Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: /2LAGZDzVZpazdymZpuLcx70bqD557+j3KlgYaI+1BQ=
Subject key identifier: 27:F5:4A:06:17:19:92:82:89:7E:CB:37:8A:18:28:40:ED:4E:EF:E0
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 019D265F2E6C822CD90396C0640E65E47800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: fvAe2A9d7HKuR02aCDPkDZPtwyeq66AH03q43qF8jCs=)
2: THoFRGj7we5B4orPSAEMrZc2v9I.roa (hash: nx8ZhN2tRi/Vu5vUK7/jsnnIAjWNN0LM5ZVA5cvmy60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2e:6c:82:2c:d9:03:96:c0:64:0e:65:e4:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=27f54a0617199282897ecb378a182840ed4eefe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:ce:cc:b9:bc:9e:77:d5:d7:17:cd:e2:9d:
61:35:90:45:18:88:74:e0:08:a0:68:80:4f:2b:9d:
60:ca:e4:10:85:78:e0:fa:14:6d:7e:4c:8b:3a:43:
1e:01:16:23:15:eb:02:d8:97:bd:6c:b6:5f:d9:7f:
a1:81:0c:b8:e1:24:53:44:19:c3:fa:72:bc:bf:b6:
5c:ad:7a:cc:05:d6:04:81:06:d3:5c:eb:67:52:e4:
4c:e5:0c:84:e3:1a:f4:90:6c:d3:97:b7:2c:bc:7c:
22:f1:10:82:ae:62:2c:c8:79:fd:6d:22:af:ee:86:
3d:45:dd:dc:92:49:93:31:71:bc:67:2f:50:9a:e2:
5b:21:d0:c9:f7:94:6f:1a:00:eb:31:1b:a1:8a:df:
3e:5b:2e:7b:3f:50:cf:02:4c:52:54:74:ae:8b:1b:
b2:3d:35:ea:bf:1a:15:83:f7:58:53:e1:14:3f:3e:
69:ba:62:3b:50:fd:5f:cc:79:9d:ee:a5:18:9c:f6:
f7:22:5d:17:20:1e:5d:3d:9d:1e:81:37:b4:73:a0:
be:ba:d6:fa:8e:4b:ce:77:18:08:f1:50:1d:bf:cc:
de:1a:5c:8c:b3:b4:ba:81:00:3a:a0:0a:00:56:63:
87:21:f0:73:f9:d9:ff:b0:e0:1c:12:2b:1f:57:db:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F5:4A:06:17:19:92:82:89:7E:CB:37:8A:18:28:40:ED:4E:EF:E0
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:20:cf:e3:bb:8b:a5:7c:94:25:1b:e4:40:f3:dc:8b:3e:
d3:27:b4:d4:68:be:84:80:8c:38:ee:97:ba:48:68:aa:b3:c0:
29:7b:a1:56:70:ad:aa:2e:ed:56:e0:4d:91:19:55:27:64:fb:
25:fd:27:a4:80:49:ac:b3:b5:94:01:e5:b5:15:2a:80:1c:83:
9b:59:a8:bc:57:81:a0:9e:6d:1b:2a:b8:38:f5:2c:d9:ad:9a:
67:1e:74:48:29:51:b1:20:28:e9:84:22:e0:92:cb:31:33:ce:
60:32:4f:ec:55:0b:72:e1:2a:c8:7a:7f:81:c7:61:c5:5a:90:
37:2a:65:dd:54:23:5d:7c:e9:a2:02:ff:f4:8c:ec:8e:1f:7b:
20:bd:8d:35:75:4f:66:ee:0f:2a:24:95:cd:94:4e:f3:38:af:
81:d5:03:01:2f:de:53:d1:a2:51:12:aa:4f:13:48:5a:f5:2c:
24:1f:93:8d:07:aa:05:1a:30:96:13:b9:71:fd:b6:36:7d:da:
58:b3:93:e9:aa:91:a4:53:19:b8:bb:5c:89:a8:89:38:b6:37:
4f:7e:2f:f8:b1:32:eb:d8:9d:38:a8:8b:60:c6:8c:54:db:f0:
21:0b:76:e1:f8:0b:e7:b0:12:5a:dd:55:b6:ad:1c:6c:7f:12:
1b:37:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:03 2026 by rpki-client