Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
File: CRiOI1NxcPsuRX8xLVRflL2d1-4.mft (raw, json)
Hash identifier: 8Q7JtAFHAI51FJ88lk/Kk1PNKXxcjQCOgkfCNI6VRKM=
Subject key identifier: 38:0F:FD:9F:14:6B:1B:90:2E:44:BC:37:F2:BC:C2:32:6E:7F:93:84
Authority key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
Certificate issuer: /CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Certificate serial: 01A040858E557E96874BF9F85E4249359614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
Manifest number: 034F
Signing time: Thu 27 Aug 2026 00:01:29 +0000
Manifest this update: Thu 27 Aug 2026 00:01:29 +0000
Manifest next update: Fri 28 Aug 2026 00:01:29 +0000
Files and hashes: 1: CRiOI1NxcPsuRX8xLVRflL2d1-4.crl (hash: BlORFMzqUPw/HMo9/1Sn4n9PdmfDRut3Jj+bYvGYBFk=)
2: xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa (hash: SFaniO5YvRE/Q1MmXdLYQfC7ZkWwnx783aQKjO9iPwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:8e:55:7e:96:87:4b:f9:f8:5e:42:49:35:96:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09188e23537170fb2e457f312d545f94bd9dd7ee
Validity
Not Before: Aug 27 00:01:29 2026 GMT
Not After : Aug 28 00:01:29 2026 GMT
Subject: CN=380ffd9f146b1b902e44bc37f2bcc2326e7f9384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:ab:31:30:28:9a:ff:18:b9:45:b6:a3:7a:
84:6c:2c:93:dc:a1:4a:91:db:00:d2:3e:a0:3d:b2:
6d:ba:d0:ee:f6:8d:17:2d:45:83:3b:66:96:67:ad:
d4:33:cb:95:f2:2c:9e:4b:f7:2d:6c:e6:54:4a:ea:
c1:b5:c3:52:25:78:08:bc:23:2a:b6:c0:ec:9b:fb:
c8:df:70:b2:26:d5:66:34:93:98:20:86:40:c1:3f:
1b:83:15:5c:13:70:48:4c:04:33:45:11:84:39:dd:
9d:8d:0a:a9:24:1a:11:85:b8:86:db:e4:28:61:ec:
20:14:db:db:91:a4:9e:4b:56:e2:e0:03:3f:ad:72:
a1:9c:59:a2:fa:33:bb:32:30:b7:4b:37:7a:72:4d:
ad:be:ee:af:7a:8e:b8:46:88:19:37:56:f0:8a:cb:
87:f9:0e:4e:0f:58:91:29:25:60:a7:33:22:0c:a4:
08:6d:e7:bc:0d:54:fa:b2:af:9e:16:fa:4b:7c:14:
56:b0:4f:57:b2:e4:24:9b:35:06:87:19:00:9c:b5:
98:c3:f1:ca:ca:6c:43:b2:83:6d:46:48:22:92:db:
b2:ea:b5:51:29:f3:7d:14:43:fe:36:9a:9d:06:59:
cb:59:07:5d:f5:1b:77:61:69:b6:cc:c3:72:af:e4:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:FD:9F:14:6B:1B:90:2E:44:BC:37:F2:BC:C2:32:6E:7F:93:84
X509v3 Authority Key Identifier:
keyid:09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:28:a5:e9:1d:a3:d6:83:f0:67:48:58:3f:71:d5:3f:10:69:
e7:13:20:a9:ea:77:5b:bc:81:bb:66:06:49:2e:a9:29:03:24:
f7:7c:5e:9b:4b:aa:97:c2:af:ee:b0:be:a0:5f:75:42:12:c9:
3a:e0:5a:54:db:61:16:6a:c1:a1:26:06:ac:19:66:84:95:d8:
cc:65:77:cf:7e:6e:19:80:10:e5:d4:d7:bf:19:21:72:b8:4e:
ae:fb:95:20:5a:f8:7c:76:2b:7a:e0:b6:ce:18:e5:c2:a9:5d:
6d:55:cf:8d:f8:48:00:e9:15:e1:49:4b:b3:2a:d4:4b:22:5e:
93:3a:cf:88:6e:49:01:2d:83:6b:f4:b5:26:5c:50:51:99:dc:
d0:22:de:89:ab:20:4f:94:3b:41:d0:e1:d7:ea:3a:75:dc:8b:
63:e5:49:3f:0d:fb:0f:4e:55:0a:a4:b7:0c:2a:c3:9f:54:0a:
b8:d8:0b:73:4e:fd:b9:96:b4:a6:d5:ea:25:ed:20:c9:14:b6:
25:00:01:73:48:74:66:7a:31:ca:f7:3b:88:d2:0e:10:62:ef:
b6:df:3d:dd:e4:2e:6f:f4:ea:a2:82:95:c2:da:3c:4d:ae:cd:
f1:7d:38:3a:fb:c7:f2:eb:94:40:c5:06:0b:02:58:92:ea:d3:
55:c7:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:40 2026 by rpki-client