Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File: cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier: ttNwZYTpFvE/LZzPH0AQ8mf/1bHw67SpHlzeXzLB8Kg=
Subject key identifier: C2:89:F5:00:2B:F0:B7:D7:F5:CD:1F:53:FE:5C:F4:4C:9B:6D:6B:C6
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer: /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial: 019EFD602088BF408D9092E3D15A4DDCACDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number: EA
Signing time: Thu 25 Jun 2026 06:03:15 +0000
Manifest this update: Thu 25 Jun 2026 06:03:15 +0000
Manifest next update: Fri 26 Jun 2026 06:03:15 +0000
Files and hashes: 1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: 3/Knqiv+I92nbstAJm9K78lTx5M5tFRjIeBUoUi0A3g=)
2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:60:20:88:bf:40:8d:90:92:e3:d1:5a:4d:dc:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
Validity
Not Before: Jun 25 06:03:15 2026 GMT
Not After : Jun 26 06:03:15 2026 GMT
Subject: CN=c289f5002bf0b7d7f5cd1f53fe5cf44c9b6d6bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:68:96:db:f5:3f:1a:09:35:42:12:e3:93:
0a:dc:18:4a:6e:cc:14:c6:f1:bd:f8:7a:13:4c:38:
a4:d5:2a:7d:7a:98:f5:2a:4c:ba:5f:4f:65:39:3b:
54:92:3a:48:c7:a2:ba:22:c4:58:93:2e:e7:af:1b:
5d:93:c7:fe:0d:25:64:c6:24:dd:17:e5:67:a8:a9:
6e:c4:dc:de:5e:d5:59:a1:30:3e:69:c2:0a:c8:e9:
c5:47:07:a8:6c:82:31:3a:65:fa:c9:9b:3f:a7:d5:
b4:c4:55:e6:4e:24:7d:24:32:ef:e6:55:45:ae:27:
6f:2b:8f:fb:30:fe:1c:fa:fd:b2:a0:0e:61:55:01:
c5:40:0d:e0:5e:92:2c:f9:53:2c:6f:6e:22:65:b9:
3b:ef:bb:d1:61:cf:0b:76:18:5d:bd:cd:68:67:8a:
3a:58:da:e6:52:b5:05:f6:2f:cd:fb:8c:93:eb:6f:
52:b7:31:43:d3:d5:f1:1c:eb:85:c6:43:4c:fb:91:
99:4f:ec:e3:78:3a:51:d8:71:90:a4:a2:ce:68:fe:
9d:27:44:69:e5:75:ae:35:75:db:88:81:fe:a2:42:
9d:30:56:0e:cb:2f:ad:99:1a:a8:47:1e:94:9c:b6:
f6:4e:90:ac:09:3a:7b:1e:db:23:4b:89:5c:bf:0d:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:F5:00:2B:F0:B7:D7:F5:CD:1F:53:FE:5C:F4:4C:9B:6D:6B:C6
X509v3 Authority Key Identifier:
keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f7:60:8d:27:a2:a6:e5:c8:ba:eb:72:9a:26:ad:18:d8:ad:
64:48:be:af:dd:f8:72:4f:2a:a2:14:c5:4f:cd:62:74:f1:2b:
12:e4:a1:eb:ad:1b:35:70:3e:8f:97:c2:5e:a3:bd:91:d5:fd:
93:58:9e:2c:3d:99:80:35:4d:c0:2f:44:9a:22:9d:c4:5c:80:
3e:b5:d6:65:e0:03:69:86:52:df:71:50:18:de:51:0f:fd:8d:
ab:a1:6c:7a:4e:e6:9f:dc:8d:47:6c:1f:f3:e9:6a:87:25:2b:
2f:59:78:93:a3:7a:33:f0:c9:25:b5:62:17:14:81:b7:fc:f0:
f6:cc:97:35:19:ec:02:c2:84:dc:99:35:60:4b:41:f3:65:bd:
66:f3:61:8b:46:22:b6:16:81:d9:5e:ea:e0:14:e2:6a:63:67:
e7:c2:2a:14:02:05:6b:d7:73:be:0f:35:a2:0b:c2:61:95:20:
34:0a:6f:8a:c9:37:93:10:fc:31:89:2c:b0:07:27:97:6a:cc:
87:66:31:fc:18:3b:cd:1a:3c:ed:d0:38:b3:6a:0d:31:03:0a:
07:87:f1:38:38:06:3b:2f:d5:b8:f3:db:af:88:3b:cc:98:83:
21:bf:be:a6:65:1c:92:db:b2:41:8a:c6:54:8e:44:bf:3f:6c:
c4:76:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:51 2026 by rpki-client