Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: a3jwFbKvlYrBLOKOusjmAfyVPykrF0q9TRco598Yjxc=
Subject key identifier: 7E:89:8A:2A:C3:3B:08:9A:D9:15:67:A8:EC:A4:85:79:6D:AE:2A:46
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019EC224D38D53F391A71EC8D6EE6F6726FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 032A
Signing time: Sat 13 Jun 2026 18:00:53 +0000
Manifest this update: Sat 13 Jun 2026 18:00:53 +0000
Manifest next update: Sun 14 Jun 2026 18:00:53 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: FtPW5tX3Hb59kGbQVKIGaNP6VZmnQkNCG4EGTZcyjTc=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:d3:8d:53:f3:91:a7:1e:c8:d6:ee:6f:67:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Jun 13 18:00:53 2026 GMT
Not After : Jun 14 18:00:53 2026 GMT
Subject: CN=7e898a2ac33b089ad91567a8eca485796dae2a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:80:02:b2:8c:f1:e8:00:d9:1c:9f:64:ce:
11:51:99:55:b3:d7:33:94:26:1f:81:57:cc:c2:5e:
6f:97:7a:2a:aa:9b:f8:74:26:1e:9a:ad:37:e1:b8:
d9:d9:ac:05:6e:cd:de:01:ee:38:14:12:09:91:ec:
a4:22:b4:c4:88:c3:a5:d5:5b:3b:2a:f9:a6:4e:5c:
60:46:d8:36:39:58:83:bb:1f:27:9f:76:74:9f:7a:
cd:eb:25:65:6c:cb:81:25:d5:fb:a2:5a:1b:6c:a4:
6f:0e:77:f0:87:93:d0:4a:64:2e:47:f7:9a:c1:42:
e9:1d:fa:70:4e:15:c8:81:80:0c:c2:37:12:bc:f8:
1e:48:21:41:41:ee:0d:96:a8:68:2d:cf:9c:47:fe:
3d:52:d8:b8:38:69:b3:97:35:cd:3d:43:e2:d6:6a:
84:ac:e2:cc:8d:09:4b:2f:85:ef:5a:c5:81:f1:15:
91:85:31:6a:19:80:92:e8:49:19:17:10:86:a7:1a:
80:ae:dd:d0:f0:da:79:5d:c5:28:ab:f0:4f:b4:6c:
35:f8:65:de:c6:3f:85:00:72:82:90:c9:a0:10:7a:
2d:8a:46:98:3a:0b:77:c3:ea:2a:0d:aa:6d:57:9f:
5b:a0:77:10:cc:50:c9:d5:e3:bb:34:39:69:71:18:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:8A:2A:C3:3B:08:9A:D9:15:67:A8:EC:A4:85:79:6D:AE:2A:46
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d0:fc:40:dd:45:e4:92:63:85:ad:fe:f2:bb:d6:4e:87:b9:
98:a1:56:b7:1e:b4:7f:87:a0:8a:46:06:6e:b9:7f:9c:a8:46:
e8:97:e6:7c:d2:77:93:0f:30:2e:77:e3:0d:2d:d8:ed:38:7d:
21:98:f3:44:59:90:b9:75:11:7b:fa:c2:b0:9d:e2:3f:37:a9:
be:84:eb:1a:69:c8:b4:41:3e:37:87:37:b0:28:3d:02:88:49:
55:40:2d:f0:f2:7f:83:27:5b:89:34:28:8a:07:af:0d:8d:d1:
c2:27:3d:86:7d:dc:52:56:1e:9c:6f:eb:ed:f8:ce:85:8c:4d:
d1:0d:c8:25:53:70:0e:7b:0d:d6:16:f8:4c:e0:d0:7d:67:dd:
f4:3e:66:e8:2a:f5:7c:fe:21:e6:4f:cd:6e:67:93:7d:73:ca:
9e:0a:7b:24:08:e7:6a:cf:44:54:2d:d7:ac:bf:5f:9e:d2:f0:
e6:2a:94:8c:31:b0:3a:56:2c:61:8a:d1:09:27:1c:1e:c9:c3:
da:eb:a9:6c:b4:d6:d4:be:54:64:e5:3e:73:b5:e1:95:03:43:
e0:43:7c:41:84:27:d8:75:b7:53:79:f0:12:b3:28:14:1f:d1:
36:24:30:8f:2a:f9:f1:43:ac:a5:b8:0f:ae:ca:a9:0c:b1:c9:
27:cd:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:23 2026 by rpki-client