Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: EEC5mNTLXC9LQGeQBOsTC5eIzijd6G7F1W0f+tYlawE=
Subject key identifier: 11:80:BE:FF:FD:BB:BE:CF:21:9B:6B:00:5E:5F:7B:6B:F9:2D:90:52
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019D3977BAACE3B45629BC733552869E15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: QvbD1jOdUx6HbNUbA99645THPL4.roa (hash: S7/2P7Mm3OHJNvAa4PXnZTEjRSISksVJdSbgwYAQoks=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: hiC+TEDD+EfpC4NTdBuvpuvaod7wGyqzMNLUXeFISYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ba:ac:e3:b4:56:29:bc:73:35:52:86:9e:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=1180befffdbbbecf219b6b005e5f7b6bf92d9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:4e:be:de:60:3c:de:85:83:29:d6:a6:08:
bf:2f:69:59:48:66:c6:8f:77:c4:47:8d:a9:bc:0e:
2b:ad:fd:4f:91:2a:45:ce:5e:ad:2a:85:bb:84:d4:
48:33:f9:b3:df:95:29:4f:5e:ad:3e:98:40:d8:87:
71:91:24:71:48:36:18:6d:09:a8:82:25:43:14:64:
8f:d8:2c:f4:76:c1:06:54:7b:73:30:aa:64:a1:2a:
c1:2e:9e:2e:42:6b:41:9a:26:14:fb:e5:70:27:ab:
dd:b6:c6:f1:44:3c:80:53:75:aa:36:51:9d:e5:a2:
41:44:67:02:89:f8:2c:5c:b8:b7:93:e2:01:cb:94:
26:1f:7d:58:7a:1b:ce:96:6b:5b:d9:ae:5d:d1:6f:
66:98:a6:f4:30:86:b1:87:22:f1:fa:9f:31:bd:fc:
50:fc:eb:87:14:6a:e3:11:da:8e:91:b0:8a:3d:48:
4b:4c:b7:85:3b:0d:2f:70:16:91:32:18:d8:48:cc:
5c:9a:b0:c6:ed:06:93:f9:6b:81:1f:39:be:91:27:
e3:c9:ab:3c:f7:b9:60:a4:d6:72:f8:ad:32:d9:d3:
4e:6f:3c:45:6a:90:29:1c:5c:22:25:89:b2:72:aa:
a7:31:5f:72:a6:cb:64:01:22:80:bc:c2:3e:28:ac:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:BE:FF:FD:BB:BE:CF:21:9B:6B:00:5E:5F:7B:6B:F9:2D:90:52
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:1e:e1:f6:fa:25:3c:0e:86:01:67:b6:21:cf:d8:56:eb:
a4:1a:ff:92:f4:d9:ee:24:ea:f0:21:10:af:70:48:8a:f9:84:
68:65:b2:67:1e:11:a8:61:c2:11:53:e4:84:36:28:26:b4:ac:
ec:41:dc:46:86:ff:57:a9:f4:00:00:05:4d:6a:91:7c:06:9e:
a0:a3:51:d3:7d:80:04:52:02:2c:aa:00:23:c1:c1:64:f8:26:
ad:f3:1f:b5:ab:a6:ee:f1:97:35:25:07:ed:1d:ed:c8:3a:80:
89:ff:eb:5b:76:a0:4e:2e:d4:90:ac:09:d2:9f:d2:16:e8:dd:
0a:f4:55:da:b8:59:17:7d:78:e9:00:32:61:57:ed:e9:85:51:
61:8a:47:e5:ec:35:5c:97:06:49:b0:5f:46:a3:83:b5:7d:4e:
4f:ba:fc:b1:49:58:2a:21:80:36:a0:ea:7e:41:d8:82:5f:96:
93:90:a3:4f:a6:7e:4b:11:0d:a8:d7:73:e9:4a:0e:84:43:38:
72:d3:57:d2:0b:e9:a6:c5:36:61:a8:ac:b1:4a:6b:89:25:a8:
bc:21:1c:63:f5:56:a8:00:a4:78:c9:7b:79:fe:44:ff:a2:98:
b8:1c:6d:c1:f4:85:42:23:e9:83:19:26:e5:f8:89:a0:c0:b1:
84:89:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:21 2026 by rpki-client