Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: a/H7INvCWto8KjSL2jq7NGHfczl7b26TD+FLjwA2s6Y=
Subject key identifier: 49:D0:AB:BC:5F:03:82:C7:F7:36:B0:BC:3E:8F:6A:6E:92:92:81:39
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 019D9A3E5D6B693CBE03984B8F42560A2BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0C63
Signing time: Fri 17 Apr 2026 07:01:11 +0000
Manifest this update: Fri 17 Apr 2026 07:01:11 +0000
Manifest next update: Sat 18 Apr 2026 07:01:11 +0000
Files and hashes: 1: YzB7lmnaxe6KzTZ2IQfFLWEotnY.roa (hash: E0OkGaGBq/geU/X0+E6JxDiI+vPM6+Zn92glPSSxcDs=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: fPuy2li9YwA7sz7IgTfsmRo2q0KKEg+CTgUD10+qP64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:5d:6b:69:3c:be:03:98:4b:8f:42:56:0a:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Apr 17 07:01:11 2026 GMT
Not After : Apr 18 07:01:11 2026 GMT
Subject: CN=49d0abbc5f0382c7f736b0bc3e8f6a6e92928139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:52:e9:91:c6:b6:f5:05:3e:da:59:cf:1d:
b0:e0:63:14:8e:97:38:2e:1a:e6:d9:73:22:aa:cd:
be:e2:d7:15:41:09:ec:54:ad:87:f0:02:e8:b8:e2:
b5:65:b9:6a:6c:ac:d4:69:a7:2d:3d:43:b4:11:00:
af:08:7c:47:8b:fe:05:7e:9e:7c:13:a1:f7:80:64:
0b:7b:c9:83:68:27:b5:be:bc:ca:ea:89:15:e9:ee:
47:b6:35:14:d7:92:c2:9c:4a:36:ed:51:d8:cf:28:
73:91:a4:ae:5f:3f:1c:e6:bc:96:f7:0b:9d:55:7c:
4e:dc:2b:b0:c5:cb:5e:be:4c:4b:11:99:4e:69:0d:
33:32:3c:bc:3d:8a:e1:1c:35:50:54:47:a4:30:02:
27:3e:c0:39:6d:d6:1a:fd:d7:ba:33:f6:21:d4:5d:
14:d8:39:fe:4f:f3:43:36:3e:bc:98:0f:20:44:d1:
74:ad:ff:21:00:19:d5:2a:ae:ab:90:08:5e:d9:20:
01:20:dd:ac:af:01:27:61:5f:33:bc:75:11:d4:a5:
bf:3b:86:92:e3:06:a5:60:b5:2f:da:5f:93:47:07:
56:9b:47:da:12:08:03:9b:66:58:83:35:3d:77:60:
99:5e:8b:f2:65:df:a8:6b:79:0e:00:83:94:5b:01:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:AB:BC:5F:03:82:C7:F7:36:B0:BC:3E:8F:6A:6E:92:92:81:39
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:23:a9:b3:1f:be:79:a4:8e:1e:ed:ac:9c:2b:a9:fb:89:6c:
a6:d9:7b:f1:5c:53:af:db:54:42:88:4c:4d:8c:98:b0:ee:6d:
36:05:8c:2b:96:8a:b7:ae:c8:64:5f:ba:53:d9:77:6f:fb:45:
24:c5:eb:90:46:99:6e:93:5b:80:b8:dd:cf:0d:4d:10:06:31:
b9:2b:c2:a6:fa:e7:8a:8a:c5:78:47:ec:a6:bd:51:e5:f7:c5:
bb:46:68:67:ba:68:e5:d0:d1:96:7b:43:09:3d:a2:85:11:15:
73:eb:d1:46:a9:fb:87:55:3e:1a:eb:97:ed:31:6e:96:ac:e7:
6e:fd:f1:60:7f:fc:07:af:44:68:9a:27:f5:df:db:ac:24:72:
9c:c4:9e:cc:3e:96:a8:d3:7b:10:61:fa:19:9f:2c:52:24:17:
08:bf:ac:27:6d:db:f5:c0:7d:b2:8d:fa:60:56:36:7b:c1:ef:
34:eb:03:3b:e5:68:14:72:e3:07:48:1d:10:b2:90:04:25:18:
3a:62:e9:bc:e1:d5:bd:fa:5f:3b:d9:ab:65:4f:3e:6d:bc:bf:
cb:8a:18:dd:e8:3a:ff:20:db:de:7b:6d:43:f1:e7:d5:96:84:
e8:ed:bd:58:5a:1a:7a:97:92:0d:14:fc:a8:02:2f:fc:58:a0:
b1:90:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:36 2026 by rpki-client