Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: jM11Ge5pgay/KQUNCeZCqqg8j3LFZmkNaL7e5vwk5eg=
Subject key identifier: E0:6B:56:71:80:B6:7C:0D:D7:0F:52:40:14:66:71:A4:BA:50:7A:A9
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 01A06E39F7593802B526907246E93934E87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 036A
Signing time: Fri 04 Sep 2026 21:01:27 +0000
Manifest this update: Fri 04 Sep 2026 21:01:27 +0000
Manifest next update: Sat 05 Sep 2026 21:01:27 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: /jTvW80VnZkheKpZNDwxZObLO4WqMQ6iPv1leGLU8Do=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:f7:59:38:02:b5:26:90:72:46:e9:39:34:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Sep 4 21:01:27 2026 GMT
Not After : Sep 5 21:01:27 2026 GMT
Subject: CN=e06b567180b67c0dd70f5240146671a4ba507aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:a7:fc:e7:84:28:9e:af:28:eb:68:bf:e1:
95:6e:cc:3d:83:b3:61:ff:18:6a:4d:1a:12:67:e4:
a2:25:f4:fa:9d:b7:94:5c:5b:96:95:67:28:b1:be:
80:a8:df:98:8f:dd:f2:c4:33:ce:ee:7d:40:5b:cf:
f2:d0:e2:c2:bb:cf:03:0e:d6:98:4e:e0:b1:d7:7f:
b3:b2:8c:57:81:9e:4f:b5:d5:24:f8:04:06:70:ad:
0d:e3:f2:8a:12:34:15:f6:55:dc:96:af:bb:cf:7a:
29:60:48:40:e6:bd:69:fc:d5:b6:cc:68:0f:42:39:
f5:69:d6:6f:9d:d9:c3:4a:cc:98:be:39:93:34:6c:
7b:23:24:e7:76:f3:94:74:4f:e8:27:ca:5b:9f:25:
83:76:f3:af:ed:95:04:0d:7b:19:8e:c3:bf:83:90:
09:a6:e2:f5:20:50:53:04:75:39:59:9d:56:1f:b1:
a2:0f:6d:35:ab:6d:54:64:1f:0e:73:aa:ae:98:5b:
7b:38:2a:29:e1:00:7e:9a:d7:67:34:df:68:3e:0d:
e8:fd:f6:0f:f9:07:25:8e:d2:16:fd:fd:97:b5:fe:
e2:f3:f4:44:02:65:c0:b9:ca:6f:7a:fb:7d:4e:a3:
29:b0:3d:57:3c:b8:2a:a9:a2:90:3a:a4:43:40:a4:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:56:71:80:B6:7C:0D:D7:0F:52:40:14:66:71:A4:BA:50:7A:A9
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:97:84:d5:a9:c7:07:c9:c2:ac:58:01:a5:8f:b1:9b:9f:
79:cd:3f:78:59:4b:87:9c:f1:60:21:69:4e:a4:81:9e:c3:cb:
fc:88:27:3e:e3:a3:75:33:8a:e0:6e:08:19:bf:00:79:87:ca:
8a:55:90:66:34:d8:b5:07:20:0e:ad:2e:2d:1e:6e:de:e0:3f:
84:6f:78:11:43:59:83:ec:e1:a2:1f:55:f8:13:ce:61:e0:1b:
07:e4:65:c5:cb:78:78:04:33:a4:a1:b4:9c:4b:70:c8:57:1c:
bf:e0:da:75:6a:8d:21:cc:74:e5:e0:6e:b5:30:0a:ce:2b:1d:
3d:7c:42:38:69:25:68:fc:e9:6d:e6:ba:0b:fb:a8:ca:98:3d:
f9:b0:4f:9a:17:93:ba:e5:03:87:0b:0b:a1:6f:d3:ca:c7:70:
58:73:e4:62:af:57:02:65:5f:31:48:33:cb:ab:8d:06:cb:9a:
d7:35:17:f2:89:f0:ea:58:a7:0b:34:d0:43:09:36:1a:dd:7a:
2c:85:de:9c:e7:43:d4:6d:15:20:9d:86:dd:1e:d7:5f:bc:3c:
a5:a5:ba:dc:f6:3d:85:0a:ce:71:79:29:74:bb:cd:0f:17:a3:
b0:e2:ca:50:b1:1b:d8:1a:d4:48:17:1d:70:28:f6:20:38:f4:
ad:86:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:56 2026 by rpki-client