Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: gkx2OQ8BGQaxvjG6CB4RZ5o2sc12JSlHC+uQ0bHbk0Q=
Subject key identifier: 8E:A1:9C:6D:FD:E1:1E:F9:74:45:84:C9:15:03:AB:96:94:82:9D:44
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019CAF1105A41EB81A7830BC914C115E2998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 17E5
Signing time: Mon 02 Mar 2026 15:00:54 +0000
Manifest this update: Mon 02 Mar 2026 15:00:54 +0000
Manifest next update: Tue 03 Mar 2026 15:00:54 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: fPc3dyKHfn5AzBg1PyGVrmKE7GB3KddDS3d0XpR2kOg=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:05:a4:1e:b8:1a:78:30:bc:91:4c:11:5e:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Mar 2 15:00:54 2026 GMT
Not After : Mar 3 15:00:54 2026 GMT
Subject: CN=8ea19c6dfde11ef9744584c91503ab9694829d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:c4:74:cd:23:10:a0:06:f9:8e:c6:ea:5c:
3c:6e:cd:28:4f:d7:25:1d:af:8d:3e:fc:04:de:cb:
a0:82:f8:d6:f0:4a:df:f9:95:d6:32:fa:56:d9:27:
f5:3f:52:c9:50:88:f7:b0:06:c5:5a:c9:b7:e2:87:
ba:72:f8:cd:96:86:ef:9e:13:05:ee:e9:8f:39:26:
b6:a1:d2:f4:1b:f6:02:b8:fc:24:ee:08:f9:73:61:
a0:a1:5f:a4:86:f8:11:06:a3:f5:d0:5d:84:9b:88:
65:28:8a:6d:bd:32:ce:10:db:b0:f7:99:20:7f:e9:
74:46:b7:dc:2a:9b:78:b8:30:fa:20:4d:bd:04:33:
2c:af:a2:46:73:d6:89:39:53:62:6b:7b:fb:b7:bf:
6b:8e:3c:87:69:87:c3:f1:56:73:1b:01:44:24:0f:
48:7e:d9:65:dc:62:fe:ae:42:ba:c3:2c:35:af:8a:
d3:b5:27:97:b5:db:0a:ca:d7:95:00:14:d4:7a:45:
fe:96:07:ad:0e:b1:34:3f:97:b3:aa:4a:a9:a6:8d:
23:3b:dc:c5:13:a2:20:94:ba:7d:6e:03:f7:99:17:
7c:bf:84:20:f8:cd:12:bd:e7:b5:ba:a6:14:61:af:
95:e7:44:eb:ec:be:b8:2b:d5:dd:b8:8c:8c:f0:f9:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:9C:6D:FD:E1:1E:F9:74:45:84:C9:15:03:AB:96:94:82:9D:44
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:c8:63:06:8e:81:a3:b9:28:30:2b:74:b5:1b:2b:9d:64:
ca:d1:df:1b:46:cd:a1:aa:41:91:63:55:af:a8:fa:ac:e4:05:
0f:d3:c6:2e:7b:2d:bc:d0:14:b0:2f:02:ea:d6:c1:bd:89:55:
ed:bd:25:13:99:5d:ae:e6:75:2b:7d:e0:79:df:49:95:bc:98:
b0:bb:84:41:ef:df:1f:73:c8:63:f5:c9:33:a4:03:4e:fb:fc:
de:7c:d4:67:a8:69:8b:d6:de:6b:5a:1a:a7:10:92:fd:80:86:
58:4c:43:e3:ed:0f:85:f0:f1:6e:72:35:b9:8f:2f:60:94:ef:
cd:a7:b0:5b:93:c1:28:c4:00:5b:f8:07:9a:29:18:9d:e7:a0:
02:9c:70:50:c9:30:ea:36:bd:ef:bc:fc:1f:6e:bb:a5:48:09:
a3:89:4e:cf:3a:98:37:11:54:01:f2:f3:4a:ef:0e:75:de:37:
85:7b:68:db:3f:fa:5c:62:2f:78:12:eb:27:cd:5c:bb:b0:f8:
c8:0d:bd:ff:06:4f:79:c3:5c:5e:2f:6f:7b:fa:ae:6b:c4:27:
e0:59:36:2b:b1:d3:07:52:b3:7e:a8:c5:22:fb:f0:e6:bb:d3:
0a:93:9d:db:ab:65:d7:1a:3e:9d:47:2c:70:ae:8b:d9:12:ad:
1c:c3:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:45:57 2026 by rpki-client