Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: 6LgQGFuU86ALoZ6ZacM9q5HZDwuSkW3mw0y3JJ9QfDQ=
Subject key identifier: 83:B5:06:19:3A:86:39:9A:9B:99:19:63:DD:E2:06:A0:81:7E:F5:A5
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 01A1C631C76D4291A8298797887F1EF8D16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 11BD
Signing time: Tue 10 Nov 2026 16:01:53 +0000
Manifest this update: Tue 10 Nov 2026 16:01:53 +0000
Manifest next update: Wed 11 Nov 2026 16:01:53 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: v7+SaAwDQ989fjyT7dVwtjHZ10pchR4DDTJKpnW79Bo=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:c7:6d:42:91:a8:29:87:97:88:7f:1e:f8:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Nov 10 16:01:53 2026 GMT
Not After : Nov 11 16:01:53 2026 GMT
Subject: CN=83b506193a86399a9b991963dde206a0817ef5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:07:f6:8a:95:c0:ac:56:0a:5d:29:d1:26:
19:72:94:c8:4b:94:77:fe:aa:48:31:53:dc:3c:23:
bb:e8:b6:ae:1e:8f:a6:c1:21:b7:96:a3:72:dc:64:
ac:49:24:b4:a3:3f:08:b4:73:1e:fa:bf:0d:a4:0e:
dd:cf:25:b1:6a:7c:f2:f3:c7:ee:f1:4a:dc:13:7b:
2b:7c:92:d1:72:0c:0b:d4:30:49:cf:65:ba:0e:02:
4c:ae:e9:25:18:12:70:c0:3b:b3:fb:51:17:5e:f3:
de:d6:5e:d8:cf:d4:df:bd:3f:d6:02:36:a5:50:e6:
fd:e0:69:c6:96:0d:b9:95:7e:84:3b:7f:bb:92:42:
c1:18:a4:71:06:02:b0:39:4f:81:90:3f:1f:6d:a5:
28:08:03:34:d7:be:91:78:fc:a8:21:c9:e6:d9:f6:
43:de:03:80:76:f9:95:89:3b:d7:31:a2:36:e7:9e:
fd:b4:08:de:3e:8f:15:86:f3:c1:b7:26:9f:c7:ce:
b1:0f:8a:38:64:f4:34:cf:77:f7:fb:cf:ca:41:53:
bf:5d:97:2b:ee:81:d4:2d:29:b0:94:de:6f:2b:43:
ef:35:69:eb:08:2a:a4:39:44:63:5c:8b:17:6e:d9:
5d:18:34:21:8b:0c:23:92:1e:ba:b0:af:26:b6:ce:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:06:19:3A:86:39:9A:9B:99:19:63:DD:E2:06:A0:81:7E:F5:A5
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:cb:30:b1:2b:97:6e:12:92:b8:cd:54:93:8c:cb:32:ff:
82:d3:d3:f4:06:1c:12:7d:ac:26:f9:08:fc:62:89:73:d9:65:
18:97:02:95:f4:f0:86:a4:a5:66:16:54:1e:32:e7:8d:22:2c:
8f:9f:47:4c:d4:bb:0e:6a:32:f9:5e:24:36:e0:41:ce:9c:e2:
ee:f5:3a:a0:b0:6d:96:bb:5c:c4:b4:7d:f8:d3:a3:07:8e:e9:
a8:bf:99:8b:06:da:18:b2:bc:e2:94:00:52:77:6d:9e:c6:ad:
37:69:9c:05:5b:16:37:3d:09:5b:59:14:5f:ad:72:20:92:69:
95:55:0c:83:43:10:5d:f6:52:d7:34:2f:c8:5b:f1:e1:ed:66:
d6:c3:77:36:f8:0d:aa:f0:75:3b:d8:ba:b1:66:52:27:1d:23:
73:ad:92:04:3a:a7:7b:92:8a:97:77:9a:80:26:5e:6b:8b:61:
0c:15:dc:da:40:10:d1:d5:38:de:dd:af:3a:67:1d:bb:cf:4b:
52:52:32:25:ad:9b:96:06:cb:31:fb:52:fc:1d:5f:18:4e:c7:
b2:fa:45:a6:2f:3a:4b:33:c4:6a:a9:96:a4:2a:15:2f:b7:1b:
30:30:97:dd:8d:8d:98:ee:64:20:a2:56:f0:f6:60:d2:56:4e:
0a:ec:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 04:12:32 2026 by rpki-client