Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: HUoyKAL/fYDRe6Bd9L7SFG32Jd6Rzxhm00DXYNY/GNI=
Subject key identifier: C2:DA:25:BA:A5:12:52:0E:75:C4:A4:59:E9:C3:6C:E9:2C:3F:86:66
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01A13D8179B82925EF2DCEA19DE2C93BBBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1A41
Signing time: Thu 15 Oct 2026 03:00:57 +0000
Manifest this update: Thu 15 Oct 2026 03:00:57 +0000
Manifest next update: Fri 16 Oct 2026 03:00:57 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 7GrX61NEhqDDNhlQV9MBByVAwEv9G+JwWMP80MPC8EQ=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:79:b8:29:25:ef:2d:ce:a1:9d:e2:c9:3b:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Oct 15 03:00:57 2026 GMT
Not After : Oct 16 03:00:57 2026 GMT
Subject: CN=c2da25baa512520e75c4a459e9c36ce92c3f8666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:19:af:bd:4a:2b:72:02:0e:3a:dd:11:59:
41:b4:9f:21:1b:60:60:5c:fb:2e:de:3e:2b:5c:8a:
d3:84:f9:21:06:1b:60:d8:90:0e:43:e0:3c:da:a4:
52:55:ba:df:fe:23:71:d5:26:d5:6a:27:5a:dc:4b:
d6:ba:71:e7:07:8e:0c:5a:34:db:c4:94:1a:a8:f8:
08:cc:03:ee:90:ca:51:66:40:5e:71:bb:b3:51:f5:
23:d4:e1:ae:b3:f0:9e:78:ac:cf:77:2a:8d:37:ba:
04:3d:9b:b1:36:45:e9:48:0b:d3:52:68:25:f8:a6:
d8:a6:fa:26:ea:11:a6:53:1a:40:f5:70:6f:17:b4:
06:86:f9:15:34:09:9b:ef:f1:ce:49:a7:d1:22:df:
65:31:ba:56:e2:69:aa:02:f5:00:d8:ef:1d:02:d7:
20:ec:3d:dd:c7:c2:00:19:e6:0e:46:00:70:0e:a9:
03:83:1c:f1:80:d2:1f:44:d0:7d:71:7e:af:e8:0c:
98:7f:0a:5b:51:ae:87:9b:e2:5d:5f:40:cc:fb:18:
a8:30:67:38:5c:66:02:ea:8f:0c:c7:9d:cf:9a:cf:
15:fa:fb:92:00:61:0c:dd:31:20:8e:24:e9:30:fa:
0a:49:b3:83:f2:3f:b5:58:34:48:8e:a4:7e:53:88:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DA:25:BA:A5:12:52:0E:75:C4:A4:59:E9:C3:6C:E9:2C:3F:86:66
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:f3:f3:5f:d6:94:6b:20:f9:e1:b2:ec:e3:64:80:dc:22:
af:c1:91:9e:62:0b:a1:69:f3:1e:6c:58:64:4d:64:41:58:2e:
d4:4f:40:d7:ed:2d:3d:02:d5:e9:c2:4a:c8:5f:3a:a4:73:56:
05:f9:c3:3b:47:83:d9:f4:f2:d2:ba:88:55:f1:5b:3c:88:69:
f1:8b:d2:8d:a5:ee:e0:67:56:f6:8e:f2:12:ff:0b:94:07:b4:
10:32:f8:8b:8b:44:dc:5b:fc:27:0a:e5:1f:e0:42:52:5b:f9:
4c:f2:e0:aa:e7:7f:cc:f3:c3:72:32:f7:05:ba:5e:c7:5f:1a:
2e:f5:82:2c:48:74:39:64:f5:4b:2e:79:57:56:68:4a:6b:8b:
4d:79:4f:68:4c:a9:f5:6e:f4:c4:65:09:69:46:86:a6:f0:1c:
47:50:ce:69:a0:3c:13:92:fc:b1:91:90:c6:b2:fc:8e:f8:15:
e2:48:b2:aa:23:97:57:eb:c0:27:f1:78:31:44:69:6d:b0:b8:
1b:be:fa:37:d7:3a:89:66:1a:98:d9:39:8d:de:9d:fa:ff:75:
35:0b:f4:f7:11:68:3c:8b:76:70:d6:26:d0:04:69:09:c0:3d:
9f:29:9d:46:3b:5a:90:86:29:06:e5:1a:12:1b:bb:e6:ce:42:
18:27:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:40:45 2026 by rpki-client