
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: fBiLFlAsxMVBtFppJ67ox3H0khBIKFFWMrlItMK6/r0=
Subject key identifier: 01:EA:5A:71:7C:C8:04:EB:A6:68:D9:6D:8F:59:7D:E2:45:C5:FB:86
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019D9818D90059ECCB0B82B09E303F469F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 21:00:58 +0000
Manifest this update: Thu 16 Apr 2026 21:00:58 +0000
Manifest next update: Fri 17 Apr 2026 21:00:58 +0000
Files and hashes: 1: QvbD1jOdUx6HbNUbA99645THPL4.roa (hash: S7/2P7Mm3OHJNvAa4PXnZTEjRSISksVJdSbgwYAQoks=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: NlR0ymDrIkFQbMaQ8r03+YpW8bM7s70eAvPRhfr5Zug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d9:00:59:ec:cb:0b:82:b0:9e:30:3f:46:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Apr 16 21:00:58 2026 GMT
Not After : Apr 17 21:00:58 2026 GMT
Subject: CN=01ea5a717cc804eba668d96d8f597de245c5fb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:64:dc:4b:8f:7d:20:98:ef:40:f6:02:d2:
3a:32:d0:16:be:0b:4a:ab:fc:d8:6e:19:67:f9:2b:
e2:29:72:a0:2e:1f:7d:19:af:10:10:3c:b3:c6:42:
d7:2f:c2:79:b6:d1:29:e0:c7:38:f3:84:79:b4:8e:
26:30:c2:d4:a7:aa:ec:67:ff:83:38:a8:d0:fb:97:
65:32:b5:07:c5:a3:be:22:df:d4:02:f2:ff:02:1c:
10:2b:ed:3f:ff:78:58:6f:20:ce:e4:54:0e:d0:97:
c8:fc:d0:59:6a:17:d6:20:fb:0b:47:4b:e9:7a:81:
59:5e:dd:f7:75:5f:61:ac:db:9e:88:c6:75:27:d8:
f1:ce:b6:97:b5:b4:67:55:72:4b:19:1a:ca:07:20:
07:fd:63:7c:0a:ff:93:ca:bb:37:d4:b7:87:2c:e1:
c8:ec:4d:02:14:94:b1:64:f0:2a:1f:12:3b:8a:4b:
61:9a:26:d3:38:78:a6:e8:ed:01:c1:89:28:f8:dc:
a3:4c:be:9e:f1:fa:7a:2b:a8:6f:5d:b1:c2:e3:f5:
63:b2:8c:af:c6:81:a5:ab:8d:bf:93:db:1b:e6:21:
45:df:34:60:be:4d:f1:d8:83:2e:72:44:1f:a7:b5:
21:2b:a4:d0:c6:d6:b5:84:fd:d8:45:3f:f7:7c:5a:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:5A:71:7C:C8:04:EB:A6:68:D9:6D:8F:59:7D:E2:45:C5:FB:86
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:3e:4c:f4:b9:f3:56:b3:75:4b:4f:79:07:b0:c7:65:e4:
2d:17:0e:dc:25:96:b4:8b:5e:d0:1c:06:f6:b0:38:ce:47:d0:
9c:b0:d3:84:c2:ba:a9:61:31:af:ba:73:26:74:bb:0b:6f:4c:
f6:47:8f:c6:c1:bf:59:46:89:9a:f1:b4:82:9c:de:ac:a6:31:
92:8d:b2:58:43:3c:9c:4a:13:71:b8:b8:0c:7b:6a:39:4d:c8:
9b:39:ca:2a:2d:54:1e:e0:0e:30:cc:4e:4f:6a:21:86:d4:3b:
50:79:dc:56:d1:a4:73:b7:28:1b:ab:9b:86:34:3d:de:9c:98:
e8:2c:03:1b:bf:2f:a0:79:a7:3e:c8:c5:af:b3:08:16:fa:75:
00:72:58:ed:21:b4:64:e2:06:f1:b1:ab:8d:5c:3d:60:67:64:
d2:18:33:7a:6e:f5:1d:72:5c:af:bf:70:e3:07:a4:fb:72:31:
0e:e4:84:08:1c:24:68:d0:1f:a0:79:25:e2:83:05:5d:94:d9:
f8:05:01:b1:93:af:29:e6:bf:46:e1:ba:cb:3d:ac:89:bc:2f:
a6:e6:a9:5c:bd:a7:b9:d2:0a:61:8a:f9:07:7a:af:56:64:20:
14:da:15:70:bd:5b:cd:ec:00:44:d9:35:d2:fa:fa:4b:af:16:
9b:94:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:38 2026 by rpki-client