Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: k0yYQAM/cWXFDwzFLqSxr6f7Xb1jOUIbZAmu8477mno=
Subject key identifier: 3F:D0:7E:F9:3A:55:2F:FF:F2:EC:5E:6A:7D:30:92:63:D2:EE:ED:2D
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019FABD158F4134C136FD2C75D4BC66F21FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1971
Signing time: Wed 29 Jul 2026 03:00:51 +0000
Manifest this update: Wed 29 Jul 2026 03:00:51 +0000
Manifest next update: Thu 30 Jul 2026 03:00:51 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 9WypzGbK78GYEDDtF4oA/cSRrxEHS8wn7Q03JIaceXw=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:58:f4:13:4c:13:6f:d2:c7:5d:4b:c6:6f:21:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jul 29 03:00:51 2026 GMT
Not After : Jul 30 03:00:51 2026 GMT
Subject: CN=3fd07ef93a552ffff2ec5e6a7d309263d2eeed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:15:b3:56:d2:53:3f:4e:41:3a:db:42:dd:
3a:6d:4f:4a:97:35:b6:61:c0:c4:1d:b1:17:40:93:
d2:ec:e7:cf:26:3a:b8:ac:10:04:c6:f0:9c:d6:aa:
7a:ce:71:43:f6:96:bd:d4:6f:bc:8e:c7:55:d2:2a:
92:3d:47:01:a7:ab:a4:1c:a5:50:69:9d:16:6a:f1:
f3:27:69:08:4a:2f:e0:b3:ad:1f:fc:22:07:5a:67:
eb:da:f9:59:bc:29:1a:b7:4f:64:a5:cc:0b:cb:50:
79:da:da:a4:31:35:b6:a1:1f:41:38:98:2f:87:37:
76:9c:20:50:35:bc:f4:18:55:a0:e4:70:8c:52:75:
56:0f:30:70:fd:ec:c9:41:09:6e:01:ae:ae:e9:a0:
6d:d4:13:1d:0c:d4:a3:df:60:7b:f2:d6:ff:fd:2e:
38:29:97:ce:03:7c:26:d3:b5:36:81:44:58:b2:01:
ee:dc:35:bb:40:01:a3:03:07:e5:25:3b:d8:32:ce:
27:e8:2a:17:b9:fd:ac:04:e3:1c:39:f9:46:5f:b2:
ed:0e:62:21:1d:87:c0:b2:d7:84:a2:8a:e1:86:15:
b1:51:02:5a:68:a7:14:c2:ba:17:41:a3:00:51:3e:
9a:5a:ce:a0:c0:9b:55:6c:89:90:b8:e3:eb:60:db:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:7E:F9:3A:55:2F:FF:F2:EC:5E:6A:7D:30:92:63:D2:EE:ED:2D
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:f4:d1:2f:4d:ae:ce:74:aa:a8:4b:40:80:0a:51:31:d8:
53:d4:e7:f2:5e:2e:44:dd:2b:66:e3:0a:b0:0a:d9:b5:e0:dc:
1b:4b:51:80:16:86:17:42:74:21:f4:2f:1e:e3:79:92:22:55:
31:ac:f0:c8:db:56:04:f8:4a:23:a1:0e:e5:84:4f:b1:fd:38:
36:86:a6:cf:62:93:c2:ff:89:9b:1f:41:79:ae:64:3f:26:f8:
3e:29:7c:ce:a2:79:57:4f:08:6d:a1:17:9a:28:27:5b:34:c0:
94:25:21:69:1c:a7:f8:82:29:2f:f6:7e:e0:fb:d5:24:e3:ec:
e6:85:98:e9:cc:f2:a6:98:0f:b6:0a:59:ae:91:d8:1d:29:f1:
77:6a:10:30:bd:11:de:0a:18:98:09:a0:8d:43:94:2e:37:ce:
d0:39:9d:10:e3:44:95:80:d8:b7:3a:d4:40:e3:43:d8:1f:11:
63:d9:1a:7d:72:0b:0e:8a:1f:35:8f:53:9a:d3:f2:b8:74:e0:
b2:8b:d6:3e:09:3a:db:eb:70:41:05:ca:05:a9:f2:09:a0:1d:
6c:1c:b9:6c:87:ba:bd:f5:10:45:68:d0:57:87:bb:86:bb:3d:
3d:03:19:86:60:38:00:f9:00:4a:43:0e:6e:e1:7f:7b:78:3a:
13:f3:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:46 2026 by rpki-client