Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: 1xDDOrNl2tzOOW0AmkFanOIEFMpv6P6+7msA88WJVxw=
Subject key identifier: 21:68:C3:D8:0C:5F:FE:BB:B5:9F:AE:3F:24:7E:11:C4:D7:7F:A2:E5
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019D9818CD3F3287A057DE554951F6206333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 1187
Signing time: Thu 16 Apr 2026 21:00:55 +0000
Manifest this update: Thu 16 Apr 2026 21:00:55 +0000
Manifest next update: Fri 17 Apr 2026 21:00:55 +0000
Files and hashes: 1: J8NvpJq6eev4k_tCNDubI7WjbOM.roa (hash: i38yaMfp3QW23D0QcRAmrQEj3pbk8iPpDiqjLtiH3ZU=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: 9c2CHo8fISEBODBsSXFNjkq2jzLgGm+JT1aOPp5QQkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:cd:3f:32:87:a0:57:de:55:49:51:f6:20:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Apr 16 21:00:55 2026 GMT
Not After : Apr 17 21:00:55 2026 GMT
Subject: CN=2168c3d80c5ffebbb59fae3f247e11c4d77fa2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:b8:38:92:80:24:02:16:06:82:e8:9a:37:
5f:3d:7e:85:a1:5d:a7:7c:23:4b:98:d9:f6:d5:6b:
06:ec:60:10:87:1b:77:3c:f4:19:fe:20:8f:f2:1e:
6f:4d:84:a7:c6:91:e7:92:f3:de:39:fe:c0:86:9e:
17:ce:d8:49:18:33:eb:96:e0:ae:bd:80:0d:21:e1:
18:bb:4b:62:44:54:ad:11:d6:d8:24:a1:ef:77:32:
14:b0:78:b2:7b:81:be:04:2a:06:90:86:bf:5a:a7:
47:90:77:0d:a2:f9:fc:e4:8d:48:7a:59:40:54:3b:
95:29:4e:7f:2b:1e:db:3b:f1:e6:27:67:8c:e2:af:
c0:0a:06:04:2b:86:bb:cb:b0:2d:0f:45:77:74:e7:
78:27:3e:41:9f:63:2e:23:4d:80:ff:7e:ad:76:4b:
fe:af:0f:4d:ab:67:e2:91:3a:a1:e0:41:9a:4e:0c:
0f:a0:b6:a4:e6:39:82:e1:fc:3a:c9:25:bb:ac:25:
ce:a6:3c:07:95:b0:60:fc:1f:bf:3d:02:83:64:84:
75:12:4c:ae:07:07:69:ff:27:c4:bb:46:f1:c9:98:
38:a6:73:ad:fe:82:c8:8b:b5:5d:5e:05:9f:58:4b:
8b:6f:92:44:5d:4e:61:c1:16:d1:c8:98:c1:ae:1a:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:C3:D8:0C:5F:FE:BB:B5:9F:AE:3F:24:7E:11:C4:D7:7F:A2:E5
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bf:76:46:54:35:4c:cf:e4:4d:55:5d:66:09:09:ba:6f:ce:
c1:2c:78:dc:22:b0:a6:4d:0e:50:2b:94:e2:11:49:62:db:20:
f5:a7:a8:d7:d9:0b:0d:26:b6:5a:cd:ab:5d:8a:fb:e3:77:71:
fc:c9:bf:61:8b:7a:8a:df:b6:ca:5a:f8:cb:e4:b3:7d:b2:97:
07:a9:43:cc:53:6c:2d:81:ed:6d:5a:1a:e1:1d:08:ef:56:09:
0a:73:0b:c6:6d:b3:3a:e0:e6:ef:6e:51:1a:e8:e4:78:86:c9:
2f:3a:f2:a7:3e:02:28:65:26:b5:d1:27:db:2b:a9:8d:cf:76:
0d:53:47:b6:a4:eb:fb:12:98:b6:65:80:a2:67:d3:d5:5c:29:
d2:ee:43:90:80:fc:e0:68:d4:25:88:6f:96:ba:ac:fd:57:ca:
20:e0:62:fe:ef:ef:f5:b9:64:81:8b:ca:c7:31:71:81:5d:5b:
57:3e:e3:7e:7e:06:81:3c:7f:f0:8a:ee:ec:7c:af:a6:09:75:
a3:ff:b7:25:b1:09:9e:e4:18:f1:6c:37:c1:8e:55:3f:de:2a:
f7:1c:d2:93:56:d4:b6:31:d3:c2:a9:31:94:26:78:71:93:4b:
57:31:59:a6:fe:ad:29:46:42:26:89:2c:e4:2f:fb:06:da:ea:
c9:b1:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:10 2026 by rpki-client