Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: hTUtIyJ3DnZf94doFriCqnRJzUl9T7PWb/tg0pFH748=
Subject key identifier: 8C:BD:1A:96:5B:7D:0B:3E:CC:9E:0B:03:36:88:70:20:73:E5:BB:8C
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01A0CDEC95F8F26F25688B9C0A91344723B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1A75
Signing time: Wed 23 Sep 2026 11:00:29 +0000
Manifest this update: Wed 23 Sep 2026 11:00:29 +0000
Manifest next update: Thu 24 Sep 2026 11:00:29 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: nx+MF1HDCzMH4qYePbj628oCH8UO1y+V4GoB0/On1C8=)
4: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
5: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:95:f8:f2:6f:25:68:8b:9c:0a:91:34:47:23:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Sep 23 11:00:29 2026 GMT
Not After : Sep 24 11:00:29 2026 GMT
Subject: CN=8cbd1a965b7d0b3ecc9e0b033688702073e5bb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:81:6c:65:1c:10:eb:e7:f6:ab:39:73:19:
24:6e:b7:e6:27:e0:4a:65:8c:98:6c:e9:99:ec:d9:
92:f9:96:39:29:2e:12:0c:a2:4e:03:67:11:1b:38:
47:29:ad:66:29:56:aa:fb:7a:95:65:3b:b4:43:c4:
8b:f3:37:e9:a2:f7:7b:93:68:b9:d5:9e:66:65:29:
57:23:46:c6:0a:a0:cd:13:a1:3d:28:b7:c2:4a:ca:
14:d7:71:6c:15:0d:47:ff:7a:83:eb:35:3d:11:83:
09:cc:84:cb:4d:e3:88:85:b0:98:4a:e6:8f:99:d7:
3f:cd:5b:55:e2:0b:32:b5:04:34:06:65:f1:e0:27:
1e:aa:f1:79:fc:c8:f4:6d:5a:14:31:7e:24:81:c7:
d6:75:9c:08:da:fc:0d:73:98:cc:05:98:c8:9e:db:
fb:8e:8a:82:78:e6:f3:54:46:53:f4:08:62:27:2e:
a4:6d:65:c2:cc:c1:8c:cf:6b:bd:43:5d:28:c0:43:
bc:e9:b6:54:db:0a:1e:c4:91:bb:ed:2d:4f:68:df:
74:07:d6:79:14:fa:b8:dd:ac:e8:95:c1:e3:54:5b:
bf:87:f7:60:86:9b:45:2b:09:1e:37:7b:0c:4e:67:
20:6b:93:4e:3d:e9:a6:60:19:66:ee:03:b0:e3:25:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:1A:96:5B:7D:0B:3E:CC:9E:0B:03:36:88:70:20:73:E5:BB:8C
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:1e:62:f2:3f:1f:15:2c:c6:79:32:1c:15:4d:bb:be:c5:
a3:51:96:1c:6a:99:5b:7f:37:67:72:f3:8c:b0:ec:2f:d2:01:
52:f4:67:2a:d5:d9:b4:c8:fd:ae:78:5f:0f:a3:78:f1:86:92:
bd:d3:b1:ec:c0:91:11:8f:d3:c8:db:e8:4b:fd:d9:79:9c:38:
48:63:a3:c9:7e:cc:72:00:89:f7:0e:e8:57:25:ad:83:27:a9:
0f:bd:77:fa:52:50:f0:28:10:86:1b:df:45:25:f4:5c:53:11:
6c:ae:43:aa:b9:4d:e4:b3:87:f4:66:c1:3f:98:54:02:f5:75:
c5:d3:0f:7c:25:f6:50:a1:c2:49:0d:d9:30:3a:f8:17:0d:6d:
c3:a4:d1:76:62:90:09:43:d4:d4:a5:7f:cc:ac:2d:14:4f:89:
64:c8:04:8b:ae:ae:af:67:33:86:1a:eb:fd:9c:3a:aa:43:da:
99:1b:f9:65:df:20:4e:dd:59:5e:a7:98:bb:35:e7:37:cc:a6:
45:f2:09:ba:2b:ab:0b:4f:c6:15:8f:b0:31:fc:4c:25:da:59:
77:ce:35:0d:a2:ee:74:8d:1e:9b:7b:44:92:c9:2c:89:0f:86:
3d:1a:9e:17:91:b1:cf:d5:b9:f9:38:91:c8:0a:7d:66:6e:62:
4b:78:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:40:21 2026 by rpki-client