Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: 6sUZSxBdiCtE5OaFMaIEkC9eflCSa54RNAX5ZHzQwTI=
Subject key identifier: F1:5F:1C:D9:8F:F0:C9:75:9F:92:CC:D2:4B:D8:79:AD:11:EB:5E:9A
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019D28844BEB040240883553E3194F0AA5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0708
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: aUPNGaq+KO8ea3HHUN5gp1pzew/BPIzDaqSpCm94N+s=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:eb:04:02:40:88:35:53:e3:19:4f:0a:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=f15f1cd98ff0c9759f92ccd24bd879ad11eb5e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:fd:fe:6c:74:66:23:5b:48:cb:cf:06:1a:
c1:f7:ed:02:00:45:12:b6:01:02:c2:ff:1a:6f:00:
1f:f5:9b:9a:e8:25:dd:10:60:c7:5e:a0:48:34:1e:
57:b6:37:f5:8c:76:aa:ed:cc:e4:32:89:63:75:ab:
81:15:99:34:db:82:9a:0c:8e:ea:6e:9e:07:03:6d:
42:c6:87:d8:58:7f:24:be:9a:12:26:9f:a8:8c:a3:
55:02:da:d1:04:d8:cd:19:6f:e2:69:68:61:39:04:
e5:d0:44:0e:ab:21:a4:8b:90:19:c8:2b:61:c0:67:
73:b8:c9:54:90:a3:a8:1c:50:f8:ca:01:a7:94:69:
bb:91:97:76:1c:be:29:c3:75:0e:4e:eb:da:57:c5:
ea:7e:fa:78:01:92:6a:d5:b6:83:33:7e:0a:5c:fe:
dc:6e:65:c2:8c:ac:0f:c4:a8:f0:e8:47:a6:a1:1c:
34:c6:d6:69:24:1d:f7:e5:82:d4:9f:b6:b4:25:86:
1a:9d:fd:48:4f:bb:84:b5:26:02:72:5a:d4:58:4e:
56:60:57:a3:7e:b3:8b:bd:f8:0a:6d:e3:1c:9c:78:
55:0e:f9:5c:26:8c:fa:92:2b:db:ba:80:b3:bc:d3:
22:17:50:a0:d0:bd:4a:4e:b6:d5:44:d6:e5:d7:cb:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5F:1C:D9:8F:F0:C9:75:9F:92:CC:D2:4B:D8:79:AD:11:EB:5E:9A
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e2:d3:a0:56:a2:b3:87:6a:95:e4:db:e9:34:db:ee:93:8f:
a5:9d:6a:53:c4:e0:7f:3d:a8:92:af:cb:06:5e:78:fa:1f:b8:
13:65:44:70:37:f2:24:3a:42:15:d5:eb:7e:03:80:93:b0:15:
0c:90:78:2a:04:c3:52:83:7d:1e:0a:ef:a6:c2:1d:e4:c9:22:
9b:99:a8:36:d0:99:7e:f6:50:dc:d8:23:a5:31:ed:cb:f0:8a:
80:43:e2:f8:f0:ae:7e:31:b5:98:57:26:c6:a0:2b:51:fc:12:
fb:a2:22:b9:78:6f:3b:e1:9b:22:f4:38:af:bd:c5:01:2f:1d:
38:09:38:35:57:d1:e9:f0:5e:9e:de:5a:bc:05:24:cf:8e:1c:
2e:c3:f2:b3:99:37:eb:2a:84:be:d9:85:3e:8e:f3:95:d8:bd:
70:f9:da:ea:ae:f0:3b:23:b4:a8:95:f6:8c:89:32:c5:8f:d3:
d9:c2:d2:dc:3d:4a:46:08:66:48:04:b8:9b:66:89:06:bb:79:
53:86:be:fc:a0:3d:56:53:12:3e:38:0c:68:61:d9:bc:44:a0:
7d:43:0c:71:5e:f1:f1:23:62:8f:5d:d2:5c:c8:c2:14:22:46:
a7:c9:e0:ac:81:1e:58:25:06:30:7b:67:84:52:cb:0e:47:86:
1c:d7:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:56 2026 by rpki-client