Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: fGki2+H28srgf/mj5wrVbNKJxGFNmA6p6GFd3a5I5z0=
Subject key identifier: 6B:65:93:B7:27:07:26:30:7F:DF:07:AF:33:70:CE:7A:70:D1:C5:A3
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 01A0C17B501ED1853443A1E5CA0BFB24EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 1136
Signing time: Mon 21 Sep 2026 01:01:19 +0000
Manifest this update: Mon 21 Sep 2026 01:01:19 +0000
Manifest next update: Tue 22 Sep 2026 01:01:19 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: hhGC07pSK9mNuouAU5ps2ipfuSlTKSxTe5sPU681Al0=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:50:1e:d1:85:34:43:a1:e5:ca:0b:fb:24:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Sep 21 01:01:19 2026 GMT
Not After : Sep 22 01:01:19 2026 GMT
Subject: CN=6b6593b7270726307fdf07af3370ce7a70d1c5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:ea:d5:dd:16:38:cb:6b:66:3e:02:19:71:
80:81:11:30:dc:b5:7e:e4:04:30:5d:b4:92:5c:80:
33:cf:00:70:9d:fd:b2:fd:5a:c1:37:40:69:73:82:
bf:5c:ba:80:d3:51:ae:36:82:0b:ad:5b:95:3c:a7:
fc:b4:37:7f:82:c7:04:9a:fe:ae:29:1b:ee:d7:5c:
ea:6a:c3:1e:e6:7c:cb:27:62:ea:8f:bc:bb:ab:56:
fd:e3:40:a0:00:08:3c:d8:b2:09:57:48:f5:61:55:
03:66:27:c9:b3:54:bc:77:d8:1f:19:7b:48:f6:f0:
f6:dd:ed:92:b1:61:5b:5e:90:56:5e:3b:c0:35:e0:
de:1f:04:9a:af:e0:eb:db:df:bb:c4:d1:c4:db:27:
45:62:33:d1:88:00:57:0b:02:92:d7:91:43:34:78:
f1:b1:56:d1:f1:d9:a8:d6:41:99:58:2f:e8:53:21:
e2:b6:6d:8c:50:3d:5f:a2:18:e7:99:22:12:ec:4e:
81:b3:0f:2f:e7:fe:1e:a2:94:1f:24:09:0c:d4:31:
30:aa:15:2e:44:fe:c4:55:bf:ee:5d:c4:b2:7a:f0:
bf:de:24:ea:3e:03:95:1c:d0:bb:87:56:0a:f4:80:
26:7b:10:6a:d6:8d:3d:79:c9:30:a1:73:23:0b:94:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:93:B7:27:07:26:30:7F:DF:07:AF:33:70:CE:7A:70:D1:C5:A3
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:1f:b5:53:33:b7:38:cd:5a:5b:7c:45:3a:15:c3:f7:66:
39:21:0b:c6:0a:3d:a0:3d:a7:03:10:04:3e:42:8b:1c:fa:74:
b8:61:8c:84:f5:e0:ca:06:3a:92:7c:eb:a1:d1:98:9b:78:02:
c1:31:cb:c9:d5:45:4c:87:c5:5f:f3:7a:3a:8d:c7:96:7e:25:
35:e3:f1:68:ea:e8:a5:c8:62:9b:ac:ac:58:c7:01:e1:31:cb:
d6:8a:a8:ca:91:5f:dd:63:b4:a1:fb:1d:dc:d2:80:b6:85:6d:
3f:75:29:c7:6c:76:df:60:e0:56:44:a1:93:7c:b0:c4:27:5d:
18:8a:39:e3:7a:b6:e4:2f:42:7b:2f:e7:de:aa:8a:a5:ec:89:
26:34:08:05:65:71:d7:b3:38:a5:e0:cf:dc:b6:04:e7:71:8c:
69:54:29:8f:e7:50:24:8b:ca:23:aa:a3:15:8d:0f:4a:f0:9f:
52:29:8d:4b:c9:2c:cf:27:cb:91:44:84:f0:24:57:4f:f2:db:
3d:5e:3e:a8:41:2d:8a:75:2c:29:3b:00:c1:7c:c3:96:81:b6:
af:d2:73:10:1d:d0:9a:a3:81:0c:ad:da:05:60:bf:89:79:a9:
9c:7e:fd:51:c9:d4:74:c3:2c:e6:b5:8e:26:98:e3:94:f3:79:
59:89:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:39:58 2026 by rpki-client