Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: bJ/+vcgrP66jooqMVy2yqd7rPVzDz4MyFuoDx8hqGwU=
Subject key identifier: 43:81:32:1E:76:54:3D:38:D8:F8:06:9B:16:B5:45:8C:BD:5E:97:D5
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019D2771E991C3B55678BF6BCDB526580E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0983
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: h9uC1CSwo/Ok0NC3T+kmIKnYlzC/7icmIgom0zN3wXw=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e9:91:c3:b5:56:78:bf:6b:cd:b5:26:58:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=4381321e76543d38d8f8069b16b5458cbd5e97d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:d3:51:b8:6d:f2:25:04:ce:14:d6:7d:0c:
92:2e:a5:ea:e4:46:55:eb:1e:ec:41:06:3b:7f:58:
1e:84:6d:58:81:66:47:19:58:83:3c:e5:bf:a1:b3:
65:0e:28:a0:be:b6:b0:a8:2e:be:78:4f:37:8f:1d:
dd:52:14:1f:64:55:94:81:0b:f0:6d:9e:7b:fb:d0:
0f:6b:4d:d9:c0:cf:9b:49:4c:a8:0c:c9:ed:78:fc:
75:e4:5e:a4:0d:2e:d1:47:b4:31:a7:d1:d3:4f:d0:
f9:8d:9e:5c:f9:af:0a:90:ba:aa:29:a3:72:72:62:
cb:19:0f:c5:74:66:9e:62:40:21:d7:90:b8:2c:8b:
1f:5f:be:54:7b:ae:90:2b:83:5b:61:c0:c0:7d:ae:
60:41:e9:59:b2:ea:d6:cb:bd:6a:83:53:c4:43:6e:
1a:6e:7b:c8:39:a1:97:5d:b9:eb:9f:85:13:9f:47:
d7:12:48:43:b0:79:03:81:7f:5a:2b:d8:d7:09:30:
b7:d2:8a:90:99:01:b1:11:56:6c:04:89:62:79:b9:
59:be:39:a9:5a:a6:0e:10:15:3d:3f:9c:c9:b7:68:
cc:1f:1d:82:4b:8c:10:4e:7b:ab:7d:83:ba:f0:d9:
d9:69:90:22:27:d6:ad:d0:97:5d:ff:f2:1a:b1:b1:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:32:1E:76:54:3D:38:D8:F8:06:9B:16:B5:45:8C:BD:5E:97:D5
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f9:d8:2c:49:f2:74:0c:45:ee:df:f9:2d:ef:83:37:1e:82:
18:1c:69:32:44:ba:db:d4:87:a5:d3:df:2c:5c:e5:1b:11:0c:
8b:9a:c4:c9:2b:c2:18:3e:b0:ad:40:78:32:97:bc:3b:4a:5f:
bc:6d:c1:9e:d4:20:6f:16:79:01:6e:e3:1d:fb:d8:e3:36:10:
8a:20:6b:e8:d3:90:59:d7:87:e5:39:56:6f:3b:de:5a:eb:ff:
16:aa:57:53:b5:9a:d3:a5:99:99:3a:e5:3a:f0:fa:40:f1:b0:
e5:53:c2:60:26:8f:b0:66:dc:7b:e6:f0:a4:72:0c:26:ea:5f:
ba:2b:d0:85:60:75:80:7e:9c:96:bb:f9:56:9b:e3:98:22:31:
6b:ad:60:86:4a:41:35:24:34:56:e4:c8:2b:f3:47:5f:db:ea:
8e:15:61:81:99:17:f4:da:24:6b:6b:13:33:a2:1f:a5:c3:ed:
f4:47:a8:7f:a7:03:86:fe:e3:48:75:b1:3f:e5:3c:1f:e5:ea:
5d:bd:ee:1b:31:4c:ca:cb:94:8e:e4:5b:a6:d3:6f:b0:c0:f8:
ec:65:03:3b:d5:20:26:5b:e3:f6:ca:83:de:fe:e0:e5:16:2c:
42:8d:43:7e:5d:c9:51:68:fd:62:82:ea:f0:57:c8:2b:3a:96:
73:76:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:44 2026 by rpki-client