Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: JZnXjr3TD9fBZpLVEmHpIIvAKyaJC5DQ78xzVHHBz5U=
Subject key identifier: 37:F7:93:8F:44:B2:6A:31:64:0A:8D:D9:7D:C9:CA:16:5F:F7:84:75
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019F946E2E4764B48B152EC166005250EFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0849
Signing time: Fri 24 Jul 2026 14:01:16 +0000
Manifest this update: Fri 24 Jul 2026 14:01:16 +0000
Manifest next update: Sat 25 Jul 2026 14:01:16 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: FBXU+ZbqNdd5Z+zIYoKA14x8UQGNpBSgP/W4KUv+gGU=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:2e:47:64:b4:8b:15:2e:c1:66:00:52:50:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jul 24 14:01:16 2026 GMT
Not After : Jul 25 14:01:16 2026 GMT
Subject: CN=37f7938f44b26a31640a8dd97dc9ca165ff78475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:ad:da:b1:15:8b:1d:3a:09:6a:4c:95:c0:
28:da:46:a8:2c:a2:47:c0:6f:c1:22:d6:ee:90:f9:
b9:ef:a9:69:64:cf:56:e2:9f:38:d0:c3:ca:94:1b:
45:4d:60:09:41:4c:ca:c8:30:80:c5:c7:83:6e:9f:
c9:e6:88:74:be:be:83:73:04:75:01:37:ed:5d:8a:
83:af:fc:b1:79:ac:2e:93:e0:db:b8:24:02:d3:65:
e2:cb:64:38:cb:66:ae:35:b4:d0:5a:04:6c:57:39:
4a:2b:f3:10:f6:23:15:60:a3:5e:4d:92:39:15:5d:
cf:77:3b:0a:1b:d3:60:2d:26:9e:ae:bc:47:42:e1:
1a:54:e0:f6:a1:1e:bb:bd:95:c5:44:c9:a5:11:86:
f2:6c:5a:1a:ef:97:51:cc:94:98:16:8c:4a:a6:09:
db:dc:ee:16:a5:34:74:90:8d:48:d9:cb:5c:06:ec:
d9:66:50:cf:68:e5:91:26:f3:57:c2:a8:c5:a1:b1:
de:81:c7:20:d6:8e:77:df:1e:71:4d:11:f6:c0:2d:
15:a5:63:4e:4c:ca:9a:80:c9:75:c4:f0:eb:48:1d:
0b:66:38:d5:05:a3:42:7f:4c:a1:c8:50:23:4b:c7:
33:b7:8a:9a:38:4f:3e:e6:19:d1:43:58:d4:03:73:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:93:8F:44:B2:6A:31:64:0A:8D:D9:7D:C9:CA:16:5F:F7:84:75
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:29:0f:19:11:51:f8:55:0d:f1:07:f6:4f:12:90:d8:62:
5a:54:af:9d:36:08:3f:68:bb:81:63:fc:ac:ac:f1:41:06:69:
53:de:ba:f1:b7:aa:43:e6:76:38:8a:4a:36:49:d6:28:96:86:
21:e1:f2:89:48:88:8a:4a:ea:0e:19:d7:93:55:1b:de:52:9e:
f4:f7:5c:15:0f:64:30:a4:54:db:da:57:52:9c:9e:58:b8:d6:
64:11:07:22:75:28:43:5c:54:dc:e8:f5:d5:b4:d6:e1:22:60:
d4:5c:dc:2e:32:d9:85:ad:63:7d:9d:66:61:cb:38:8d:61:8a:
c4:a8:ab:46:02:e4:05:b1:29:6f:77:03:ea:0c:11:3f:a4:6c:
7b:af:36:21:2c:c4:a0:7d:f3:80:f9:a7:62:a1:26:24:3a:ff:
e9:0f:35:b6:93:f6:64:1e:bd:9e:54:0e:28:34:b6:90:f1:a9:
d6:e3:e1:12:5d:6f:f5:44:e4:ad:f4:6a:22:0f:e8:53:b2:bc:
15:dc:a2:2a:49:b1:a3:08:30:81:d1:e5:94:7b:ce:69:50:5e:
d4:a9:8b:46:b5:78:f1:38:e2:d5:56:7a:70:52:4a:d1:e0:b6:
0c:2c:5b:fb:1a:ed:26:c9:90:1c:64:ab:37:b6:b4:aa:8b:79:
1c:e5:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:30 2026 by rpki-client