Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: aK2nrhQ2W0OUVzoWa+1wV/4dU5IB+UmQvhXpbGSJU7o=
Subject key identifier: 5A:12:AA:7D:23:58:17:82:4C:F9:6F:F2:BF:8A:EC:C5:62:D7:08:BE
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019E9D73ADFF7DC785EADE3B2F86A5BAD23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0317
Signing time: Sat 06 Jun 2026 15:01:04 +0000
Manifest this update: Sat 06 Jun 2026 15:01:04 +0000
Manifest next update: Sun 07 Jun 2026 15:01:04 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: cDe6D0cjiOITduW2K3UaF96wzkBGa1aQlU7VRa+nINI=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:73:ad:ff:7d:c7:85:ea:de:3b:2f:86:a5:ba:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Jun 6 15:01:04 2026 GMT
Not After : Jun 7 15:01:04 2026 GMT
Subject: CN=5a12aa7d235817824cf96ff2bf8aecc562d708be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:cf:11:5f:93:9e:c9:6e:04:f4:aa:bb:3c:
be:9a:76:ad:b2:ff:75:61:e6:3e:9f:21:4d:56:36:
4d:c6:7b:c8:55:2f:bf:0b:7a:4a:d4:5e:fe:bb:8b:
d2:14:be:f4:88:df:ab:ca:b4:1b:55:d7:59:ad:e1:
81:8c:fa:5a:57:c4:ad:07:7e:20:b4:52:e1:60:37:
da:0f:9a:34:a3:f6:4e:6f:3a:09:ee:f9:92:1f:f3:
d1:44:d0:64:75:ae:ce:5f:a5:33:53:17:cf:df:c9:
80:ce:9b:e5:8b:7c:6b:70:a5:da:13:d3:1d:70:45:
16:15:f2:13:10:a8:b7:a6:77:f4:78:23:1b:58:79:
83:19:e8:89:16:1a:62:cb:65:85:22:59:44:cc:70:
07:aa:1a:74:e0:cc:79:3e:6d:30:ce:c2:dd:40:02:
0d:4d:1f:fe:b2:f1:1d:79:15:d5:a1:21:90:e6:ab:
e3:5b:51:61:f5:27:69:f5:01:f2:7e:af:59:54:58:
62:c1:88:dc:c7:22:94:30:80:92:90:5e:ba:4d:ec:
80:dd:52:66:79:69:51:8e:03:3c:0f:72:fa:c1:ef:
c5:e3:91:fe:2b:45:b1:52:bb:c5:97:5f:9f:4b:dd:
77:8d:db:1a:b9:d3:ae:45:e0:14:22:79:8e:c4:fa:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:AA:7D:23:58:17:82:4C:F9:6F:F2:BF:8A:EC:C5:62:D7:08:BE
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:93:4f:3f:04:99:1b:1a:da:1f:05:99:f7:42:b0:9a:fd:
0f:39:f8:df:6c:ea:b4:39:56:98:71:21:5f:90:29:69:ee:11:
7e:ad:9b:d3:ba:b1:47:7a:8c:31:c5:16:6b:4d:72:0a:4c:94:
3b:5a:7c:d5:17:61:57:33:d1:6b:4f:5d:c5:96:9c:d0:e5:0a:
c8:e8:74:0a:92:52:40:73:b8:75:9a:b9:a5:7f:6d:63:18:c8:
45:09:c1:7a:2c:21:67:c5:19:a8:1a:49:fb:f7:1e:b5:04:ab:
4d:6b:56:98:11:85:b6:69:4b:bd:db:2b:c2:2a:4d:01:9f:91:
d4:02:d6:d0:75:60:9e:e1:a2:ea:10:47:ec:d8:0f:f0:c4:8d:
9f:fe:db:83:2d:73:43:27:8f:c4:5a:b1:24:39:3a:9f:dc:7a:
32:b3:0e:ee:65:a7:8e:66:03:1e:4c:5a:94:c9:08:c9:d1:b8:
d3:7e:49:fb:8e:d4:16:48:5c:a0:6f:a8:ee:15:fd:77:f9:b3:
aa:b0:11:47:42:35:98:fe:84:90:c7:77:79:c2:16:cf:d0:20:
8a:6a:ca:b8:cb:ee:1e:41:fc:6f:08:4d:c0:d1:5c:24:60:98:
9f:ea:18:f7:53:e6:15:de:2c:06:45:38:2d:21:b5:a4:f6:a0:
9e:a7:a1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dc63/fceF6t47L4alutI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm
ZjY2NDMwHhcNMjYwNjA2MTUwMTA0WhcNMjYwNjA3MTUwMTA0WjAzMTEwLwYDVQQD
Eyg1YTEyYWE3ZDIzNTgxNzgyNGNmOTZmZjJiZjhhZWNjNTYyZDcwOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG/PEV+TnsluBPSquzy+mnatsv91
YeY+nyFNVjZNxnvIVS+/C3pK1F7+u4vSFL70iN+ryrQbVddZreGBjPpaV8StB34g
tFLhYDfaD5o0o/ZObzoJ7vmSH/PRRNBkda7OX6UzUxfP38mAzpvli3xrcKXaE9Md
cEUWFfITEKi3pnf0eCMbWHmDGeiJFhpiy2WFIllEzHAHqhp04Mx5Pm0wzsLdQAIN
TR/+svEdeRXVoSGQ5qvjW1Fh9Sdp9QHyfq9ZVFhiwYjcxyKUMICSkF66TeyA3VJm
eWlRjgM8D3L6we/F45H+K0WxUrvFl1+fS913jdsaudOuReAUInmOxPpj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoSqn0jWBeCTPlv8r+K7MVi1wi+MB8GA1UdIwQY
MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct
ZTMzN2JmZTAyNzliLzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli
LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2aTTz8E
mRsa2h8FmfdCsJr9Dzn432zqtDlWmHEhX5Apae4Rfq2b07qxR3qMMcUWa01yCkyU
O1p81RdhVzPRa09dxZac0OUKyOh0CpJSQHO4dZq5pX9tYxjIRQnBeiwhZ8UZqBpJ
+/cetQSrTWtWmBGFtmlLvdsrwipNAZ+R1ALW0HVgnuGi6hBH7NgP8MSNn/7bgy1z
QyePxFqxJDk6n9x6MrMO7mWnjmYDHkxalMkIydG4035J+47UFkhcoG+o7hX9d/mz
qrARR0I1mP6EkMd3ecIWz9AgimrKuMvuHkH8bwhNwNFcJGCYn+oY91PmFd4sBkU4
LSG1pPagnqeh8A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 19:24:12 2026 by rpki-client