Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: pGRwsIEC0g9FBF0K7gK1LSU/pfMdrNRBgTagHTh5mqU=
Subject key identifier: 6E:01:93:74:80:8F:47:27:1E:BD:AC:15:87:CE:DD:FB:4F:36:62:EE
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019E1DC75D68288C8B74B1F27031B2CA6C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0787
Signing time: Tue 12 May 2026 20:01:05 +0000
Manifest this update: Tue 12 May 2026 20:01:05 +0000
Manifest next update: Wed 13 May 2026 20:01:05 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: GLo7TjDCThye9E9bOFw5NULRBeQTHEXS6puPEPNjvLk=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:5d:68:28:8c:8b:74:b1:f2:70:31:b2:ca:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: May 12 20:01:05 2026 GMT
Not After : May 13 20:01:05 2026 GMT
Subject: CN=6e019374808f47271ebdac1587ceddfb4f3662ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:e1:05:9f:89:48:b0:a2:5d:12:e1:d8:73:
a7:b5:c4:67:f9:bd:dc:cc:e7:1a:8a:60:d1:82:72:
fc:2a:6f:da:84:38:c1:68:90:61:88:da:d2:b5:ed:
5e:81:d3:63:92:67:93:7b:c3:44:94:8f:26:55:c3:
01:51:58:2f:90:9e:55:7f:04:5b:35:1f:26:59:97:
0c:8e:ec:ce:5a:0a:c4:f1:da:e5:f0:ba:9f:cf:27:
cd:1c:2b:40:8a:a5:66:74:48:32:d2:d5:4e:97:34:
b6:21:bb:ea:50:9f:26:16:f3:91:41:68:48:74:2b:
ad:41:51:e1:37:a3:9e:30:37:aa:91:68:da:b4:b5:
c6:3c:bc:b3:b2:f4:06:fb:8b:34:6e:9c:2f:97:c9:
d0:1a:a6:e3:ee:c0:8b:31:ab:c9:0c:ae:eb:e0:86:
ba:d7:c9:fd:6a:9a:4f:c4:08:18:d5:76:24:31:bc:
f0:ce:5e:5a:18:ab:cd:c5:a4:a8:f1:70:2e:47:9c:
39:93:45:89:0e:0a:54:12:22:25:af:22:2d:da:c3:
5c:f8:fb:2f:b6:91:a7:c6:64:18:e5:a1:7d:db:6e:
23:cb:e3:c5:77:c8:e8:df:b9:8d:94:51:0c:44:7a:
aa:1e:5f:11:7c:e2:8c:e6:96:51:dc:a8:10:08:fa:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:93:74:80:8F:47:27:1E:BD:AC:15:87:CE:DD:FB:4F:36:62:EE
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:09:9e:12:d0:1f:95:86:50:b3:dd:f3:81:0d:9f:41:b9:93:
c8:ac:92:b6:b8:7f:be:00:0f:fe:fc:dc:94:51:5c:62:4e:15:
67:9e:47:12:f4:ed:d0:89:02:fd:f4:e0:bb:a9:cf:b9:c2:cd:
65:80:fb:00:32:64:02:d3:26:d0:76:f7:2b:23:5b:63:9e:78:
10:64:87:b1:ae:a5:7b:20:13:c4:da:6e:b3:b4:d8:73:12:bf:
0d:5f:28:96:e3:f9:dd:d4:aa:55:8c:f4:47:78:82:46:e4:ff:
1e:63:bf:f4:f5:04:be:92:82:68:70:23:85:ca:ae:d1:c9:02:
10:d1:57:fe:d4:96:4d:38:ce:5f:15:68:26:f0:4f:61:5b:5e:
61:54:51:a4:8e:cb:41:0d:78:f9:0d:b7:d2:ee:41:1f:c7:81:
cc:c4:f4:f4:7b:ac:a3:6e:63:d2:e8:cf:62:57:f8:7c:35:a3:
c9:a7:8a:cb:99:2c:c5:fc:cf:e3:25:c5:88:9e:56:85:18:ab:
70:e9:d7:7d:46:64:62:db:2e:47:4d:20:09:fd:37:12:a7:9f:
a3:f4:f9:87:0b:fd:1c:69:0a:f3:68:e4:18:54:fd:9e:ec:cd:
02:62:69:0b:71:15:00:d4:54:0e:af:40:16:3f:6d:3e:7f:05:
bd:a4:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:28 2026 by rpki-client