Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: jLP0M6k6jNPhkIH5ZhXQsxX9v0Hyug+PvXvpVJocvn4=
Subject key identifier: A3:DB:94:32:50:99:B3:26:0E:A2:AB:91:A2:31:49:88:78:46:A2:DA
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019D37898B72C2529056BF677E507E9B1885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 1155
Signing time: Sun 29 Mar 2026 03:00:54 +0000
Manifest this update: Sun 29 Mar 2026 03:00:54 +0000
Manifest next update: Mon 30 Mar 2026 03:00:54 +0000
Files and hashes: 1: J8NvpJq6eev4k_tCNDubI7WjbOM.roa (hash: i38yaMfp3QW23D0QcRAmrQEj3pbk8iPpDiqjLtiH3ZU=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: +ji15I12xvSfQWBKT6Z+hC7xscAV1iazBmrthPC2T5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8b:72:c2:52:90:56:bf:67:7e:50:7e:9b:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Mar 29 03:00:54 2026 GMT
Not After : Mar 30 03:00:54 2026 GMT
Subject: CN=a3db94325099b3260ea2ab91a23149887846a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:aa:b3:7b:89:bb:d5:97:c0:67:a1:cf:04:
7e:f6:bc:7d:fe:0e:d7:0e:21:0a:20:b1:a6:fb:92:
c8:5e:91:8a:1a:9c:02:3a:4c:cc:7f:54:d2:dc:23:
1e:0b:04:9b:c5:26:a4:c6:e5:98:9f:48:dc:2f:d2:
32:f9:9a:35:2e:ed:4a:97:16:a0:76:26:11:e3:10:
a9:33:58:56:ea:50:0a:b5:5b:2e:85:24:2a:b9:93:
64:37:d1:b1:d4:7f:9b:7b:ef:b4:8b:c4:ea:8a:e7:
55:f2:3d:92:db:a3:55:9e:46:4a:80:a3:dd:13:0f:
0d:d2:6f:73:32:1a:3a:d9:eb:c1:0e:12:40:cc:eb:
1e:27:6a:48:c6:7b:5c:3a:8a:2f:79:75:36:1a:01:
d9:21:fa:38:6e:21:55:08:df:8c:66:56:ca:c2:6b:
6c:48:9f:66:07:93:fc:c7:f0:08:6c:08:87:48:16:
4a:54:5e:18:62:30:fa:38:d1:79:65:22:45:17:a0:
7d:b3:ab:66:92:17:58:32:49:63:c3:84:a9:0a:79:
a5:06:d2:b1:42:c4:bd:48:76:62:22:18:be:05:a2:
2e:8d:8f:c1:57:0b:bd:ee:5a:04:5a:01:23:9f:d1:
12:2b:ba:52:f2:95:9d:ae:ef:cf:fb:c7:70:c3:b3:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:94:32:50:99:B3:26:0E:A2:AB:91:A2:31:49:88:78:46:A2:DA
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:18:94:ee:c8:5d:43:02:b7:20:d5:4c:44:ae:77:1a:50:
2d:19:75:4f:35:41:6b:f0:ac:f2:b5:7a:b2:0b:b0:25:13:4d:
cf:70:e5:53:5e:b5:9b:27:80:71:5d:48:7a:ad:bf:89:16:ea:
d1:65:4a:aa:83:39:f6:70:71:a6:43:e4:3a:e3:86:fd:67:d4:
02:01:97:db:58:6d:9f:80:60:21:c3:ff:c2:b1:fe:5b:6d:ac:
76:e6:b5:a4:0c:75:bf:8a:79:3c:f0:a7:72:05:98:8b:cd:bc:
6e:c8:19:b4:24:eb:02:89:a7:f3:d2:78:aa:f3:4a:7e:2a:59:
d8:7e:3d:22:f6:0b:4e:a8:c8:2b:fb:17:fa:36:00:cc:f9:86:
f1:5a:a3:74:e6:7a:81:e3:e7:f4:2c:0e:da:32:37:44:e3:e6:
7b:b6:f5:40:2f:6e:75:20:c8:e1:ff:a9:d0:51:62:5e:af:30:
f0:88:21:2a:d5:73:4f:2f:de:19:3f:9e:3a:22:22:64:85:02:
70:97:b9:fa:93:c9:fc:ef:20:e7:ff:73:e6:a1:82:99:5f:3e:
36:6f:8c:c0:c1:b2:17:48:be:b9:ac:e0:31:8a:db:07:51:f8:
f9:de:b7:f3:32:1f:69:fa:b7:71:ba:cc:2d:cc:26:69:75:59:
4e:cf:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client