Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: ViAMymw0teZ+ujBxxxFW6DFztTA5AMICQ8HmXH8hJ6o=
Subject key identifier: 73:A4:3E:85:CD:1F:51:25:58:F3:15:7A:DF:2D:74:2F:6E:B9:AD:04
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019CAA8F6A28C98B98BD792A9FADD77954CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 18:00:51 +0000
Manifest this update: Sun 01 Mar 2026 18:00:51 +0000
Manifest next update: Mon 02 Mar 2026 18:00:51 +0000
Files and hashes: 1: QvbD1jOdUx6HbNUbA99645THPL4.roa (hash: S7/2P7Mm3OHJNvAa4PXnZTEjRSISksVJdSbgwYAQoks=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: 1howCSQwz4bhEfvvnhkIrNhWM7vsIcnRJh+NtM4jH4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6a:28:c9:8b:98:bd:79:2a:9f:ad:d7:79:54:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Mar 1 18:00:51 2026 GMT
Not After : Mar 2 18:00:51 2026 GMT
Subject: CN=73a43e85cd1f512558f3157adf2d742f6eb9ad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:36:19:b2:6a:a0:36:12:9d:37:12:8a:11:
c8:96:07:d3:05:aa:92:80:09:78:72:74:fd:55:8b:
9d:fd:68:3b:cf:ae:d6:6d:a1:a3:3b:00:7b:26:19:
31:20:bc:4c:7b:bd:72:f1:04:ca:23:02:a8:d3:16:
c6:8d:1c:66:9b:53:ad:ac:d5:4a:26:5f:77:85:14:
e7:b3:31:81:4a:d7:cd:9a:b1:57:91:00:0c:67:51:
01:fb:92:9a:61:ba:22:79:07:e3:ba:3b:50:e3:6c:
47:5b:92:53:63:05:e6:1e:bf:7f:6d:7e:99:96:28:
ac:3a:1f:ba:4f:7b:4b:f1:6e:99:99:ef:a8:00:64:
e0:99:f3:09:5d:1b:d8:98:ad:a4:e9:66:63:91:49:
ed:e7:52:6d:60:42:7a:34:51:77:6c:70:22:61:7a:
af:cc:b3:99:82:b2:23:7b:86:b5:3f:c4:34:33:1b:
80:f4:43:d8:d9:5e:59:9b:16:6d:d1:9f:e8:28:f1:
90:1d:1f:d0:6c:b1:19:c3:db:b0:c0:d2:4b:6f:24:
65:98:f1:ba:5d:27:35:dc:2b:4e:cc:ba:2a:6a:68:
3f:d2:4c:2e:75:e5:54:51:14:50:87:42:cf:2e:a7:
c4:df:17:9b:59:f4:ac:f3:db:8a:17:75:30:9a:5a:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:3E:85:CD:1F:51:25:58:F3:15:7A:DF:2D:74:2F:6E:B9:AD:04
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:74:71:36:b1:3e:97:eb:71:c6:f5:ac:91:b3:c1:fa:86:90:
52:b2:59:7f:8d:b2:2f:f2:54:89:df:fd:ab:74:a4:7f:b6:87:
30:69:cd:f9:d9:64:83:63:39:46:48:23:a8:19:6c:1d:8a:7d:
32:b0:ed:a1:36:17:6d:1f:fe:73:f2:ef:6a:f3:42:4d:16:c2:
09:28:10:b8:48:19:31:4e:d8:8f:fa:6a:78:f4:23:3b:16:aa:
8a:3c:10:f9:e0:46:00:39:83:ea:62:0e:b7:6d:54:59:d4:0a:
67:94:fd:5a:cf:ef:e5:21:e2:17:76:46:c9:7f:4f:75:04:98:
d0:31:b3:63:72:c0:e3:65:c1:4a:2d:51:7f:13:1e:d9:7a:e2:
e6:b6:1e:8c:c1:f0:3e:11:3c:2f:48:a8:26:d5:1c:76:53:07:
b3:02:3b:e8:24:d6:e8:3f:9e:f5:69:a3:aa:f8:44:da:48:ac:
16:fb:aa:1a:a3:45:3e:ab:4f:87:59:0b:2a:fc:93:70:13:27:
8c:ab:0d:f7:07:fd:9c:13:a3:95:35:87:14:3c:49:cb:84:dc:
5a:ee:20:a9:04:7f:30:93:33:88:06:18:ed:45:c3:ca:f3:40:
98:65:ec:eb:8b:f4:ae:69:17:a1:14:02:6f:62:44:aa:c8:52:
a4:35:58:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj2ooyYuYvXkqn63XeVTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjI1ZDg1OWZmMDZiZTFlYmM5N2FkZDVkZWMwNWQzNmZj
ZGNhMmQwHhcNMjYwMzAxMTgwMDUxWhcNMjYwMzAyMTgwMDUxWjAzMTEwLwYDVQQD
Eyg3M2E0M2U4NWNkMWY1MTI1NThmMzE1N2FkZjJkNzQyZjZlYjlhZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71c2GbJqoDYSnTcSihHIlgfTBaqS
gAl4cnT9VYud/Wg7z67WbaGjOwB7JhkxILxMe71y8QTKIwKo0xbGjRxmm1OtrNVK
Jl93hRTnszGBStfNmrFXkQAMZ1EB+5KaYboieQfjujtQ42xHW5JTYwXmHr9/bX6Z
liisOh+6T3tL8W6Zme+oAGTgmfMJXRvYmK2k6WZjkUnt51JtYEJ6NFF3bHAiYXqv
zLOZgrIje4a1P8Q0MxuA9EPY2V5ZmxZt0Z/oKPGQHR/QbLEZw9uwwNJLbyRlmPG6
XSc13CtOzLoqamg/0kwudeVUURRQh0LPLqfE3xebWfSs89uKF3UwmlpErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOkPoXNH1ElWPMVet8tdC9uua0EMB8GA1UdIwQY
MBaAFHKyXYWf8Gvh68l63V3sBdNvzcotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMt
MTIzZmEyYWI5NDA4LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMtMTIzZmEyYWI5NDA4
LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnRxNrE+
l+txxvWskbPB+oaQUrJZf42yL/JUid/9q3Skf7aHMGnN+dlkg2M5RkgjqBlsHYp9
MrDtoTYXbR/+c/LvavNCTRbCCSgQuEgZMU7Yj/pqePQjOxaqijwQ+eBGADmD6mIO
t21UWdQKZ5T9Ws/v5SHiF3ZGyX9PdQSY0DGzY3LA42XBSi1RfxMe2Xri5rYejMHw
PhE8L0ioJtUcdlMHswI76CTW6D+e9WmjqvhE2kisFvuqGqNFPqtPh1kLKvyTcBMn
jKsN9wf9nBOjlTWHFDxJy4TcWu4gqQR/MJMziAYY7UXDyvNAmGXs64v0rmkXoRQC
b2JEqshSpDVYkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:40 2026 by rpki-client