Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: TaPwgKd4Rwtd2OgTkcGAwTS0XSfGChsNxJufSElC9Kc=
Subject key identifier: 21:DD:03:27:D7:B6:9D:B9:67:A8:20:36:47:D8:17:A5:7A:6C:0F:B0
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019D265FC3BDEF7FEFD7E03C5F05241F96DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0F58
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: DDjGmgPXwZ7MU+eIIj6AdsiFi5aGXyuN5p1T4LnvYhU=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:bd:ef:7f:ef:d7:e0:3c:5f:05:24:1f:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=21dd0327d7b69db967a8203647d817a57a6c0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:7b:4b:3d:15:b5:08:64:a4:4a:ce:70:4d:
51:4b:eb:79:28:bb:c5:bb:38:e5:d4:e0:8f:37:7c:
20:39:62:5e:e9:1a:2e:1c:31:b2:3c:4a:6b:0d:32:
36:03:15:3f:41:cc:b8:0a:8f:d6:77:4f:98:2b:41:
3b:7c:9c:d6:be:88:76:c1:04:82:aa:93:4f:22:b0:
97:c0:c3:85:40:4a:41:8d:cf:cb:74:50:49:58:1f:
48:79:34:13:cc:bb:21:23:f5:69:5e:8d:41:ab:07:
1a:8d:19:47:1a:9d:a9:ab:9d:9c:04:f8:5a:cb:bd:
0b:52:07:f5:fa:24:ea:80:2a:eb:d4:51:69:a3:76:
a0:1d:00:ed:84:7c:61:36:99:18:da:a6:60:e5:4f:
a3:95:63:ed:88:3f:22:c4:97:42:ad:79:a7:bc:44:
1d:8c:be:3d:a3:66:19:cb:26:46:f9:18:29:d9:39:
82:6a:5a:9b:6e:8f:32:6b:cc:85:11:ce:98:d3:c7:
e9:a6:04:9f:ff:b3:cb:ad:c0:43:e6:5d:77:88:0d:
42:44:0d:63:b1:fb:b1:ad:e9:80:95:b4:07:ed:42:
a8:9c:9c:5e:fc:6d:4c:35:43:39:2b:6e:29:02:e1:
bd:db:97:1a:03:3c:5e:55:f0:c7:3e:e0:c9:51:6e:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:03:27:D7:B6:9D:B9:67:A8:20:36:47:D8:17:A5:7A:6C:0F:B0
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:33:9c:2e:07:d7:d2:92:19:79:fb:8d:1c:6b:dd:25:21:
eb:1f:bc:d8:d7:52:fd:88:93:17:b9:45:71:39:36:36:20:5c:
2b:b0:49:27:05:45:f6:96:8e:83:8c:d4:a2:f2:6a:32:90:fb:
bd:bc:c5:1a:ba:7e:d9:f1:99:15:09:ca:cf:be:71:37:57:5e:
8b:e3:8e:3c:b3:66:eb:9b:57:8c:88:13:43:1f:15:2c:69:e0:
fb:8b:a8:16:3f:16:ed:86:dc:52:48:0d:19:1b:4f:18:3e:4e:
f1:8b:b1:ba:d2:eb:ea:ef:15:3c:34:bf:71:3f:4d:33:2f:f5:
9a:d3:f2:4f:b9:81:b8:92:44:86:7b:eb:83:c9:74:39:b0:e6:
94:8f:8d:f8:d3:c0:27:28:99:4c:e1:cb:ce:cd:e6:ea:8d:29:
06:00:32:cf:55:14:9d:3b:e9:6d:2c:c7:49:ba:42:78:72:3c:
9f:93:27:c6:7d:8b:a5:90:71:97:d2:f7:c7:6f:98:85:25:a8:
0e:d1:dd:b6:7c:30:32:5e:4f:8d:9a:4e:99:fd:99:87:67:7e:
2b:e0:e7:26:2e:4d:70:dd:74:6c:77:d3:ac:cd:ea:cc:ff:b5:
96:39:6c:db:33:7e:4d:95:a5:a2:d0:1a:cd:d3:c2:75:81:9b:
e0:5a:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:18 2026 by rpki-client