Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: cqfmExmQdCYmtRdZnRpKBlN42kvdOsoPzwEU1i+M06Y=
Subject key identifier: AF:6B:43:7F:32:B7:41:CE:A1:C6:D1:83:DB:38:64:1C:0F:FF:18:B2
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019D3A1D0419414FEA817C24404E1321D1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:13 +0000
Manifest this update: Sun 29 Mar 2026 15:01:13 +0000
Manifest next update: Mon 30 Mar 2026 15:01:13 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: 2u7jOBzu05FMFOu8ZfmU0D8c3HArKKyYnXJ26ebJFOY=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:04:19:41:4f:ea:81:7c:24:40:4e:13:21:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Mar 29 15:01:13 2026 GMT
Not After : Mar 30 15:01:13 2026 GMT
Subject: CN=af6b437f32b741cea1c6d183db38641c0fff18b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:02:6a:a5:47:1e:f0:e8:f3:8e:ed:c4:3f:
f7:fd:01:ba:06:83:02:96:4f:54:e2:1d:82:23:b6:
03:6e:bc:5a:b3:b2:5e:ae:02:01:13:40:9d:14:2c:
7d:ed:b9:7d:0a:72:91:eb:18:a9:08:7e:be:c6:b8:
95:eb:6b:f0:25:49:cc:8f:31:96:5a:88:06:56:49:
c5:ad:3c:a6:55:16:db:09:d8:6c:64:85:ec:6f:6f:
88:27:bd:66:dc:23:a6:da:93:91:46:41:46:dc:86:
23:f6:7b:35:04:d7:b4:89:9c:bc:84:06:06:f3:84:
42:4e:d3:53:15:73:28:4d:00:81:c6:ef:17:69:17:
82:89:10:5c:ea:ea:49:cc:b5:35:83:73:5f:35:18:
bd:0b:97:49:14:57:c1:2b:96:37:f4:78:5c:9c:4b:
6e:d0:e5:d8:3a:5a:93:4a:c2:84:fd:fd:8e:05:e8:
e4:61:27:9c:83:f0:f4:20:88:b9:1f:21:af:a1:1b:
ad:b7:42:7b:97:36:96:38:b5:7d:1c:57:cd:4a:f0:
5a:53:c4:43:15:20:51:a2:11:a0:95:74:91:a4:c4:
a7:68:a3:d4:dd:b2:1d:3c:3c:b1:bf:8c:ef:2b:36:
48:5a:45:c5:e1:ef:40:b8:38:7f:ca:ea:b7:94:99:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:43:7F:32:B7:41:CE:A1:C6:D1:83:DB:38:64:1C:0F:FF:18:B2
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cf:3d:10:90:27:4b:ed:87:f8:41:12:27:39:60:50:1b:06:
f9:9d:85:3e:f1:9a:06:61:e3:6e:f6:49:d1:fc:64:42:66:2f:
03:76:f1:b7:2a:74:42:89:4b:0e:fc:6f:a5:de:57:0e:9b:d4:
98:bf:2c:71:f0:53:97:d6:23:51:d4:92:ae:91:ee:1d:36:e5:
05:3c:af:cd:fb:62:89:a3:46:e9:47:6a:7b:0d:fa:0d:64:e9:
cf:d6:be:38:09:84:99:86:31:92:8f:47:2e:a3:11:f3:42:a5:
6d:40:1f:14:0c:c3:ba:c0:c6:d0:6b:5e:7d:80:88:ca:f1:b5:
4c:fb:d7:35:17:82:04:f1:39:c7:b4:85:10:e8:66:66:90:46:
15:28:93:23:15:1a:d1:c9:aa:3e:4c:62:e0:b1:e9:79:0c:11:
99:eb:76:84:5c:4e:36:ab:f8:8e:0c:bc:c3:44:8c:8a:47:38:
77:67:e9:5d:b0:cb:73:8a:8a:95:db:99:64:54:68:e1:91:22:
7a:57:f1:38:22:ec:79:3b:67:ce:56:e1:e6:9e:83:ad:e2:8e:
8c:0c:39:52:41:ef:2d:0a:0f:ff:8f:dc:b3:ee:28:15:52:94:
3e:05:b3:c1:b9:f3:bb:8c:c2:a3:e4:6e:4b:03:36:a1:44:39:
30:7d:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:45 2026 by rpki-client