Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: qvicsAUf5wIpBj0wyocPW3BEi/69Jgst1/smqkAFm0E=
Subject key identifier: C9:36:A4:3F:75:EB:81:74:C7:ED:C9:F3:75:DD:47:D0:06:F1:28:D2
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019F913573FBDC2BFB847A4E160C15BF0BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 23:00:27 +0000
Manifest this update: Thu 23 Jul 2026 23:00:27 +0000
Manifest next update: Fri 24 Jul 2026 23:00:27 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: lxkQ2I/ZwRmGugYa5ldgeqJU8liC8n+FBoqF+SIqunA=)
4: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
5: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:73:fb:dc:2b:fb:84:7a:4e:16:0c:15:bf:0b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jul 23 23:00:27 2026 GMT
Not After : Jul 24 23:00:27 2026 GMT
Subject: CN=c936a43f75eb8174c7edc9f375dd47d006f128d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:d1:de:10:5d:02:8c:bb:bc:3d:70:b3:1d:
13:b5:dd:70:36:12:71:a0:62:39:4c:05:3d:c8:c4:
3c:59:14:ec:d6:92:fa:9e:9a:38:8a:c3:4a:d1:ff:
34:44:39:25:dd:1a:0d:b3:e3:91:8f:86:c2:59:9e:
89:0a:be:fa:9a:b5:b0:de:28:d8:74:b7:2a:29:c5:
d5:9f:d0:4f:bd:1a:a3:9a:2f:e6:87:76:d8:b5:5f:
3f:ac:1e:ab:bb:8c:cd:2e:c3:99:20:e7:0c:3f:8f:
a7:ef:9e:37:bb:07:c4:57:2a:71:ff:2a:ea:5f:8e:
5e:b3:53:d9:77:bc:96:32:83:c8:2f:ce:b0:41:ea:
fb:42:0c:b8:4a:6a:78:7f:f4:2b:04:1f:c6:63:42:
03:31:db:d2:d6:eb:0a:3d:a7:bf:93:37:c6:a8:16:
46:a2:23:5c:d2:81:58:ee:78:67:01:dc:c9:40:ff:
05:fd:27:99:a8:d4:a7:73:24:a0:b8:47:61:4b:b6:
f3:e2:73:5d:d3:30:07:b0:88:be:e9:54:e5:c2:ec:
6a:30:4c:ba:a1:06:fb:d2:cd:d0:cf:51:3c:d6:66:
91:aa:e6:7a:62:73:17:be:9c:3f:93:69:01:23:e9:
39:41:1f:80:04:93:0f:9e:ee:ab:17:74:e6:fe:8e:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:A4:3F:75:EB:81:74:C7:ED:C9:F3:75:DD:47:D0:06:F1:28:D2
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:d3:59:e6:ca:81:fd:08:83:e5:28:36:7a:8f:05:79:10:
9f:5b:b5:07:d3:5b:46:5e:b6:81:f9:2d:26:b8:c8:fb:9f:e2:
c8:95:76:69:21:09:a8:04:44:fe:e1:3d:4c:7b:ee:91:2e:21:
01:f3:b6:7e:2b:14:91:60:db:40:fb:b8:b0:9f:4f:0a:64:47:
7f:3c:5f:54:7b:d0:94:8b:f6:29:50:9c:b0:2d:d6:36:4a:56:
e6:b9:7b:9b:05:10:75:59:ec:b1:d1:68:56:14:7d:92:a5:9d:
34:bf:d6:7b:f4:09:be:f6:e0:73:82:88:72:26:49:0e:4e:35:
24:8e:7d:ef:8b:44:24:3f:d6:ad:24:5b:35:93:91:07:3f:01:
e8:09:a1:7d:56:65:46:ce:14:8f:5d:ea:57:a7:05:ff:d5:6c:
be:c0:e1:03:9b:d8:a8:cb:86:8b:4b:f3:9f:4e:5e:62:53:93:
2b:c6:c5:83:af:a0:42:8c:3b:1a:1b:62:96:23:e8:86:5f:45:
a8:f9:46:15:8b:93:bc:0b:b2:d9:60:19:6a:e5:87:32:b3:80:
1e:27:26:c5:7b:95:b9:74:d6:13:52:a7:a7:a1:4f:3c:a4:ce:
b1:5f:0c:d2:ee:ad:42:51:cd:3b:cd:b4:f9:2b:1e:73:ba:36:
cc:01:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:57 2026 by rpki-client