Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: Lq+2mg084ig0gU9TpMD/Vs8lrS/k2UfHbf/hJ7wPqOQ=
Subject key identifier: FD:1A:82:EE:78:83:02:9B:97:C2:4C:39:00:5E:08:61:EB:9E:22:64
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019E314DFC413F7D2DBA7085107FBCFC06F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:00:54 +0000
Manifest this update: Sat 16 May 2026 15:00:54 +0000
Manifest next update: Sun 17 May 2026 15:00:54 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: Pfh3LHYmBt0H+hasvYgXvbxd1HEkOoS55viJ9RSvL3A=)
2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:fc:41:3f:7d:2d:ba:70:85:10:7f:bc:fc:06:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: May 16 15:00:54 2026 GMT
Not After : May 17 15:00:54 2026 GMT
Subject: CN=fd1a82ee7883029b97c24c39005e0861eb9e2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:e4:9f:0b:b1:51:2b:48:ae:5f:23:f9:6b:
0e:e4:4a:ac:08:cd:ee:3f:4a:7f:60:c9:77:28:a1:
2a:d1:f3:9d:e6:30:a9:93:d0:20:48:15:60:b1:f8:
38:bd:b3:63:cc:ce:9d:07:f9:e0:c2:f6:18:c5:75:
e8:1a:20:32:b4:15:26:e2:e1:f3:22:5f:5c:e7:f0:
c2:3b:c3:42:47:7e:e8:cc:b4:03:2d:e6:f8:1e:3e:
9e:10:25:48:27:81:8a:f7:35:2f:af:d4:f3:55:4f:
7a:a3:17:4d:26:2f:aa:93:5c:3b:39:22:36:58:bf:
b3:d8:a4:0b:1c:f9:86:49:a6:5b:f5:b3:c2:3e:72:
62:5b:2d:89:e6:88:d4:98:78:92:40:77:97:17:26:
fc:c0:d6:9e:29:84:9b:ed:e1:ee:3f:e1:b3:4d:da:
6e:6c:44:42:a9:1f:fc:7a:e1:18:a2:f2:50:25:68:
b1:37:67:b3:a2:fd:ed:66:56:54:de:65:59:ce:36:
35:a8:b0:10:58:95:e6:c5:35:85:de:ce:d8:6c:18:
79:78:d9:4d:94:dd:41:c5:cf:68:e1:4f:df:cf:c1:
0a:ad:4c:9c:da:61:cf:17:04:d2:ea:84:24:61:9f:
c1:a9:33:2e:1b:03:86:b1:91:6b:63:64:5c:19:cf:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:82:EE:78:83:02:9B:97:C2:4C:39:00:5E:08:61:EB:9E:22:64
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f3:a9:2d:3b:71:dc:d2:23:f6:a1:db:7f:25:fb:7a:a4:88:
9c:d8:fb:77:32:f2:ff:cc:0b:17:22:ea:10:1a:f4:3f:74:85:
bb:c4:71:36:2e:3f:5e:13:36:08:f1:b1:ab:90:5f:d3:db:8c:
05:e0:1b:c6:b8:c9:72:ff:03:3a:46:88:97:87:38:fe:8b:53:
1f:56:8d:d2:2d:2a:26:cb:99:73:06:22:83:23:44:72:30:97:
49:7b:0c:ee:ec:80:7a:57:18:d2:98:fe:79:32:19:9d:f0:b0:
f9:e9:de:54:31:ab:1f:e0:25:6d:79:32:fb:6f:82:d2:e0:7b:
97:50:dc:12:59:a3:13:c5:03:ee:1d:16:10:bd:e5:5e:c9:a8:
22:0c:c8:1b:28:71:d3:2f:a0:33:f1:7c:d2:59:9d:a2:85:6e:
9b:03:18:4d:e1:41:84:40:37:00:dc:af:02:34:f6:7f:7c:0e:
a7:b7:0b:3d:a1:49:36:07:30:fa:62:79:bc:20:60:39:79:c9:
59:dd:e3:8f:f4:ca:12:05:12:8f:b7:06:7c:89:5e:2a:f4:b5:
03:c3:31:e2:a4:ab:c9:09:68:f2:2d:d8:a1:50:c0:c4:50:3c:
fd:61:82:27:a1:b5:15:02:ba:3b:03:50:79:2d:1b:58:18:4e:
7c:0c:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:40 2026 by rpki-client