Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: GECL5wVvh0gm4/Z+KFcIwHS6Y/DZ95EPLyMXclY37eM=
Subject key identifier: 0A:A1:1A:73:89:7E:7B:F6:B9:EE:26:FA:25:82:A8:DE:58:E3:8A:07
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019F927FCB306A32A64233EA2A57B6052E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0848
Signing time: Fri 24 Jul 2026 05:01:16 +0000
Manifest this update: Fri 24 Jul 2026 05:01:16 +0000
Manifest next update: Sat 25 Jul 2026 05:01:16 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: rtWn7F9xeCYxENkuDyqp/TiItKuI3VRZbr2KwPiOpvA=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:cb:30:6a:32:a6:42:33:ea:2a:57:b6:05:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jul 24 05:01:16 2026 GMT
Not After : Jul 25 05:01:16 2026 GMT
Subject: CN=0aa11a73897e7bf6b9ee26fa2582a8de58e38a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f2:d8:6a:84:87:7f:c5:32:9a:46:bb:78:fa:
0a:d1:b1:5a:dc:46:5c:3c:ed:85:70:ce:3a:70:97:
53:b0:c7:d1:9c:35:b4:4f:b4:8b:ec:78:f9:7d:ce:
71:28:b7:d6:ad:4e:4a:47:2a:76:af:2e:93:a3:c6:
b0:63:88:9b:53:af:7f:f2:dd:1c:bb:e5:2c:44:de:
22:00:21:39:09:f3:41:6e:f2:76:e0:2c:c1:b9:ea:
b1:80:20:ac:73:ff:3d:31:bf:83:5d:f9:e1:c4:b7:
74:6d:8b:83:80:c1:a1:56:44:f5:6b:f6:ee:70:3d:
aa:1a:05:85:fd:58:cd:a7:55:25:28:72:8b:13:b0:
d8:23:37:92:ad:10:54:7e:85:73:25:28:fe:cc:f1:
b8:98:74:7c:5c:29:90:fb:38:86:e9:da:2f:0f:b1:
4c:11:3d:9d:17:33:7b:cb:c5:0a:be:9b:48:c7:4c:
e6:0b:92:c2:a5:ee:fa:1b:5c:a1:10:8d:09:0c:28:
d4:f1:46:72:0a:84:fc:c5:f2:a4:2a:49:de:37:3b:
e4:68:d6:d9:97:2f:4e:e6:97:d0:df:40:36:14:ff:
2a:4a:9b:38:81:c7:f1:4f:6f:ff:1b:32:e5:26:d4:
3c:e0:5b:61:09:cb:7f:67:4a:b8:94:c5:41:86:3c:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:1A:73:89:7E:7B:F6:B9:EE:26:FA:25:82:A8:DE:58:E3:8A:07
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:d8:2d:93:7c:c6:96:c4:11:3b:89:b9:8a:a1:b2:b7:d8:
0c:51:9f:de:2d:e4:a5:0e:fc:69:b3:f6:36:ce:ba:1a:3f:07:
db:d4:f0:d6:ea:70:7a:69:f5:03:45:98:64:de:45:41:14:0a:
81:ac:f0:6c:8c:de:6a:3f:9c:4a:65:e7:d8:e2:d6:c6:6b:93:
fe:4b:7a:ab:d1:62:2a:cb:07:8b:cb:c9:1d:a1:8b:21:da:3e:
d4:a4:12:86:2b:88:74:b1:91:d3:66:51:56:81:49:94:70:7c:
6b:1e:5a:f0:91:03:64:fd:f9:10:56:29:8c:e4:20:52:30:2f:
4e:5b:bc:fc:d8:4b:17:13:16:17:3e:89:22:49:9f:02:6a:c5:
39:38:8f:f8:d7:dc:48:2f:22:2b:00:3f:2d:5c:c4:53:2f:07:
f5:7f:9b:9d:88:cb:f5:f3:f5:ef:b2:b1:3f:4e:5b:f0:3a:9f:
fe:fa:74:ae:36:aa:6f:8e:da:8a:8f:93:58:dd:47:b0:04:e1:
96:f1:43:96:c4:31:36:6b:9f:09:77:cd:4f:79:6b:ce:25:e8:
68:78:38:04:4b:ef:e7:da:61:13:d7:42:85:d1:61:b3:9d:3e:
11:67:c2:0a:a0:ad:5e:6d:4c:b1:3a:f4:10:2e:35:ba:dc:3a:
fa:63:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:58 2026 by rpki-client