ee:f5:06:a7:40:05:
a1:86:f0:fe:65:dc:77:db:6c:df:2f:08:32:23:f1:a3:cc:b8:
63:14:41:b8:1f:cd:9f:1d:1d:bc:2f:0a:64:b5:1e:ce:77:a3:
4c:28:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:26 2026 by rpki-client