Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: c/QhPuKHHUjbDC9HIlnMYy93/XTYlxBauaGbfzS2oJw=
Subject key identifier: 15:2D:BE:D7:7D:DF:5E:BA:36:9B:F3:3D:82:50:B5:63:E9:48:E8:25
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 019D39AE9F580E386B97E9A04BB56E642756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 0B7E
Signing time: Sun 29 Mar 2026 13:00:38 +0000
Manifest this update: Sun 29 Mar 2026 13:00:38 +0000
Manifest next update: Mon 30 Mar 2026 13:00:38 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: lfOG0vDRF1Vo2J7KOUH5M7BvwWTVUR/PKm5y8p0Vm0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9f:58:0e:38:6b:97:e9:a0:4b:b5:6e:64:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Mar 29 13:00:38 2026 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=152dbed77ddf5eba369bf33d8250b563e948e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:c1:68:c7:d8:bc:34:7a:39:88:6b:08:23:
a4:a8:83:8d:bf:30:f2:25:3e:30:88:ba:0e:83:f9:
41:17:b8:ac:6c:fc:5e:11:87:96:a5:85:79:f0:63:
e3:a8:78:15:83:26:c3:fe:9c:93:5d:54:57:55:98:
76:87:dc:1c:9d:fa:1f:8c:93:a0:e7:8c:03:0a:a4:
25:44:70:bc:3e:72:cd:36:e1:fc:e0:7e:f2:70:c9:
f1:9f:58:a2:bb:21:a4:04:43:6c:79:fc:69:f0:99:
1f:6b:e3:48:e2:83:15:94:25:ba:9b:e2:51:cc:69:
b7:e4:93:01:41:0a:bd:2d:99:a9:13:65:f3:9e:99:
3d:77:ac:ef:14:ef:07:ec:dc:59:88:61:5b:60:3b:
19:b0:ed:f5:27:79:65:4c:6b:98:8e:03:e9:2f:1a:
76:79:6b:4d:e2:2f:4f:62:e5:9c:fc:99:38:0e:64:
0b:b4:5f:91:71:10:5c:67:12:c3:ea:f7:87:7d:db:
f3:be:3d:ac:7e:b8:3e:ec:7b:b6:96:7a:53:f7:12:
fc:2d:c4:d6:4a:8d:f5:cf:71:ff:47:42:c8:f2:5b:
e8:b4:b4:1f:1a:a2:c5:98:ad:65:bb:b8:0c:2e:a2:
f4:4c:b1:33:a8:25:38:7a:1b:04:d9:32:07:10:13:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:BE:D7:7D:DF:5E:BA:36:9B:F3:3D:82:50:B5:63:E9:48:E8:25
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:bb:94:29:54:eb:5d:07:eb:99:5a:09:60:e9:12:1e:43:
0c:c9:5f:11:b5:74:c9:82:ff:ec:cc:c8:57:d4:bc:6f:f9:5b:
2c:23:87:3a:b2:05:6b:6f:8c:d0:2f:b5:9c:46:f3:1d:5b:8a:
8f:46:28:4a:96:12:f4:db:15:05:a1:54:72:99:da:d5:aa:cb:
20:7c:3d:37:75:ec:00:2b:44:54:fa:34:53:25:f4:76:93:5b:
a0:78:22:85:ee:23:f7:da:25:3d:e3:57:fa:31:6c:1f:29:78:
b6:bb:51:5e:27:63:f1:c3:90:5f:37:9b:2d:e8:34:6e:22:22:
4b:9c:7a:55:16:2e:32:31:8d:cc:8c:93:a9:2b:d2:68:f7:2b:
6b:b4:b0:94:24:2e:fe:a0:8e:33:18:7f:dd:b1:43:e0:6a:e0:
31:5e:7e:ff:ef:bb:0a:b9:cf:35:7c:87:40:8a:ba:3a:ad:48:
59:ef:fb:14:f4:f5:f5:0c:0f:db:30:15:7d:1d:60:28:40:eb:
30:ea:2b:65:80:d4:b5:c1:ab:33:1f:6f:68:7d:42:f4:fb:d9:
6e:f4:69:79:a7:0d:02:03:ae:e9:32:2f:bf:ad:2b:79:2e:42:
f6:d9:1a:43:b3:5e:d0:90:b3:86:d8:f1:cb:1e:6b:1b:c2:82:
05:6b:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:26 2026 by rpki-client