Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: /6lmsUH+QKbYS+awcqsqMviIZe9WCuJr6jKj2IhFfvg=
Subject key identifier: 7A:4C:6B:8D:B4:49:0A:61:A8:1A:9B:7E:88:5A:D9:04:2E:5D:FC:B6
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 019DA3E622983CF7410FB7B66E64EBB88CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 0BB5
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: q+7jJUlhiGDxeQ7fFcOvsmjS4OmZ6kNcHkhVAJgWBy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:22:98:3c:f7:41:0f:b7:b6:6e:64:eb:b8:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=7a4c6b8db4490a61a81a9b7e885ad9042e5dfcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:58:9d:23:bd:9b:6f:1e:6c:51:a3:13:4a:
8b:7d:19:2c:79:11:95:9f:e6:b1:70:d6:4d:71:d2:
50:e1:c3:f3:c0:70:28:f7:97:7c:f8:42:1b:a9:c5:
20:c0:69:ba:41:0e:d7:4d:ac:97:d3:c5:fc:e1:38:
ef:3a:14:f4:7a:68:ab:a5:f4:21:64:bd:3a:a7:0b:
95:97:7b:ac:e5:60:a2:b6:7e:5e:a6:de:eb:93:14:
f4:e7:62:cf:c4:de:b5:77:0c:7c:52:6d:f5:d1:25:
0e:05:26:a5:dc:aa:e8:ed:8b:65:cb:d6:a0:3e:f6:
29:4f:dc:ad:6c:22:6f:18:c6:7d:33:2f:6d:14:28:
d3:dc:7f:ef:a0:ef:16:55:e5:5e:fb:5c:e6:cc:a1:
b7:15:da:8c:67:86:fc:13:f9:77:ec:51:46:a8:da:
11:86:6b:3e:21:da:dd:1f:18:08:fd:72:ae:c4:e5:
52:41:e7:1d:51:89:38:dc:f0:7e:ed:11:f8:aa:d2:
0d:4f:d5:8f:ee:6f:19:89:71:07:d3:93:9c:b5:0a:
32:35:6f:79:85:35:cf:e5:5a:a8:4c:83:a4:66:f2:
6b:8e:b2:1f:65:70:69:42:a1:6e:7c:d6:de:36:65:
61:91:50:75:f9:5f:d6:e0:30:07:fa:d8:59:e8:36:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:6B:8D:B4:49:0A:61:A8:1A:9B:7E:88:5A:D9:04:2E:5D:FC:B6
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:99:9f:5e:f5:49:87:fa:0a:10:35:13:5f:a6:bd:69:18:3f:
e2:95:89:34:e5:77:75:01:07:0a:15:bd:f3:97:bb:66:51:b6:
83:e7:d1:66:d8:90:70:a8:3f:f3:92:3e:02:2f:be:05:54:d4:
c6:48:e4:77:5f:33:cb:5c:cc:33:cd:8f:39:d4:cc:c1:6d:35:
ed:a4:3d:d8:01:c5:32:76:9f:5a:9c:bc:b3:35:ab:3f:5d:38:
6d:cb:5f:48:8d:a1:a3:de:9f:5c:b7:6b:88:8d:5f:2d:39:98:
16:e3:41:3e:24:37:74:42:1c:12:7c:47:50:23:1c:fd:cd:18:
07:ae:24:a0:d3:4f:73:b9:fc:a7:47:ad:42:6f:cd:53:a0:45:
97:1a:bf:40:c3:d4:41:76:7f:e4:49:7d:c1:29:2c:fe:ba:df:
2a:8f:75:2d:d1:6f:bd:c5:82:60:ed:01:1d:6f:87:15:ff:2c:
82:28:23:a3:da:5e:0e:12:ca:65:b4:84:54:d0:99:85:a5:e0:
20:58:bc:d1:cc:ca:5f:50:06:0b:49:17:45:06:85:91:9d:9b:
87:47:8f:fb:94:78:23:12:32:a8:de:4c:b3:cc:b5:49:17:da:
3d:98:ae:ee:71:2e:6a:6c:fb:09:65:66:6a:6c:9f:75:c0:f9:
f6:c6:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:57:01 2026 by rpki-client