Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: 9WAdIBL/ab45PGeuo2QMsOcYzPPneciltneLkFSueJM=
Subject key identifier: E6:39:ED:FA:BF:51:C0:15:F0:F2:50:67:5F:98:47:57:7B:81:1D:14
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019D3940874B36CDEEC4EE44D8BBC897026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 08A7
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: 5i0lYgJCew2OqTLYC6snBTyFpavgMiZ3bbRSt9sWTpY=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:87:4b:36:cd:ee:c4:ee:44:d8:bb:c8:97:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=e639edfabf51c015f0f250675f9847577b811d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:d6:cd:e5:14:6a:13:62:0a:83:f0:d4:6b:
95:11:9c:a5:52:26:f4:53:a9:e4:cc:a6:fd:cf:6f:
e7:c3:2e:53:55:c9:29:47:4f:30:94:11:1f:32:d0:
0f:30:22:fc:c2:38:5d:8e:9b:d9:4f:e8:91:2a:b8:
a1:e7:a2:48:82:09:00:14:24:e3:d9:99:aa:d0:b2:
b7:fc:0d:0f:31:f1:66:36:03:58:46:f3:c3:80:a6:
b1:e9:c6:75:df:67:89:e8:44:27:de:d6:53:1a:4c:
f1:bd:7c:68:46:48:80:3b:6a:70:cc:67:67:e7:21:
3c:fd:0e:d4:38:65:5f:37:60:ef:f6:22:43:7f:44:
b1:14:db:3d:4b:02:80:b0:c6:41:bb:d8:39:6d:50:
53:e9:31:01:47:27:f3:5d:94:14:b5:11:d2:eb:5d:
3c:ba:70:5c:08:f2:ff:ce:90:df:fb:00:05:4e:60:
59:7a:b8:58:38:e3:ec:3f:b3:29:42:b4:73:bb:3f:
5c:79:d4:04:9b:ee:aa:cb:97:63:5a:51:1a:24:3a:
7e:75:ec:89:08:06:e5:af:93:b4:6d:a4:25:bf:c9:
22:14:7c:14:47:09:11:e0:6d:b5:f4:48:ec:5b:5a:
22:a2:07:2b:6a:08:aa:0c:98:15:6e:40:59:51:1a:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:ED:FA:BF:51:C0:15:F0:F2:50:67:5F:98:47:57:7B:81:1D:14
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:37:e0:00:ee:02:09:b6:06:a8:5e:e1:b9:b4:87:a2:43:
da:40:02:f4:fd:c2:04:38:3e:47:7e:b3:3a:95:db:e9:5a:47:
17:75:df:02:de:38:90:13:02:14:7d:96:b3:29:ca:f3:42:5a:
70:a7:b0:6b:38:a6:b5:11:00:7c:10:70:4c:5d:7f:a7:80:c2:
93:19:7b:2c:d5:a0:0e:fa:93:cc:51:82:a4:33:32:bd:40:ba:
13:db:11:95:c4:1b:2e:e3:de:11:a7:a2:a1:e9:91:25:62:91:
76:f1:97:c4:b3:da:18:eb:0c:f3:af:73:e4:8b:c5:47:c8:69:
c7:43:e3:f6:8b:d8:7d:27:a4:d2:05:00:0f:d8:4c:d3:5e:bd:
87:d3:14:41:3a:75:d9:cd:ad:9a:7b:f0:12:70:cc:7d:3e:37:
f2:58:b4:e5:3d:3b:95:39:81:f1:e3:9b:cc:05:41:e4:6c:16:
86:9f:64:f2:34:5a:05:fa:80:ed:b1:ec:49:dd:89:f3:14:83:
e7:6d:e1:61:fd:da:00:a0:2b:3e:72:4d:4f:41:00:59:56:b6:
64:a2:8d:2f:a7:4b:a6:fc:9f:88:d9:d2:f5:50:15:60:a0:5c:
68:e8:07:fa:92:7a:b5:72:6e:f3:51:6c:5e:ec:af:4e:a0:0b:
a0:6b:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:11 2026 by rpki-client