Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
File: CR_17YOpg_iNWfDD5kja4LtSeJw.mft (raw, json)
Hash identifier: QlnjN9fkIaxU/FUWGGj82y3cp/DFPe75fY15DFeMqF8=
Subject key identifier: D6:CC:34:75:92:3D:73:24:C4:DD:E7:92:B9:52:8B:07:15:31:BA:22
Authority key identifier: 09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
Certificate issuer: /CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Certificate serial: 01A0D19238E7C9D8655DC9C0FF276C12A460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
Manifest number: 0129
Signing time: Thu 24 Sep 2026 04:00:16 +0000
Manifest this update: Thu 24 Sep 2026 04:00:16 +0000
Manifest next update: Fri 25 Sep 2026 04:00:16 +0000
Files and hashes: 1: CR_17YOpg_iNWfDD5kja4LtSeJw.crl (hash: hlwW+oQnz2a2/SCUJ7pAnFyMWCYSaM1SR93RQ0APisA=)
2: RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa (hash: jrK0N7c1cbcDYn7LYluZvhpwTISFdtPphVGCy6lVvQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:38:e7:c9:d8:65:5d:c9:c0:ff:27:6c:12:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Validity
Not Before: Sep 24 04:00:16 2026 GMT
Not After : Sep 25 04:00:16 2026 GMT
Subject: CN=d6cc3475923d7324c4dde792b9528b071531ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:ee:af:17:29:0d:4a:f2:82:9e:b7:69:0f:
07:36:28:34:f7:01:d8:02:cf:fb:dc:c4:fa:5d:01:
ca:97:16:e7:23:06:0f:92:6b:d3:b3:8e:63:83:83:
3d:9c:db:2c:32:6d:71:98:53:db:88:0b:2b:76:1c:
2f:aa:24:87:06:75:82:dc:1d:ae:22:7c:db:f2:39:
ac:03:ad:37:49:c5:92:11:dd:16:80:5e:c5:5d:fe:
f8:25:1e:2e:90:1c:43:63:32:5f:da:71:3d:9e:1b:
49:64:31:c5:d2:5f:28:b2:3d:c4:a0:4f:c3:87:88:
b1:b1:13:75:78:55:d2:80:1c:2b:2e:db:bf:5d:32:
b0:a3:b9:c7:54:3f:a1:95:c8:20:71:05:5b:1a:e1:
51:85:77:84:69:96:d6:aa:e3:10:84:f5:6e:41:34:
61:76:86:c0:b6:0c:22:14:b9:40:a7:51:42:68:1e:
8f:27:2b:bb:cb:02:4c:39:81:60:1b:a1:ea:de:6d:
cc:3b:ce:e9:75:93:82:fa:0d:94:38:02:59:41:01:
4f:23:b2:00:0e:77:21:39:50:df:0e:59:53:72:e6:
bf:54:c5:3e:ca:16:31:c3:56:d7:ac:30:86:9f:33:
f5:98:a3:48:00:5a:de:c0:3b:80:bd:6b:c1:e5:f0:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:34:75:92:3D:73:24:C4:DD:E7:92:B9:52:8B:07:15:31:BA:22
X509v3 Authority Key Identifier:
keyid:09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:43:c0:20:18:78:f2:b8:e9:62:43:22:a9:df:a8:b7:99:97:
6c:d7:69:90:b3:78:8f:78:a4:c2:ea:00:c4:4f:36:cd:9e:77:
42:11:54:a8:be:75:a2:ca:d7:0d:b4:2b:53:da:c1:81:76:40:
b1:51:6e:19:6c:04:05:a5:63:d6:05:c6:76:48:41:00:05:9d:
2b:1d:04:84:87:08:6d:bb:9d:79:cd:9c:ed:e5:f7:e3:dd:11:
d5:91:b2:02:4f:6a:b7:1b:d2:f9:7f:b3:48:87:4f:cc:8c:9c:
9e:48:9f:2e:64:94:34:d4:89:27:a0:cb:df:61:7c:f4:75:bf:
ac:75:06:f1:8f:c0:55:9d:aa:a8:6e:1e:4f:7b:d1:d9:3c:e3:
58:8e:9c:72:f9:e7:76:dd:47:f3:fb:ca:5e:f1:b2:0f:ac:78:
e3:56:3f:b7:7c:7b:67:12:06:56:4e:fe:1a:b9:46:e4:8e:00:
58:e8:7a:02:60:2d:c9:d4:0a:47:35:90:0a:cd:b1:c0:9f:a6:
f1:5b:02:e3:53:1c:83:06:82:d2:ee:ef:f3:81:2a:0c:73:68:
77:09:53:d0:8d:ea:6c:f0:99:7b:37:d4:d5:07:62:5c:44:4f:
96:1c:0c:08:9d:6b:69:19:e4:5a:3b:ac:40:9d:cd:88:14:c2:
e8:53:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:40 2026 by rpki-client