Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: CNZZZ38Q9vZEgK8BZQBx220jJsFA5N38BW6X2vf8Fq8=
Subject key identifier: 31:4F:3C:8E:E8:AC:50:BC:19:05:38:89:B0:2B:DA:24:B7:08:74:45
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019D996212555860E58A3FBD790605E6803E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 08B6
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (hash: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs=)
2: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
3: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: QkcnvrSBylPMbLu2N0Rnnh5GNsz5psTkJO+wv5+aLRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:12:55:58:60:e5:8a:3f:bd:79:06:05:e6:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=314f3c8ee8ac50bc19053889b02bda24b7087445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:fc:19:27:3c:e5:24:0b:b0:c7:45:f6:8a:
b8:15:cc:a4:da:6d:44:dc:91:43:4a:24:36:d7:e7:
e1:d4:0d:03:37:31:3e:1d:f3:ca:a3:7b:2f:5c:a3:
d5:92:17:a4:c5:e3:e8:61:55:f9:72:07:58:2d:95:
bc:fe:9c:d3:2e:ec:73:5e:8c:80:b3:08:00:48:9a:
22:07:56:f6:83:f0:7b:5a:bb:2a:6c:d2:62:a6:1a:
bf:58:2c:4b:69:47:14:f6:b2:51:6c:47:6f:16:94:
f2:d9:31:67:73:c8:85:16:47:6d:a7:cb:4d:53:df:
3d:05:f9:e8:b9:60:e8:28:46:33:a6:a6:07:d0:46:
1c:94:92:0b:7c:37:bf:b3:c2:0a:da:af:c5:bf:46:
92:33:8c:ec:ba:f1:83:f8:30:fc:cc:36:6b:d6:80:
c8:4c:6d:04:25:f4:59:8f:0e:56:9f:7e:81:34:9c:
80:b5:b5:b7:9f:33:ff:25:8c:0a:b4:8d:50:ed:f2:
92:db:f0:e3:5b:0c:c0:79:37:f4:e8:5f:b1:84:0b:
ae:da:e0:fb:19:01:bf:d8:1d:c7:e7:b8:d7:44:2a:
b4:a3:5e:64:dc:d8:68:bf:9e:57:74:b5:21:e9:e6:
3d:23:39:81:22:3c:d6:c4:a7:15:db:16:be:a1:85:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:3C:8E:E8:AC:50:BC:19:05:38:89:B0:2B:DA:24:B7:08:74:45
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3e:75:c9:ca:e6:af:22:e1:0d:43:a6:29:c6:a5:1e:cf:0d:
8b:87:d9:8d:25:f9:bd:1f:87:ab:1e:3a:d8:fc:29:7b:37:ff:
f3:c6:f6:f0:01:be:ab:8a:51:8d:f4:84:96:36:04:3d:ac:7c:
08:14:9a:ca:fc:57:a5:50:26:4e:f8:ea:8b:b1:2d:54:51:93:
b9:ff:8a:1b:8e:3e:11:8b:12:38:44:e1:01:95:9c:f5:e9:fb:
f1:db:47:53:f1:29:a6:1e:35:e4:c7:26:83:fc:25:27:d8:57:
f1:67:82:a4:7b:89:42:fa:22:c5:cd:ea:b8:6b:f1:13:4b:9c:
ed:20:29:fd:fe:8b:c3:85:70:19:fc:cd:bf:2a:31:92:90:77:
72:1c:e3:84:59:4e:93:a7:10:62:95:e0:b1:44:aa:b4:f0:da:
9c:88:eb:71:ae:11:39:75:e5:4e:df:67:8a:3c:7c:49:c8:cc:
63:43:b1:b3:92:22:75:6c:18:48:44:81:63:63:4d:81:0d:0a:
46:85:d6:2c:23:aa:30:d6:04:4c:74:42:00:67:94:5b:5d:ea:
2c:d5:22:e9:d2:81:4f:58:7e:52:33:04:3a:ee:08:a7:0b:84:
fa:86:1c:3c:5e:8b:e0:aa:fa:1e:42:98:1e:2c:17:d2:2e:af:
4e:2c:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:57 2026 by rpki-client