Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: 2NyncMfn66dtMlIbJC+BUKKazB9IkpItehfJouCGZqI=
Subject key identifier: 43:CF:51:60:68:DA:17:E6:4A:16:49:52:1F:67:64:8C:EF:40:86:F6
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019D99D09BDD3A67777AE60C05D5004F8AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 1689
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: B4wp10Y_OEoAGIhud1FmzSKVNw8.roa (hash: ju3vXvQ0WetT2UBij+oQFWcTFWG7kepUg6hRZtzRnOA=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: oOLsZKXpts67lHoSvg4/5LaqApQypA9cKmYKKnMSuS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9b:dd:3a:67:77:7a:e6:0c:05:d5:00:4f:8a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=43cf516068da17e64a1649521f67648cef4086f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:87:84:b6:38:95:b5:ab:a8:09:9a:ae:c6:6c:
f2:11:7c:fd:41:f3:e8:43:b3:6c:6b:b3:3c:16:1c:
9c:9f:0c:3b:ea:df:f6:85:29:06:5f:e4:a7:e0:be:
76:44:14:43:4e:78:b2:4b:b3:c2:35:d4:59:8c:6f:
b7:9b:a9:74:6c:f2:01:18:7b:83:56:3c:69:ad:ad:
44:33:82:a5:45:08:fa:fd:cb:a2:38:2a:6d:e1:85:
a4:d8:3a:2d:01:32:17:37:89:27:94:bb:b8:87:10:
c3:f5:93:9b:16:8b:d8:de:09:c8:5a:38:e4:11:ef:
7d:03:55:49:9d:73:8f:35:6b:10:c1:6d:34:21:16:
fa:51:1b:56:93:56:9f:bd:62:cd:22:64:7e:6c:e9:
82:68:9a:2f:e0:02:91:65:9d:75:00:25:cd:75:e0:
1e:9c:ac:06:0d:ed:0c:7e:ef:33:b7:49:fe:a9:4e:
93:5e:af:a9:6c:6e:3b:f3:55:a9:04:3d:81:6e:fa:
57:e2:36:72:a8:87:15:ff:06:2a:a5:dd:cf:06:a3:
07:f0:68:78:c7:11:32:28:6e:9b:d0:9f:86:fd:00:
fc:6e:25:06:86:e7:1d:6c:74:43:c8:eb:5c:39:e3:
b0:b6:35:35:df:8b:8f:ef:1a:20:3c:91:dc:aa:1b:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:51:60:68:DA:17:E6:4A:16:49:52:1F:67:64:8C:EF:40:86:F6
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:47:8f:66:9c:ee:7c:3f:c4:38:a9:a1:38:a1:03:c1:85:
90:60:ad:88:14:f7:3c:b4:d9:d3:f3:36:ed:2e:c4:92:2a:bd:
05:c7:ee:63:d7:ea:7a:26:a2:19:6e:95:a7:20:65:05:fa:76:
7f:b5:fa:f7:96:bf:34:b7:a2:f8:9a:ef:c6:80:0c:1a:5f:0d:
31:94:e4:9f:23:cb:cc:4d:b0:ab:27:1e:c2:bc:64:91:91:48:
77:21:d4:1c:69:0c:fc:08:b0:9f:37:cd:3e:6d:a5:5f:3b:0c:
75:1d:99:e6:c4:90:ab:c9:e9:32:d1:93:a6:e6:09:a7:8e:25:
17:c0:0d:28:93:77:fc:96:ee:d7:07:83:c3:dd:6f:e6:b1:8b:
27:b5:07:41:3a:58:51:91:90:e0:90:ca:8b:85:02:ff:3f:95:
5b:3b:63:71:a0:71:9f:fa:bd:13:1b:1e:e1:0f:92:37:34:31:
b8:3e:0b:9e:f3:40:05:cd:2c:a1:4f:c4:1f:02:ed:e1:55:d3:
61:0c:4f:78:ef:30:97:d9:a1:a4:22:95:21:03:7d:7e:f8:32:
c7:de:0c:c3:eb:fd:d6:2e:d1:2d:47:73:d4:09:9e:94:fb:c0:
19:1a:fb:ef:6d:0f:48:50:bc:a9:6e:ce:16:d1:15:cf:c5:e8:
17:94:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:48 2026 by rpki-client