Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: H9xfFTCQrUsrPnnyEAaz7e0t6HGuVbf2/v/RvwiIW2Q=
Subject key identifier: 91:CA:EB:A3:C4:85:DE:44:21:20:1E:AD:46:D3:FF:4E:8D:D3:52:86
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 01A0C9A1BE0014FC629482700F62AD205A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0438
Signing time: Tue 22 Sep 2026 15:00:15 +0000
Manifest this update: Tue 22 Sep 2026 15:00:15 +0000
Manifest next update: Wed 23 Sep 2026 15:00:15 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: umHCLBJNWHSUHzUbGpcbs9mSvffNA8sbaysAP8FLTHU=)
3: GvmwU5ybeBQQwgrzkAnZjZHbldw.roa (hash: n0DQ3OdOkPaf8lTDpTp72e8rndz/9n9/UVG204U1n+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:be:00:14:fc:62:94:82:70:0f:62:ad:20:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Sep 22 15:00:15 2026 GMT
Not After : Sep 23 15:00:15 2026 GMT
Subject: CN=91caeba3c485de4421201ead46d3ff4e8dd35286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:69:b3:fb:5b:30:a9:02:06:99:73:a2:d5:
2d:09:fa:6b:56:67:95:76:24:b6:bb:bd:78:3a:ba:
22:7d:52:52:9c:a7:2f:92:62:ac:04:08:b8:7b:23:
65:37:20:a8:0e:4a:30:9c:0a:2c:dd:7d:2e:4c:7a:
26:06:66:71:32:3f:f4:fe:30:4e:85:fc:1b:dc:00:
b5:07:e9:98:14:12:eb:1c:48:c6:04:6d:88:94:bf:
a9:9d:a4:ba:3c:b0:66:bd:01:4c:6c:db:93:0e:5a:
6e:a1:dd:e2:71:70:d5:80:9c:b6:2f:af:08:01:85:
61:2b:c9:1c:df:22:14:23:d1:44:5f:ad:98:6c:09:
7f:6d:16:7f:83:26:2c:cc:f9:eb:a1:21:3d:5c:69:
a2:9d:19:2c:0a:3c:75:c8:24:35:41:f0:7c:1a:dc:
8f:07:c4:16:9b:90:bd:c8:a8:fa:97:56:85:80:1d:
fd:3a:63:92:c5:cf:f1:15:0d:45:60:72:b9:b6:ea:
cb:87:46:23:b0:19:4f:7e:42:7f:b2:b1:f5:10:5f:
90:bc:82:58:09:c0:1d:2d:d5:f7:76:28:ce:8b:f7:
22:06:41:c4:b3:52:d5:ee:46:0f:f7:66:4b:1e:6d:
31:9b:43:af:08:9f:58:01:ce:ba:6f:73:a4:f5:c7:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:EB:A3:C4:85:DE:44:21:20:1E:AD:46:D3:FF:4E:8D:D3:52:86
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:c7:34:6f:57:eb:d0:1e:0a:e9:a2:6f:b6:91:d9:ed:d9:
ae:be:b0:40:45:54:3b:9a:f1:22:bb:59:10:5e:d8:4e:2d:75:
ce:1a:6f:09:9d:f4:a3:f1:5a:61:71:60:f1:43:9a:a8:88:27:
ed:93:67:fc:83:d5:46:25:31:8b:52:6f:d7:55:8b:be:4a:a6:
46:3b:61:d0:8d:1e:22:76:51:ca:99:b9:51:33:43:a7:5e:96:
cb:6e:26:8b:6c:61:e2:23:f5:d8:24:13:5a:5b:cc:e2:b9:fe:
1a:30:5d:37:6a:0d:89:dc:c9:e2:51:3e:1f:73:9b:da:96:5e:
c9:04:19:93:69:91:80:6c:aa:bb:b7:2a:65:ce:d2:53:86:98:
b1:10:65:d0:d1:b4:ce:67:b5:99:e1:e3:01:4f:72:ad:42:60:
92:fd:d3:28:57:61:83:ca:f0:40:90:de:4e:95:90:7e:dc:3d:
8f:48:41:ac:e8:fd:b9:55:39:b6:e7:4b:64:59:9b:cb:33:b9:
38:36:74:aa:06:e4:47:a9:d1:e1:15:a0:c5:ed:b7:93:ff:52:
e2:23:b2:bb:28:eb:6a:f2:34:a1:3f:de:5b:b9:bf:05:78:c4:
d7:39:4b:6f:df:60:ba:bf:dc:c3:33:26:1a:54:ad:f6:5b:93:
78:34:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:36:59 2026 by rpki-client