Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: 3Ra92phQPzQcnJn3DwLF4qlM9e1qKobRv+sXTCHJvew=
Subject key identifier: 67:4D:45:03:A8:84:62:89:D3:64:58:2B:89:E5:3C:59:EF:CA:73:74
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019D37C0F8CE33C1CF19E2568CAF7B0E1AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0F61
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: 4m4GjayM+dSJCCeoXKH4xMs06Q2YmJN/3c43zvHjjro=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f8:ce:33:c1:cf:19:e2:56:8c:af:7b:0e:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=674d4503a8846289d364582b89e53c59efca7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:89:47:80:e6:35:60:52:6c:06:27:1b:aa:
11:b5:bb:81:47:ac:66:d4:ea:72:9c:fe:d9:e0:a0:
12:c4:dd:0f:96:56:0b:da:21:8e:37:7c:cf:77:1c:
fa:37:bd:97:aa:35:1b:d0:d5:a8:5b:a7:0d:b0:2d:
f4:53:6a:42:75:cf:83:f1:8b:66:f7:82:0c:e8:7a:
07:dd:d0:aa:8f:e8:c2:f0:af:00:a9:88:88:55:bf:
a1:17:21:a1:6f:c5:2c:08:e6:33:99:d3:3a:18:5d:
d6:8d:f2:df:00:cb:91:bd:87:73:03:03:35:5a:5a:
55:66:70:73:df:89:05:31:0c:c5:02:1a:58:14:07:
f5:c6:68:de:49:08:f6:77:7a:4a:1c:6f:f9:06:f7:
da:b1:0c:2e:8f:a3:f2:a3:1f:81:bc:1e:86:be:ab:
72:59:bb:0e:a0:c9:54:64:07:41:80:92:26:dd:6b:
f2:61:33:cf:64:7a:09:32:a7:e9:08:9b:08:4f:cc:
f5:16:0f:6a:9e:de:0f:3f:a4:3e:f6:5e:ac:a8:ea:
57:e8:bc:3c:49:92:87:12:15:f8:a1:e4:9c:ee:09:
71:15:b6:08:8f:46:44:e5:38:15:89:fa:ad:54:4b:
83:52:ec:d6:a1:3c:05:7a:12:19:f0:28:c0:84:30:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:45:03:A8:84:62:89:D3:64:58:2B:89:E5:3C:59:EF:CA:73:74
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:33:f7:33:42:2d:ab:83:92:50:8c:e5:70:9e:7a:01:f8:29:
b0:ad:87:3c:2f:c8:f6:24:48:4b:bb:01:ce:e3:7c:49:25:73:
30:25:ca:d1:6f:5d:78:90:67:89:86:ca:52:82:cc:2a:b1:1f:
aa:a8:e3:f9:65:28:49:e7:65:27:9f:7e:73:a5:fb:c6:fa:25:
85:79:6c:c4:29:ac:0f:39:37:b2:3f:fe:5b:f6:46:31:b9:f4:
a0:75:09:18:64:9e:27:4c:c8:44:a2:b4:73:c5:c1:33:2b:19:
03:da:dd:46:bc:97:06:9a:7e:8b:7d:81:30:44:2d:45:8f:bb:
0a:c1:7c:cd:f3:e4:d2:08:74:3b:2a:0d:0b:73:00:9b:ce:2c:
37:52:42:a9:5f:ac:5f:c2:ef:bd:a3:ce:16:70:eb:be:dc:42:
8c:f2:9a:68:79:6f:f9:12:d0:c7:0c:dc:c9:3f:60:82:b7:c1:
76:cc:43:c1:44:34:40:11:2c:ee:c7:8e:cb:69:ca:6e:58:41:
da:ec:56:fb:0d:b3:49:9b:f2:3b:37:2a:22:57:85:12:85:6e:
26:6d:fd:84:a7:e0:4a:2d:65:3b:63:b0:36:58:38:2b:3e:99:
ce:f5:18:91:cd:4f:96:11:40:37:36:77:31:11:ae:83:43:34:
65:ca:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:28 2026 by rpki-client