Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: kpccFFahC6jT6TGwocEqEs+8HR1Gs2OM+87HuC4XAhI=
Subject key identifier: 8A:A2:58:CF:74:3A:63:C2:C6:CC:E8:64:E1:27:35:85:58:88:3D:6A
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019D37534168378FCF26BA7DE8C9408B858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 1656
Signing time: Sun 29 Mar 2026 02:01:36 +0000
Manifest this update: Sun 29 Mar 2026 02:01:36 +0000
Manifest next update: Mon 30 Mar 2026 02:01:36 +0000
Files and hashes: 1: B4wp10Y_OEoAGIhud1FmzSKVNw8.roa (hash: ju3vXvQ0WetT2UBij+oQFWcTFWG7kepUg6hRZtzRnOA=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: vxFGwcoZXBgQyAGA96twSYzV1MRf6w/AcFMXRfoWLiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:41:68:37:8f:cf:26:ba:7d:e8:c9:40:8b:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Mar 29 02:01:36 2026 GMT
Not After : Mar 30 02:01:36 2026 GMT
Subject: CN=8aa258cf743a63c2c6cce864e127358558883d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:5a:a4:f1:e7:88:09:ee:67:b2:91:7d:b0:
34:5a:c0:49:39:0c:eb:1f:e6:92:45:78:00:41:f1:
04:3b:84:0f:ec:c9:f2:84:31:f0:db:f8:46:a2:57:
88:74:8d:96:5d:33:e7:9d:12:46:14:9b:d8:24:d8:
2c:0f:fa:85:57:e4:09:1c:71:5f:f7:d5:bc:39:ee:
c3:92:95:50:52:5e:fc:a4:e4:b7:06:49:ef:46:be:
17:11:99:f0:ec:ef:d9:82:57:72:98:8e:88:09:a3:
02:31:be:08:bc:b5:d6:b5:a1:d8:08:47:00:11:05:
d3:fa:3e:7c:3b:2f:8e:f6:29:12:7b:a6:f8:21:f8:
4b:eb:00:d4:ec:23:46:57:3a:6e:30:9d:7d:0b:bb:
19:1d:27:bf:6e:6e:f6:e5:cf:dc:2e:0f:2e:a5:16:
37:32:1d:34:2c:30:18:38:8f:3c:65:3e:4d:f1:25:
6e:09:15:32:45:5e:e4:b0:d8:d5:24:b4:d7:36:d9:
f7:dd:e1:b6:03:89:fc:c5:cf:2d:24:e3:c0:07:bd:
9f:76:3e:c8:3f:c5:0a:7b:a2:a6:0b:0a:10:a2:0c:
23:8f:8f:68:fb:8d:47:a9:13:b5:f8:4e:95:e7:59:
0f:f6:e7:81:fc:cf:7e:14:30:1c:ec:d1:fc:fb:3b:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:58:CF:74:3A:63:C2:C6:CC:E8:64:E1:27:35:85:58:88:3D:6A
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:d0:af:1e:6d:ef:22:bd:10:15:6a:68:30:5d:d1:29:f7:
ab:38:0f:6f:a6:b4:76:a9:1c:e0:7a:08:5e:24:26:bd:c0:8d:
a4:99:76:cf:2e:85:b9:c6:0c:f3:04:b8:a3:ff:48:90:99:a2:
25:ea:aa:cc:c2:73:b9:c4:fe:fc:6a:61:29:ae:3f:a9:d0:7c:
16:9a:73:e4:df:b4:8d:71:ca:77:fc:80:2e:db:6d:e7:c0:f5:
f4:76:2d:63:28:66:9d:c2:92:3b:0a:92:85:25:d5:1b:ad:8f:
bc:ea:b8:55:60:87:45:00:a1:a2:fe:ae:f0:3f:63:b6:75:4b:
3e:4e:52:7e:64:90:1d:33:c3:86:35:3a:54:fe:7c:20:06:e1:
0b:e9:54:66:1c:b1:cc:8c:72:c3:50:b6:90:cb:ee:9d:0c:2f:
92:77:a4:d0:63:fe:ca:13:4c:9a:68:4c:bd:24:cf:52:f2:c2:
c2:9b:02:2a:32:72:62:cc:c9:20:11:94:44:80:05:fa:54:2f:
58:b1:df:da:a6:64:78:f9:e2:bd:5b:92:54:b9:a5:aa:5d:d9:
cd:ec:05:cf:ed:ca:36:29:2d:db:df:0f:4e:f2:14:07:6f:68:
3a:40:67:51:5a:92:05:05:6c:20:02:38:78:dd:4f:23:5d:f9:
d6:c7:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client