Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: 6KjuRpCzIgoWDbjoHOkRJokNmXol7lBbOmVCg8i6j9A=
Subject key identifier: 11:79:D0:19:42:21:DD:B8:DC:7E:C8:B5:DF:9B:98:64:F4:EA:AD:11
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019D382E458620CDA6A609C0B83D2A3797CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 025E
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: 1rfoLBfvhaKvz3eTvg8d4l0Pa1C3NmKqj3L4qtw/fBM=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:45:86:20:cd:a6:a6:09:c0:b8:3d:2a:37:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=1179d0194221ddb8dc7ec8b5df9b9864f4eaad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:d7:f6:cd:e4:00:be:e2:ab:0f:ff:df:7a:
2a:08:f8:2b:e1:bb:42:d2:80:c3:63:32:6f:25:2a:
78:de:b6:be:46:58:8e:40:73:ac:0d:4b:fb:24:b0:
28:b6:e8:10:bf:32:35:87:db:76:33:e3:8f:43:17:
33:a6:e8:fd:a2:d3:29:0b:a1:1d:6d:9a:08:6a:49:
89:11:53:e4:dc:23:e1:02:c3:f9:8a:06:78:18:4e:
e7:1f:fc:15:e8:65:8b:20:27:f4:5b:95:88:8f:b7:
d6:73:59:6c:0b:dc:69:b4:77:ae:bf:76:b0:93:61:
86:0d:e2:a9:4f:71:cb:33:15:3e:f9:d3:f9:e3:fc:
67:88:af:13:eb:d8:f9:e2:be:16:24:c0:48:a0:3a:
08:05:20:a1:53:32:97:d7:b1:12:43:37:db:4b:ea:
ad:56:b7:91:fd:84:1e:b7:12:f0:8f:f6:8c:16:01:
7f:d9:61:62:b0:38:73:57:90:2a:c8:0e:ab:4c:05:
2c:13:e0:77:4d:51:1d:76:13:96:6a:d4:d0:cf:6f:
c9:44:ef:25:fb:25:8e:f7:a2:a3:9a:07:8e:d4:53:
11:c6:a1:b2:62:2f:34:67:4b:a2:ed:c2:6f:61:76:
e1:bb:51:34:bf:68:4a:0f:4f:39:94:6d:a2:94:00:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:D0:19:42:21:DD:B8:DC:7E:C8:B5:DF:9B:98:64:F4:EA:AD:11
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b1:ea:b4:7c:29:9d:c2:22:85:e8:b6:d0:2c:5d:3b:3a:89:
0e:45:2d:9e:e8:d5:08:b7:4d:47:31:f5:d6:22:3c:61:c2:d4:
f7:53:8d:9c:2a:c5:e5:ca:21:3c:6f:32:fc:23:fd:4d:30:67:
ef:ac:0d:65:72:8a:98:33:9b:62:5b:8f:c1:cc:5d:4f:ff:e7:
e4:1a:ba:40:a9:12:37:0d:f4:1e:b8:d0:2a:e5:08:00:de:2f:
54:80:b4:35:53:b9:ab:23:47:67:9b:fe:0a:0c:40:84:a6:4d:
54:dd:c1:4c:e2:97:9e:eb:27:8d:4f:b2:7f:73:13:d9:61:59:
43:b9:22:eb:5f:ea:24:10:9d:07:e9:77:f1:94:28:63:58:c4:
9d:50:6d:a0:e5:cf:ea:13:11:aa:a5:81:e0:9e:b1:28:8b:f1:
8a:88:8c:41:ac:85:7b:2f:f1:d7:31:e7:84:2f:ff:87:1a:56:
21:ed:53:a1:cf:17:74:37:ff:7c:b7:6a:87:a8:98:08:e1:1b:
64:3f:1a:3c:92:29:77:88:a5:ca:6d:cd:4f:76:d5:86:f9:4a:
25:fb:c2:74:eb:45:f5:ca:fa:64:62:f0:fc:81:69:50:d0:7a:
87:75:a0:3c:c2:3c:e6:01:98:7c:4e:ad:c9:41:d2:9c:52:27:
3a:f9:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:56 2026 by rpki-client