Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: bVvumAVVdM0QgeTXnq3p5JODncE7M5zdPO/MhOOMzjg=
Subject key identifier: 9E:12:E6:75:02:B7:82:48:6D:FE:6B:59:B5:C2:A6:53:71:B4:A6:8B
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019D3977A255DE367D0D839C2BB22EE0E79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 01C1
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: uJnTcUWgIQePzEFt03ro5hvLn+9yRLfFQvXET7kqtLM=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a2:55:de:36:7d:0d:83:9c:2b:b2:2e:e0:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=9e12e67502b782486dfe6b59b5c2a65371b4a68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:08:52:96:92:fc:32:62:24:9c:30:e1:d7:
d7:9c:1d:50:06:eb:8f:de:90:4a:dd:ae:a4:22:2e:
61:50:fd:de:8d:8e:f8:6f:84:f8:bd:6b:a6:8b:c8:
a0:70:fb:e9:78:c9:34:95:5f:d5:53:39:45:da:b3:
6f:f9:b8:04:37:c2:ef:e9:00:8f:02:e7:c8:b5:ef:
29:2b:86:37:79:dd:5a:12:26:a0:30:67:8c:82:94:
14:c6:67:e2:2a:8c:98:ab:cb:1c:ff:c9:fb:26:2c:
4d:54:9d:f9:8f:d5:90:b7:18:05:fc:41:8f:22:82:
10:89:b8:a5:11:09:7e:c4:5f:2d:a3:84:2f:d6:25:
58:e0:3d:8c:97:23:48:62:b2:7c:f3:be:ec:be:73:
23:0f:b5:8a:df:0a:4d:38:60:29:83:63:e9:65:e0:
1a:85:b9:9b:c5:d2:45:02:c7:19:a8:68:dc:88:0c:
0f:3a:cc:d2:0b:b8:dc:57:b1:d2:67:8c:3d:24:5c:
0b:03:4a:bc:b0:aa:26:34:cd:16:fe:9c:3b:2c:c0:
e4:1c:a7:4f:6f:d8:5a:e3:f1:71:b0:d7:c9:9a:ad:
b5:41:c3:f5:f8:88:61:1f:fd:b8:08:46:4b:cb:cb:
b4:8c:f6:89:4d:72:bb:ed:36:05:d1:17:b1:53:41:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:E6:75:02:B7:82:48:6D:FE:6B:59:B5:C2:A6:53:71:B4:A6:8B
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:ce:1c:20:42:be:2e:93:49:c1:17:5f:5e:08:79:5d:94:
c3:98:21:bf:a0:d9:8d:53:ac:0e:48:40:88:35:dc:7c:ff:79:
e2:5c:4b:2a:5a:18:da:67:54:3e:be:c1:51:4c:9f:1b:fb:26:
1d:d0:0d:55:34:96:5e:bc:ac:08:70:a0:69:5f:6e:11:e7:1c:
f5:79:a5:78:b5:9b:26:f8:ec:c7:a8:10:7f:df:08:26:d8:4e:
4d:86:b5:75:7d:0a:9c:ce:13:8d:78:e8:37:7b:b2:a0:40:a4:
a1:4a:a0:4c:c2:f2:7d:4d:a3:92:9d:70:7c:09:11:8f:fc:7b:
ff:f3:ea:18:c7:53:cc:13:f2:48:b4:f7:52:69:fc:2c:c6:ed:
10:74:8f:fd:c6:5b:0e:57:47:4b:45:1b:af:22:2d:c4:92:af:
e3:ca:5f:e7:13:e5:ee:71:a3:59:d6:2d:c2:56:dc:f1:59:9b:
65:fb:98:53:1a:49:68:cc:33:fd:03:81:6c:0a:81:c9:16:5d:
e4:fb:0f:51:89:58:7e:70:1e:ac:7e:fb:b2:ed:79:7a:f7:b9:
03:23:11:ca:d7:40:84:3e:66:9d:01:9f:ca:cf:95:92:33:09:
95:dc:28:2b:c1:6d:37:07:35:76:d0:62:7f:64:db:ce:0f:e3:
fa:3f:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:37 2026 by rpki-client