Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: 0PPmy2SvflNL/M/EcqHrDAIvYpo0vbukCUBD56f1bAA=
Subject key identifier: 3D:F4:70:53:8E:04:5B:5B:F8:3B:3E:C8:DC:8B:A1:24:86:01:20:0C
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019CAF10A45D0115F0D48CE6F691804B5847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0217
Signing time: Mon 02 Mar 2026 15:00:29 +0000
Manifest this update: Mon 02 Mar 2026 15:00:29 +0000
Manifest next update: Tue 03 Mar 2026 15:00:29 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: V+Pa4UFnQJVKMg1j6PSCoSB1zSvT/pJqKhmk3j6kyNA=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:a4:5d:01:15:f0:d4:8c:e6:f6:91:80:4b:58:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Mar 2 15:00:29 2026 GMT
Not After : Mar 3 15:00:29 2026 GMT
Subject: CN=3df470538e045b5bf83b3ec8dc8ba1248601200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:9e:c5:3c:0e:b8:31:b6:72:51:47:2c:39:
86:27:0d:f7:e8:64:4e:ff:ba:fd:48:e7:6c:0c:8c:
6e:63:1e:37:78:bc:57:14:1e:9a:cd:62:03:20:3d:
33:6a:4c:1e:66:2a:e4:70:26:a7:60:bf:3e:c3:96:
b8:66:dc:33:e1:1b:23:97:4b:d3:ee:f3:9f:3f:85:
56:3a:e0:07:bb:43:85:be:b6:05:7e:2e:ca:36:de:
ab:53:91:ae:f1:16:c2:4d:b4:55:0c:20:cd:9c:07:
bf:6e:59:8c:31:6b:5f:05:13:a0:41:c4:b8:c0:01:
16:3d:49:92:08:da:54:ce:0f:3d:29:34:60:9a:7b:
b7:25:cc:ef:3e:f6:87:e9:38:24:1d:e3:93:e7:16:
c8:86:ef:e8:78:b6:38:10:4e:fd:e9:e7:a6:e1:3d:
1a:3a:19:79:32:ec:0b:8c:e7:7c:98:b7:8a:28:c4:
cb:00:ef:4f:8d:e6:19:2e:9e:40:a0:43:2a:c9:77:
1e:cd:de:5a:96:c4:c2:2d:2d:f3:01:1b:f1:77:5c:
f2:6d:52:ed:e0:be:98:2f:22:b7:cf:80:43:4c:02:
2d:6b:a9:2d:69:5e:59:fb:d6:98:c7:6f:39:e0:79:
5b:bd:dc:7b:88:88:ff:5f:5e:83:32:ba:18:f1:1f:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:70:53:8E:04:5B:5B:F8:3B:3E:C8:DC:8B:A1:24:86:01:20:0C
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:85:27:32:e7:fe:8e:73:ae:df:da:62:94:07:3a:4a:05:
b5:cd:58:c5:f5:69:1e:85:d7:ad:26:0f:3b:37:c3:a2:6f:5d:
e6:82:d4:70:46:d9:9a:ee:89:25:17:e5:2a:9c:36:5e:3b:db:
de:91:b8:9d:fa:b7:d2:a3:2f:56:83:7e:2d:c8:7d:69:93:18:
55:86:2c:d3:b7:e0:4d:d0:ee:3d:90:58:a5:b4:22:9c:12:67:
f6:e0:70:75:5b:5f:08:3c:25:b6:7c:47:d3:b1:91:92:09:f9:
06:5a:01:b9:ad:f0:bd:e4:7a:da:f7:58:89:dd:c8:33:bb:18:
01:ca:d5:ef:d2:03:59:3a:56:f1:a1:bb:66:b9:29:8a:50:0c:
31:d9:c4:b8:19:ff:ec:4d:e1:f4:93:16:81:6e:a8:ce:76:95:
b0:ef:8d:60:e3:84:16:6f:6d:5f:af:22:a2:b7:a8:19:f5:7a:
aa:8c:89:07:67:1e:ad:f1:90:fe:cb:93:c3:62:95:e4:cb:dc:
9b:f7:8f:b5:c1:b1:f4:9d:cd:8e:0e:36:74:00:52:70:a5:5b:
6d:02:b6:dc:b1:40:bf:3f:ac:00:5b:ff:92:86:41:75:54:cf:
3b:01:1c:f5:8b:5d:8a:38:74:12:6d:d3:e2:61:c8:89:4d:8e:
d5:f5:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:41 2026 by rpki-client