Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: i0fNJIZfnYsYnomsA3SMT7wvA/t44j9xIIDpkApA2ao=
Subject key identifier: 69:6B:09:72:9E:31:DF:BE:C4:D6:88:78:80:16:56:C5:59:FA:6D:47
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019D9DAD60A76C26C4825EE2587A650A6774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 08DB
Signing time: Fri 17 Apr 2026 23:01:18 +0000
Manifest this update: Fri 17 Apr 2026 23:01:18 +0000
Manifest next update: Sat 18 Apr 2026 23:01:18 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: viaGOclaSj/BvpTgHOCvJPB5GCQeIaOQ1NHjdlSJJ/E=)
2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:60:a7:6c:26:c4:82:5e:e2:58:7a:65:0a:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Apr 17 23:01:18 2026 GMT
Not After : Apr 18 23:01:18 2026 GMT
Subject: CN=696b09729e31dfbec4d68878801656c559fa6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:33:62:6c:c0:3d:7f:0d:36:e3:f5:8c:f4:
72:54:e8:dd:8a:4e:e7:f4:30:c9:36:fb:a3:df:b7:
af:8d:68:85:cb:72:5f:32:f9:fb:52:7c:1c:00:74:
71:68:bd:9a:e2:d5:74:52:6d:71:ee:50:a7:b2:c5:
bc:d4:39:53:75:88:d4:f9:cf:2f:d1:9f:bc:23:e6:
83:19:c0:82:1a:a4:ef:f9:2e:21:b1:cb:b4:01:21:
7c:40:5d:1a:62:cd:67:c8:53:b7:03:b8:08:c1:4c:
cb:3e:5a:04:e5:b5:31:ac:69:3f:f4:6c:e6:bb:5e:
a6:78:2b:f2:c4:a6:db:ad:34:63:4c:a6:74:bb:17:
dc:d6:69:16:30:ab:85:26:8b:c8:c4:7d:bf:6c:ca:
78:4e:0e:7c:ae:6a:dd:5e:64:33:90:44:db:ee:7d:
b4:b0:5a:c9:c4:6f:86:ab:e0:16:0f:6a:ad:ee:81:
22:af:a7:d6:85:a2:de:5f:1e:9a:74:f4:bc:71:2e:
79:17:0a:ce:7d:09:d1:23:7c:0d:2d:fc:03:53:d9:
e0:de:79:a4:86:21:2d:ee:eb:fb:a0:27:07:d3:11:
e3:f2:55:c3:70:9e:ec:38:59:26:f4:43:a4:88:d7:
f7:29:36:52:d7:b4:88:7f:da:62:7d:26:73:6a:94:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:09:72:9E:31:DF:BE:C4:D6:88:78:80:16:56:C5:59:FA:6D:47
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:a9:4f:df:fa:03:a7:cb:9c:da:01:e5:0c:1b:98:bf:06:
63:12:49:e2:40:51:a0:19:2c:b6:a6:63:5e:2d:35:e5:31:7c:
d1:1d:a3:ad:52:9f:e7:aa:5f:bf:dd:86:5f:c2:5c:c6:79:f0:
99:f2:7a:67:a0:82:fa:cf:5b:5a:5a:e8:3d:49:20:73:d5:a1:
a4:61:78:ca:75:78:53:61:14:a2:0b:75:05:0f:8a:28:f6:d8:
55:2b:b5:8b:51:04:97:f3:0d:b8:d3:60:22:31:5a:42:e2:3e:
58:5b:4e:66:1a:c7:91:e7:c0:04:d6:b6:36:37:6c:82:7b:13:
7e:5c:73:e6:67:7a:59:cd:25:05:51:16:bc:57:5a:d3:42:01:
e7:fa:01:42:6e:6c:5b:7a:e8:9f:5d:af:20:c4:6f:93:be:8b:
85:1a:e9:64:dc:aa:21:b4:65:f3:43:60:4b:1f:13:c5:14:7c:
2d:65:b0:e5:e3:50:f8:d9:f4:e9:76:22:44:05:da:d3:ed:dc:
0b:4b:f4:3b:96:06:23:a5:3a:41:c5:f1:e7:9d:60:c6:5c:7b:
4b:89:f4:7c:c8:93:40:38:88:54:dc:a9:e0:af:64:90:88:11:
e3:6e:55:c9:90:43:73:c4:c4:d5:e7:a8:52:29:78:fc:2f:a5:
43:1f:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:59 2026 by rpki-client