Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: sJAMNzhwHUOxTcPvDz9JMmJS2QWgyzCpsDn1LrkTbIw=
Subject key identifier: B5:95:4F:1C:23:65:EE:72:5F:99:FD:6A:D4:F0:65:9A:84:72:4A:A2
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019F8720435DDC70C39E7A54E55AE5AB97CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0390
Signing time: Wed 22 Jul 2026 00:01:06 +0000
Manifest this update: Wed 22 Jul 2026 00:01:06 +0000
Manifest next update: Thu 23 Jul 2026 00:01:06 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: YSmB80LCdWG1HX9kVGcWenz0JI+si2YbiTHh91GwzUk=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:20:43:5d:dc:70:c3:9e:7a:54:e5:5a:e5:ab:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Jul 22 00:01:06 2026 GMT
Not After : Jul 23 00:01:06 2026 GMT
Subject: CN=b5954f1c2365ee725f99fd6ad4f0659a84724aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:ac:59:a1:a9:bb:3c:c6:dd:ea:9b:47:94:
63:6e:3a:e1:73:3c:77:05:13:ae:bd:87:e3:08:2b:
fc:7e:6a:86:28:c5:74:7f:a7:b4:d9:11:6f:3c:a6:
d6:83:57:a9:78:75:ac:39:2c:f7:89:fa:c4:36:bb:
23:8d:73:e4:b6:64:a0:65:43:ee:02:84:5d:e2:e6:
19:e9:e9:9d:35:e1:d6:ad:ca:a9:0c:f2:34:a2:4e:
69:b0:d2:c0:dc:d9:9e:7b:dd:0c:ae:87:b7:9e:1e:
aa:16:7f:42:58:88:05:ea:64:74:82:ff:a2:e2:8c:
4f:85:99:ae:b0:a0:1b:c3:c1:a4:7b:d2:16:39:ec:
a0:4a:f4:95:49:71:84:5a:b1:be:27:8a:f8:60:12:
2d:8c:db:74:b7:29:56:e6:32:43:03:f2:1a:49:56:
8b:0e:a1:37:47:a7:76:43:bb:86:5b:6e:f4:87:e3:
8a:94:79:69:1e:1f:a9:d1:27:f2:bd:b1:c7:36:2c:
55:c5:55:67:2b:a1:31:8a:f3:c3:6e:33:ce:f2:83:
71:1f:f1:07:ef:08:8b:26:dd:8f:1a:82:9c:ca:76:
3a:f8:51:22:02:06:d6:dc:31:28:ef:bf:cc:ae:a4:
d5:7b:23:45:0f:05:74:a1:86:a7:21:c4:d3:ce:25:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:4F:1C:23:65:EE:72:5F:99:FD:6A:D4:F0:65:9A:84:72:4A:A2
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:6a:68:d7:e4:09:17:b8:a3:29:7b:d4:51:fa:e6:34:94:
f6:6b:14:d8:90:ba:9d:88:bd:4d:09:c6:7e:4c:44:02:15:3b:
d6:fc:7d:e7:c0:e6:02:ce:ab:d7:00:e2:33:ba:83:81:85:bb:
95:0c:96:51:49:62:45:49:9f:64:47:74:79:55:a6:04:b3:26:
8f:57:05:42:fc:ef:7b:0a:31:3d:3e:83:9a:f8:8a:8d:b1:35:
eb:8e:3e:ff:b0:a3:cd:4f:b3:25:39:26:76:a1:64:c2:42:92:
13:79:b8:a6:83:0f:d7:43:4b:f0:b7:7a:a6:91:cc:8e:6f:e7:
d5:a4:c4:e0:76:3b:08:81:1d:b7:e6:58:52:c1:21:05:21:6e:
2e:81:5f:9b:60:5f:52:1a:d6:be:a5:56:59:68:e5:b2:8a:f9:
b6:9a:3b:b1:d3:da:4d:fd:42:cd:37:49:d4:97:3f:f9:d3:b9:
04:9c:4f:c3:79:2a:6c:0c:e1:71:0e:4c:0e:6e:2c:c3:4a:45:
3e:94:c5:6f:2e:55:42:6e:b9:50:81:0c:87:e1:1b:91:f7:c0:
2a:a6:6c:d1:30:14:a1:42:b7:16:6d:29:aa:1f:15:be:d9:a8:
b0:f5:d3:2e:17:d2:e7:b4:7f:f6:50:a1:d9:aa:02:f7:41:9d:
10:01:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:04:24 2026 by rpki-client