Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: TMaRbt1g7Cu4swXSYBTxYm0gyEV+hfFMGTDk9v7dPeI=
Subject key identifier: CA:D4:66:28:E3:E6:1A:E7:26:15:53:B3:29:32:EB:20:61:04:B9:15
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019EBF916DFF807D3D145F0D2F2372415753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 028B
Signing time: Sat 13 Jun 2026 06:00:39 +0000
Manifest this update: Sat 13 Jun 2026 06:00:39 +0000
Manifest next update: Sun 14 Jun 2026 06:00:39 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: WVixmNUl/dUP1sB3lBx4xe+mtjDquKmUrQY9TbdN7S0=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:6d:ff:80:7d:3d:14:5f:0d:2f:23:72:41:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Jun 13 06:00:39 2026 GMT
Not After : Jun 14 06:00:39 2026 GMT
Subject: CN=cad46628e3e61ae7261553b32932eb206104b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:b0:dc:a6:05:01:89:23:d1:0f:89:cf:e5:
7c:f0:3d:89:87:a9:46:89:43:e2:a9:11:a2:cc:d6:
b1:ab:bc:4b:ee:43:d9:b6:3b:d8:c7:8a:09:0a:4f:
70:19:8f:f4:67:23:21:2c:21:36:49:f1:d3:ed:6a:
ca:b1:75:ef:65:a9:56:83:c6:16:da:ac:a5:44:ad:
c4:04:46:26:a2:c0:fe:c8:89:19:5c:04:77:cc:38:
2f:64:bf:9a:07:ad:3a:7e:a7:8f:96:3e:83:e7:c2:
6b:e1:c6:68:64:8b:dd:be:31:dd:45:95:38:cf:36:
60:2b:b4:02:52:89:8a:a6:98:3c:d1:10:71:df:8c:
d5:8f:9c:fe:17:55:dd:fc:e2:97:38:ed:0c:88:48:
f9:16:54:9a:dd:b4:fa:31:a1:2f:ce:da:c8:c6:1c:
db:12:5e:0a:63:ce:ae:e9:f6:60:08:5e:f3:6b:a3:
b2:00:1e:f9:76:1d:13:75:34:8d:fe:2f:7d:cc:76:
74:d5:49:24:96:73:46:ac:bd:e9:fa:99:79:8f:4f:
1b:82:ae:82:6b:e3:56:fc:74:79:1f:83:ad:07:f9:
40:e0:fb:99:42:6b:42:66:da:d8:20:00:37:e8:e3:
4a:cc:f6:4f:c9:9e:d7:8b:fe:14:36:a4:bb:1d:db:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:66:28:E3:E6:1A:E7:26:15:53:B3:29:32:EB:20:61:04:B9:15
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:b2:cd:25:73:35:46:66:0b:67:6a:2b:34:65:f2:14:1b:
4b:9e:6d:c7:bd:c6:45:cb:59:ab:1d:ff:a2:93:4a:62:14:4e:
48:d1:8a:59:01:e9:4f:ec:2e:a5:75:b2:77:62:2a:d5:4d:36:
ec:10:07:da:33:86:a9:b1:d5:c6:42:8b:9f:12:6e:ed:6c:45:
88:a8:3c:04:a1:f5:28:2b:f0:c9:7e:12:06:3f:9b:88:d0:38:
9b:bf:33:ea:fd:c9:70:b6:7b:8f:40:b0:60:ea:59:db:1d:71:
05:1c:f1:f1:eb:6b:41:d1:41:32:d5:39:df:5e:86:1e:2a:6b:
8d:78:93:ac:96:cf:0c:21:92:6c:5f:17:56:59:89:2b:c3:3a:
55:f8:8c:20:fe:35:cd:69:4d:67:e1:aa:4f:18:85:36:0e:60:
2e:9f:b0:c8:88:be:c3:64:ba:e1:d2:b3:57:2c:a6:ca:3f:3e:
f6:63:41:ac:ed:37:32:71:13:ba:82:ba:bb:19:dc:d6:bd:ea:
5b:96:7b:21:ad:c8:90:dc:ea:96:24:88:8c:5e:03:1d:5b:e4:
56:66:e1:c2:02:b5:94:3e:7f:73:20:17:14:65:bf:00:4b:4e:
30:1a:c9:ab:8a:da:17:ef:a9:1d:40:16:dd:7e:88:ba:ae:1b:
34:f2:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:45 2026 by rpki-client