Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: a/1FtjXRl0Jr55nXyDtRZLpCrWM3G9DrVHfjYqov2t4=
Subject key identifier: DA:84:E9:7E:09:CA:F2:4F:1A:46:49:ED:5B:FE:46:B3:BC:44:25:B8
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019DA45363F02E38134CC8CBDCE09456AD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 0296
Signing time: Sun 19 Apr 2026 06:00:21 +0000
Manifest this update: Sun 19 Apr 2026 06:00:21 +0000
Manifest next update: Mon 20 Apr 2026 06:00:21 +0000
Files and hashes: 1: Bz1Og78AkWRD8W7h-uJAwoeUjBQ.roa (hash: 27Uy8+xilUquWMqY0UtKLCdmMywx5OczzbzcoUIZYdk=)
2: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: cs5hu7E4lqOmpqiHs7wzNUciXZQHtjct+c0Hoh7jjB4=)
3: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (hash: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:63:f0:2e:38:13:4c:c8:cb:dc:e0:94:56:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Apr 19 06:00:21 2026 GMT
Not After : Apr 20 06:00:21 2026 GMT
Subject: CN=da84e97e09caf24f1a4649ed5bfe46b3bc4425b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:f4:87:b6:a0:f9:54:20:85:f9:4d:7a:3e:
fc:27:27:17:f1:75:95:e1:e0:df:a5:d7:89:f6:98:
0e:3f:7a:b6:b9:02:3e:3a:9b:48:6e:0f:7b:9c:76:
38:85:be:e3:ed:55:8e:f5:78:1d:60:53:85:fe:22:
18:e5:29:a8:ad:c1:1b:a5:06:7c:3d:3a:69:36:b4:
5a:74:d9:d0:38:d8:d9:a0:70:1f:4d:f0:4d:1c:74:
ae:01:46:e9:ea:38:f7:bb:70:e6:45:12:4d:61:61:
06:6c:8d:21:fe:0f:e2:1b:d9:7c:1d:18:bf:2a:6a:
a6:ce:c8:9c:a6:9e:3f:4a:4c:cb:14:f9:72:a2:93:
bd:d6:c0:57:1d:5a:9d:f2:2a:e2:ce:e9:b2:e2:a9:
19:f3:e5:d2:83:1b:06:f1:3e:84:6f:af:fc:ea:be:
df:c9:bc:07:ce:a1:8f:e7:48:ff:61:61:11:cb:f2:
a7:0f:7b:e8:35:ef:6e:57:16:65:0f:b8:63:c0:0f:
3a:3c:c4:d6:89:2c:ec:f6:49:30:af:e9:45:ce:c1:
09:74:4c:77:8a:30:94:a5:86:54:3a:7a:07:80:12:
51:f0:eb:df:b1:f9:78:22:56:67:ad:74:9a:6f:2e:
db:2e:46:6d:56:8e:c6:b9:71:65:7e:46:e0:e4:d2:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:E9:7E:09:CA:F2:4F:1A:46:49:ED:5B:FE:46:B3:BC:44:25:B8
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:77:0a:33:fa:7f:a8:f1:b4:af:8f:e4:d1:e2:a4:5f:9e:90:
35:e7:b3:78:a2:be:01:a1:6e:74:9f:9f:0f:30:d0:10:bb:18:
7c:44:fc:6d:87:44:6f:a2:4e:83:21:ad:11:8f:75:d4:41:b0:
27:96:41:ce:23:62:07:9a:31:69:4a:5d:66:52:ac:03:40:b1:
4f:48:c0:29:e9:58:29:5b:55:4e:c1:dd:1a:c4:55:21:a9:01:
a5:8c:8f:e3:27:6f:41:90:0d:ab:d9:93:6e:df:39:29:b3:5f:
b2:1a:dd:50:64:3c:90:df:78:bd:11:a2:f8:c4:52:52:7d:7f:
fd:87:f2:68:08:86:27:e3:f1:bc:4c:a2:f7:04:7d:4a:ee:04:
86:02:c0:53:4d:4f:81:b8:c6:91:ef:f0:6d:2a:35:cd:dc:3c:
08:90:bd:f8:ec:60:82:d7:c1:6a:d5:58:98:b7:07:8b:36:42:
74:4e:75:3d:45:02:55:72:55:2e:ff:bf:8d:f1:7d:55:73:d7:
5a:64:b9:20:f4:66:ad:71:5c:65:da:94:31:76:26:16:1e:3d:
25:4c:a3:5a:89:06:8a:5c:08:f9:df:bb:5d:39:7c:7b:c0:80:
8e:1e:6d:eb:17:ac:e3:8b:19:a9:89:4d:40:f5:ef:18:c5:28:
f8:be:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:26:39 2026 by rpki-client