Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: MH2SQQxSL2t8LMoaP+Uv5SmsZYX4SGS7su2cRmKw/lI=
Subject key identifier: 9C:FD:E7:78:73:10:26:95:C9:13:75:41:6B:9D:85:35:2C:36:C3:6A
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 019D284E0505F0E232C2E707CEA3E9EF26ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0C28
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: YzB7lmnaxe6KzTZ2IQfFLWEotnY.roa (hash: E0OkGaGBq/geU/X0+E6JxDiI+vPM6+Zn92glPSSxcDs=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: RcA0SBzzK4ODfOMqw6F/hYofUt+vXMf3ETqglazxKVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:05:f0:e2:32:c2:e7:07:ce:a3:e9:ef:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=9cfde77873102695c91375416b9d85352c36c36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:d7:ef:4e:90:bd:53:62:d7:59:bc:e9:1c:
dc:ed:b1:13:41:00:8b:04:1f:08:c6:f7:64:c9:14:
85:93:b2:73:7a:1a:5f:32:eb:7c:fb:9f:62:94:ce:
e4:2e:14:15:20:f2:40:f8:64:d5:80:f9:7e:c9:6f:
39:34:3f:9f:4d:e0:44:93:78:1e:da:da:eb:04:b2:
82:63:e0:3a:7a:01:1b:06:78:cb:25:5c:d3:ce:7e:
b0:1c:aa:a8:7a:0a:9d:65:86:d3:3b:39:3d:17:4f:
ca:c8:4d:d6:ca:b1:fe:c2:ea:a9:50:78:72:17:f1:
ad:e1:9e:c2:cf:b7:90:97:96:94:5c:31:c6:64:49:
ea:a7:98:d7:d4:20:c8:8c:bf:b9:16:f4:96:a3:0d:
74:58:e0:e3:fd:f9:49:c4:b8:d9:61:00:c3:7a:92:
23:01:2b:71:36:5e:81:89:19:f3:4b:60:3c:a3:0b:
d4:fa:93:7b:99:c9:9d:99:1c:f4:44:28:d9:1b:c7:
bf:ff:99:94:50:4d:59:89:52:77:5a:da:54:e9:66:
d4:76:85:aa:0a:2c:13:65:48:38:4c:07:7b:58:69:
dc:ce:63:2d:bc:5e:c3:98:5a:1b:f2:2d:a0:ef:83:
e3:d5:70:6a:27:14:a0:ca:bb:dd:6f:fe:b1:24:c1:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:E7:78:73:10:26:95:C9:13:75:41:6B:9D:85:35:2C:36:C3:6A
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:96:6b:e5:91:e0:a3:37:5c:fe:06:5a:21:7e:6a:f1:87:8e:
b8:3e:d2:2a:29:3b:2b:e6:3c:f6:56:36:96:29:96:fb:e8:f8:
93:66:87:09:7e:36:55:6d:92:dc:3a:77:7c:cd:88:3b:68:16:
72:54:fd:4d:57:f6:5e:db:7d:0c:61:41:ea:a1:16:ab:57:a1:
0e:86:ab:36:e0:2e:5d:ee:02:75:9f:4c:b7:8c:9f:dd:be:42:
df:3f:1b:95:26:a4:fb:88:f2:cb:99:a4:81:cc:e7:eb:f5:68:
6f:90:79:4f:ab:67:b3:2b:22:13:c3:f0:1e:8d:75:d6:f7:dd:
0b:42:c2:a4:41:bb:09:92:db:13:c6:be:93:44:a4:b8:94:4a:
97:a5:9a:96:ec:8f:cd:bc:ab:8f:f7:fe:79:bc:83:e0:c0:ce:
3b:3b:ec:bc:5b:63:63:6c:4c:e6:9f:d1:c6:db:be:ec:13:5c:
fe:77:b8:09:b0:32:10:ff:ec:77:b3:a6:36:4d:e4:6f:de:2d:
0c:11:4a:f2:76:6c:07:9f:4b:31:fd:e9:b4:ac:64:a5:76:38:
6b:f1:90:a4:df:93:89:9b:e2:f0:df:83:9d:ad:05:d1:ad:bc:
ef:ac:90:78:64:e0:b9:a4:b4:0d:1e:3c:2c:48:b7:3c:66:d5:
69:52:31:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:16 2026 by rpki-client