Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: 7svOGVJ1pFK4s6QtI3cowbGlosU7YfaN9499uQE0qnM=
Subject key identifier: 7F:8F:4F:6B:CA:A1:39:C5:5C:6D:4B:69:B7:99:47:74:53:E9:EF:70
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019D98507F2954C893ABB02D1FD576868AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0F93
Signing time: Thu 16 Apr 2026 22:01:45 +0000
Manifest this update: Thu 16 Apr 2026 22:01:45 +0000
Manifest next update: Fri 17 Apr 2026 22:01:45 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: +fjWBDKjUU2k5D2Gp8imoElLbXpjOoHCFkXkUg0wUoE=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:7f:29:54:c8:93:ab:b0:2d:1f:d5:76:86:8a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Apr 16 22:01:45 2026 GMT
Not After : Apr 17 22:01:45 2026 GMT
Subject: CN=7f8f4f6bcaa139c55c6d4b69b799477453e9ef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:b6:8c:89:93:7a:87:59:80:b3:64:23:2d:
49:fc:cb:32:08:ae:64:b9:38:57:af:e0:7f:1d:e3:
9e:c9:d5:91:4a:41:c4:da:5a:b9:97:85:d5:74:1d:
f4:69:3a:80:fa:33:8d:8f:7c:9d:ca:bd:d4:2b:3a:
10:2e:ad:f1:e3:50:a8:f0:45:12:79:80:4f:58:bb:
b5:f2:cf:0a:d1:b0:37:03:df:25:a4:d7:9f:db:5d:
7d:94:42:42:19:cd:53:63:17:b3:43:ea:01:99:09:
0d:89:38:e9:d6:c2:fb:40:ed:69:13:86:a3:c9:fe:
5d:4e:89:08:a2:bc:2b:62:be:b3:f2:8e:e2:f4:9f:
f4:c0:71:63:ff:e0:18:10:f6:81:bd:71:ff:b7:0a:
6a:a7:ac:84:25:3f:4b:b1:ae:09:54:2a:78:9b:e5:
2b:96:93:5b:3d:ef:ad:0a:35:dd:63:17:71:07:cb:
98:87:ba:e6:dd:b6:b1:92:6d:72:d7:cd:82:61:50:
9d:6d:b9:f4:2b:71:29:ea:38:b5:49:16:a9:7d:20:
9b:0a:52:2f:87:15:f7:ac:d7:e5:c1:a0:b1:77:45:
79:d8:3f:93:0d:fa:34:4d:47:eb:8f:03:2f:a2:4a:
58:24:b5:7e:81:0c:d2:03:20:b8:c5:19:72:d2:94:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:4F:6B:CA:A1:39:C5:5C:6D:4B:69:B7:99:47:74:53:E9:EF:70
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:35:18:15:e8:cf:39:22:f0:5b:de:8e:bf:83:07:9d:67:d6:
5b:1e:d0:21:a4:6c:44:d0:26:dd:0f:f6:ac:f4:26:6d:ed:d6:
ee:15:5c:d3:91:09:c5:6f:e7:36:cd:8c:9c:2c:d6:f3:79:ae:
b8:fa:e2:37:8b:40:94:7c:b3:36:91:3e:a6:46:e3:36:10:89:
57:54:d0:ce:46:c9:05:0f:5e:66:48:e3:b2:5c:95:79:2e:af:
13:d8:55:42:f2:10:53:2c:3d:bb:94:cf:67:e2:c9:48:cb:4e:
95:ed:98:3a:7a:f0:eb:39:96:62:91:c6:81:61:7b:36:af:e5:
2d:3a:1f:12:9e:ee:63:8c:ed:64:b9:97:fa:0c:0b:29:ac:33:
5c:da:36:8a:5c:95:67:f7:fd:74:bf:4c:cf:8d:4f:d8:ff:1c:
e8:ae:7d:18:c2:ee:09:d6:5d:05:b4:d2:97:82:05:e0:f3:90:
3e:c1:e7:01:4b:29:d2:22:5f:e7:d1:77:c9:c9:1e:1c:2c:3e:
18:a4:90:43:5f:59:c5:a2:1e:d3:f6:8b:16:5f:2d:f4:8b:3e:
27:d9:70:21:18:42:a4:bd:55:15:ae:c7:aa:c5:8a:58:8f:63:
f1:f0:7a:a1:0e:6f:e1:52:b9:f2:b9:0e:01:32:42:6e:91:b9:
6f:d9:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:44 2026 by rpki-client