Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: 7ER1Yy88EhqkxLA5Md31KziNOJA1aICv79DSGvmkW1o=
Subject key identifier: D8:04:CB:8C:48:1C:30:15:7B:A4:9E:0A:53:EF:5B:FF:71:F0:41:4E
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01A0DCBBD17D416EEE0E05ECDDB8B2D978B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 08F3
Signing time: Sat 26 Sep 2026 08:01:31 +0000
Manifest this update: Sat 26 Sep 2026 08:01:31 +0000
Manifest next update: Sun 27 Sep 2026 08:01:31 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: 7i1EilZDyiIFSowxDfeIokXTaJ09qs3dpsiSey0FsSo=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:d1:7d:41:6e:ee:0e:05:ec:dd:b8:b2:d9:78:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Sep 26 08:01:31 2026 GMT
Not After : Sep 27 08:01:31 2026 GMT
Subject: CN=d804cb8c481c30157ba49e0a53ef5bff71f0414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:37:e1:f9:9e:77:c6:70:6a:42:d6:8f:6b:
a8:b3:a2:e8:15:3e:d5:0c:b5:47:8e:28:43:eb:43:
0f:2b:59:3b:a2:72:35:95:53:ff:4b:0b:a3:78:36:
28:39:48:a5:63:bd:1b:68:48:13:63:da:9c:03:f2:
03:1a:be:97:d1:a0:f8:66:00:a5:1e:11:8b:fb:f5:
e5:a0:b2:c4:13:bd:89:19:cd:87:e7:15:26:aa:8e:
f0:b7:36:a1:c7:07:aa:7d:9e:48:f0:ee:fa:9f:c1:
7a:dc:e9:a8:e8:46:ef:9d:29:ea:6d:ae:eb:9b:ee:
a2:68:e0:87:9c:b5:8e:a1:8b:89:70:30:08:0d:b4:
6c:ce:b3:58:19:12:14:cf:bd:57:fe:7c:54:2a:b0:
ce:97:43:36:73:95:9a:ab:9f:a3:b2:26:1d:d6:da:
a3:dc:b0:67:1c:dc:60:e7:f2:7d:42:44:4b:2d:cf:
b5:c8:78:0f:76:8c:11:3e:ff:ca:56:16:2e:a2:47:
22:6c:b4:38:6f:42:88:80:9e:fb:22:ad:e7:81:f2:
ab:26:24:45:b0:31:2f:92:7c:56:b7:3e:77:40:2c:
56:a9:ea:b0:45:0a:50:0d:ad:14:8e:93:5a:f1:9f:
e6:d7:31:0e:f6:bd:52:58:9d:2f:dc:bc:16:9f:9b:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:CB:8C:48:1C:30:15:7B:A4:9E:0A:53:EF:5B:FF:71:F0:41:4E
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:27:21:9c:ac:10:ba:ff:dc:a6:10:b7:30:25:8f:e8:87:
37:64:cf:ce:37:8b:da:36:bd:b5:a4:6c:d9:67:a7:00:27:95:
73:cd:df:7d:b9:c7:d1:d9:7f:e5:84:6c:05:59:03:e8:c5:72:
62:f4:2b:ea:7e:b8:eb:f1:c1:6d:56:6c:31:7b:6e:33:16:d9:
fa:47:5b:59:61:b2:de:f5:fe:28:4a:17:26:66:1f:15:fc:0b:
d6:8a:14:e3:5f:fa:39:70:7e:cc:83:c2:f4:6e:27:81:b1:e8:
30:56:2f:55:cc:a3:f3:a1:99:fa:ca:96:b4:b2:50:d4:f9:7a:
d3:96:c1:e0:ab:69:c5:75:21:bd:e4:35:78:05:8f:61:6f:0b:
92:a7:a1:0d:cb:35:76:32:69:94:ee:46:9e:77:25:f1:93:58:
42:0a:fe:83:bb:56:63:d9:5c:f8:72:24:10:d0:d9:62:48:39:
85:d9:bf:f3:ab:91:22:e6:3c:7b:9b:49:03:20:4f:8b:e9:10:
b7:c1:88:70:d2:b0:c8:d8:b4:a2:f2:e3:f1:24:85:aa:90:03:
0c:77:c4:1b:13:56:ed:9c:17:70:f8:46:f2:78:18:5c:7f:10:
25:1a:7c:82:00:4b:ed:23:43:54:26:b5:f6:89:d3:34:a3:71:
9a:8f:7a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu9F9QW7uDgXs3biy2Xi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi
ODU0ODEwHhcNMjYwOTI2MDgwMTMxWhcNMjYwOTI3MDgwMTMxWjAzMTEwLwYDVQQD
EyhkODA0Y2I4YzQ4MWMzMDE1N2JhNDllMGE1M2VmNWJmZjcxZjA0MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEE34fmed8ZwakLWj2uos6LoFT7V
DLVHjihD60MPK1k7onI1lVP/SwujeDYoOUilY70baEgTY9qcA/IDGr6X0aD4ZgCl
HhGL+/XloLLEE72JGc2H5xUmqo7wtzahxweqfZ5I8O76n8F63Omo6EbvnSnqba7r
m+6iaOCHnLWOoYuJcDAIDbRszrNYGRIUz71X/nxUKrDOl0M2c5Waq5+jsiYd1tqj
3LBnHNxg5/J9QkRLLc+1yHgPdowRPv/KVhYuokcibLQ4b0KIgJ77Iq3ngfKrJiRF
sDEvknxWtz53QCxWqeqwRQpQDa0UjpNa8Z/m1zEO9r1SWJ0v3LwWn5u8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgEy4xIHDAVe6SeClPvW/9x8EFOMB8GA1UdIwQY
MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt
NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2
LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ0nIZys
ELr/3KYQtzAlj+iHN2TPzjeL2ja9taRs2WenACeVc83ffbnH0dl/5YRsBVkD6MVy
YvQr6n646/HBbVZsMXtuMxbZ+kdbWWGy3vX+KEoXJmYfFfwL1ooU41/6OXB+zIPC
9G4ngbHoMFYvVcyj86GZ+sqWtLJQ1Pl605bB4KtpxXUhveQ1eAWPYW8LkqehDcs1
djJplO5Gnncl8ZNYQgr+g7tWY9lc+HIkENDZYkg5hdm/86uRIuY8e5tJAyBPi+kQ
t8GIcNKwyNi0ovLj8SSFqpADDHfEGxNW7ZwXcPhG8ngYXH8QJRp8ggBL7SNDVCa1
9onTNKNxmo963w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:15:57 2026 by rpki-client