Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File: Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier: FozTeal3ZJ3AcQaYrmnDzd27K6ysjrCQAtcwCTpgQQ8=
Subject key identifier: 20:4E:0C:85:DE:58:6D:FF:7E:0F:45:E3:EB:6C:C0:DB:A3:07:10:55
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer: /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial: 019CE6DB4B429B4466D0622B826363E6EA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number: 0A
Signing time: Fri 13 Mar 2026 11:00:57 +0000
Manifest this update: Fri 13 Mar 2026 11:00:57 +0000
Manifest next update: Sat 14 Mar 2026 11:00:57 +0000
Files and hashes: 1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: qDa5cVhStfeaG+VCZ8eBIB+hGWK5YIpV4gSGYTHwSvE=)
2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:4b:42:9b:44:66:d0:62:2b:82:63:63:e6:ea:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Validity
Not Before: Mar 13 11:00:57 2026 GMT
Not After : Mar 14 11:00:57 2026 GMT
Subject: CN=204e0c85de586dff7e0f45e3eb6cc0dba3071055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:e7:85:5f:4b:71:ee:a0:4d:f7:44:9b:42:
44:c8:33:2b:f7:57:ee:53:4c:ce:5d:b2:00:09:82:
79:be:68:9a:6b:2a:df:88:da:94:09:6e:d3:f5:d4:
18:92:08:70:3e:5b:fc:78:19:bc:42:d3:00:bf:08:
cd:49:bb:c1:6f:31:f2:24:e7:86:25:af:f1:6a:31:
d9:96:96:00:12:a5:d8:a6:d8:75:0b:b4:cb:47:86:
f8:cf:9f:02:2f:9e:fb:e8:40:ca:29:ad:9c:90:33:
e7:f3:48:f4:c8:6d:b7:a8:bf:8f:25:bf:87:11:79:
cb:3a:e6:e0:aa:d3:59:94:25:d5:b4:8d:12:88:e9:
66:49:32:1d:57:4d:1e:c5:62:9d:4a:06:56:59:f9:
2f:64:07:9c:a9:25:ad:9e:70:75:3a:19:06:bc:66:
40:60:58:ed:a5:57:65:d3:a5:ab:f7:8c:98:e1:55:
a4:a7:78:0f:31:01:cb:fe:3e:ef:d5:ae:57:c2:86:
38:e7:56:ce:e2:69:9d:86:c6:9f:1f:a1:da:e1:d6:
bb:ae:4c:1c:09:e7:fe:e6:5c:a9:94:6f:78:34:0b:
bf:87:9c:32:c8:75:87:b8:e8:39:ef:7c:7e:5a:69:
75:bf:de:30:2b:d2:21:6f:b7:0e:ca:11:8e:fe:56:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:0C:85:DE:58:6D:FF:7E:0F:45:E3:EB:6C:C0:DB:A3:07:10:55
X509v3 Authority Key Identifier:
keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bb:b5:0b:07:53:37:b8:25:f3:e6:5f:47:49:63:9d:00:4d:
6e:1a:c0:44:7c:da:cd:89:f1:1a:26:e0:48:11:de:40:80:c8:
68:cc:0c:94:62:2a:5b:3e:37:06:7d:87:59:42:96:ad:94:7d:
39:24:60:b7:48:dc:74:97:2b:f4:1f:be:43:e7:44:11:bc:95:
85:59:b5:2b:2a:97:41:2f:60:cf:a8:8b:93:5d:31:7a:8c:72:
50:ea:e9:59:f8:0f:f5:0b:64:e7:0d:dc:3c:f0:f4:e4:d4:d0:
7b:4b:68:fe:fb:42:ec:15:a1:b5:f9:22:96:37:46:82:e7:e8:
38:7b:af:ad:fc:e0:bf:13:f1:ab:27:97:c8:74:d5:79:c9:17:
10:2a:17:78:a1:4e:75:48:82:b3:60:c3:ec:0b:11:c9:00:ab:
33:52:24:1d:ec:a4:23:c7:9a:b0:39:26:52:94:0c:98:e9:b6:
84:e9:4f:84:e6:db:44:b0:b6:a6:5a:82:a7:24:87:81:5b:d4:
c1:c0:a0:80:9a:c7:db:9d:7d:7e:47:5c:a4:1a:bc:ae:4f:b1:
5b:9a:d1:94:f6:d5:e7:c9:eb:84:80:de:07:07:37:ba:6f:2d:
8f:64:55:ac:7a:99:c9:14:92:39:62:cd:72:62:cb:51:18:e0:
0f:67:3a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm20tCm0Rm0GIrgmNj5uqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhN2UyYjA0N2JiYWY5NmM0N2M5YjI3MjE1YmExYjEwZTYx
YWJmNmYwHhcNMjYwMzEzMTEwMDU3WhcNMjYwMzE0MTEwMDU3WjAzMTEwLwYDVQQD
EygyMDRlMGM4NWRlNTg2ZGZmN2UwZjQ1ZTNlYjZjYzBkYmEzMDcxMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F7nhV9Lce6gTfdEm0JEyDMr91fu
U0zOXbIACYJ5vmiaayrfiNqUCW7T9dQYkghwPlv8eBm8QtMAvwjNSbvBbzHyJOeG
Ja/xajHZlpYAEqXYpth1C7TLR4b4z58CL5776EDKKa2ckDPn80j0yG23qL+PJb+H
EXnLOubgqtNZlCXVtI0SiOlmSTIdV00exWKdSgZWWfkvZAecqSWtnnB1OhkGvGZA
YFjtpVdl06Wr94yY4VWkp3gPMQHL/j7v1a5XwoY451bO4mmdhsafH6Ha4da7rkwc
Cef+5lyplG94NAu/h5wyyHWHuOg573x+Wml1v94wK9Ihb7cOyhGO/lZ3CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBODIXeWG3/fg9F4+tswNujBxBVMB8GA1UdIwQY
MBaAFAp+KwR7uvlsR8mychW6GxDmGr9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ240ckJIdTYtV3hIeWJKeUZib2JFT1lhdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2RkM2QtZDUzYi00ZTIxLWIyNDEt
NmRkZWVjYjQyOGE2LzEvQ240ckJIdTYtV3hIeWJKeUZib2JFT1lhdjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2RkM2QtZDUzYi00ZTIxLWIyNDEtNmRkZWVjYjQyOGE2
LzEvQ240ckJIdTYtV3hIeWJKeUZib2JFT1lhdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbu1CwdT
N7gl8+ZfR0ljnQBNbhrARHzazYnxGibgSBHeQIDIaMwMlGIqWz43Bn2HWUKWrZR9
OSRgt0jcdJcr9B++Q+dEEbyVhVm1KyqXQS9gz6iLk10xeoxyUOrpWfgP9Qtk5w3c
PPD05NTQe0to/vtC7BWhtfkiljdGgufoOHuvrfzgvxPxqyeXyHTVeckXECoXeKFO
dUiCs2DD7AsRyQCrM1IkHeykI8easDkmUpQMmOm2hOlPhObbRLC2plqCpySHgVvU
wcCggJrH2519fkdcpBq8rk+xW5rRlPbV58nrhIDeBwc3um8tj2RVrHqZyRSSOWLN
cmLLURjgD2c6Uw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:26:56 2026 by rpki-client