Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: uMkbESIw5FXnNdLcJTckI1G2E3P4h+Ctpq65bz5CP4Q=
Subject key identifier: 91:59:C2:13:36:D4:75:3A:53:8E:05:2F:92:5D:81:B5:34:B0:91:00
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019D9C99EED50E226F6337558E5CC6DE0F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1860
Signing time: Fri 17 Apr 2026 18:00:26 +0000
Manifest this update: Fri 17 Apr 2026 18:00:26 +0000
Manifest next update: Sat 18 Apr 2026 18:00:26 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: B/nWnqpGpF65KDydmL+Qt94/EuELGUbpTHUQYAfsVaI=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:ee:d5:0e:22:6f:63:37:55:8e:5c:c6:de:0f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Apr 17 18:00:26 2026 GMT
Not After : Apr 18 18:00:26 2026 GMT
Subject: CN=9159c21336d4753a538e052f925d81b534b09100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:4e:ad:4a:e8:9c:f8:c9:bf:e4:3d:57:af:
c3:a1:50:2e:da:29:ba:11:0e:16:c7:eb:fe:56:ee:
c2:aa:05:ab:40:a1:31:be:e9:f5:4b:56:9c:54:1f:
51:81:ff:aa:63:41:3f:a0:90:3a:8c:ff:01:9c:a4:
b9:b3:eb:24:e2:7c:1d:b1:8a:cd:2d:a1:b6:be:e4:
d4:a0:c3:03:aa:4b:d9:5d:13:82:86:08:da:58:75:
6b:e8:d8:d9:2d:74:3e:b4:fa:57:ab:cc:9c:75:58:
74:45:c6:b2:87:78:2f:a9:71:e3:b1:b1:6f:4b:fd:
29:2f:e2:ac:0f:90:09:99:95:aa:58:40:4a:35:78:
96:61:75:cc:45:f7:a8:05:42:5b:86:08:9e:e2:3f:
0d:6c:e8:ea:61:a8:4b:b9:01:9a:6c:52:a3:51:c5:
79:be:9c:26:d5:f2:f8:8e:4f:ba:3b:9b:47:5e:08:
d0:e6:50:c5:8e:5a:c5:90:bc:f8:05:72:0f:f1:9f:
82:c5:ae:5a:2a:0a:be:4f:85:e5:66:62:96:17:1a:
6e:87:b7:67:3f:69:13:8f:2c:8b:20:8a:4b:ca:1f:
76:77:39:a5:da:00:b4:b1:b4:6f:d7:f4:85:8f:28:
a1:7a:e4:e2:c0:ae:9f:f7:40:e7:20:90:8a:12:23:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:C2:13:36:D4:75:3A:53:8E:05:2F:92:5D:81:B5:34:B0:91:00
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b1:27:c8:c7:da:fd:3e:8e:4f:e4:da:a7:90:d0:d6:b0:6b:
4d:94:48:e3:25:04:a2:30:7c:dd:33:72:37:d6:6b:ba:4b:05:
6f:75:95:91:ac:21:36:fe:d3:9c:02:dc:7c:e9:50:36:6d:4f:
47:75:bc:fe:68:44:9e:15:da:2c:e8:c3:75:bb:33:2a:37:c2:
b2:8f:00:20:d7:72:07:de:34:ca:1e:f7:2e:f0:f1:c0:a0:97:
07:6c:2a:73:cf:ff:dc:db:2f:99:f4:56:4f:29:c8:44:27:40:
a6:0e:ea:e4:d3:a2:57:8d:71:c5:57:ab:69:28:ce:15:fd:fb:
5b:14:79:73:16:e5:a9:12:0c:59:db:d7:28:fd:e1:61:0b:af:
eb:da:ed:06:85:7e:06:72:ba:c1:cf:e3:87:28:a6:9e:9d:5d:
d3:24:29:4d:7f:38:80:f3:07:92:c3:62:f7:6c:37:3c:a8:ff:
60:3f:88:51:1f:6a:d3:98:1b:9e:18:67:81:d6:28:9c:de:fa:
80:0f:61:49:27:76:11:1d:71:16:3a:84:0d:6f:2b:0a:c0:f9:
70:1f:31:e9:99:2d:6d:df:d9:c0:8a:c2:c0:9a:2e:6d:70:db:
46:d4:5e:d4:64:83:73:79:a8:58:e1:09:9d:8c:33:b0:f6:c0:
05:28:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:17 2026 by rpki-client