Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: OmPA1+FmHUPLKTg23GR70g8Skhoe2zRYEefljGx/rew=
Subject key identifier: 57:5C:7F:A3:BD:D2:61:26:62:9D:A3:F7:27:14:BF:30:FD:DE:0B:7C
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 01A0D538B18606C158A12D86D2750D60E7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 21:00:57 +0000
Manifest this update: Thu 24 Sep 2026 21:00:57 +0000
Manifest next update: Fri 25 Sep 2026 21:00:57 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: BuNnEBa9Rcv9ye8EepMRrRX6Iyq7n4B/AYvuP+/F5hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:b1:86:06:c1:58:a1:2d:86:d2:75:0d:60:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Sep 24 21:00:57 2026 GMT
Not After : Sep 25 21:00:57 2026 GMT
Subject: CN=575c7fa3bdd26126629da3f72714bf30fdde0b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:d2:de:79:01:fc:cf:04:5e:be:57:65:b3:
29:07:7a:02:15:4a:00:b8:67:4b:ec:cf:14:b3:86:
c4:28:55:71:a7:4f:50:64:a1:11:d9:3f:64:91:15:
14:7f:b3:b4:c6:2b:34:d5:13:c7:60:32:05:5e:3b:
54:59:d4:eb:24:4b:60:f0:a1:87:e5:97:b3:4e:94:
a9:63:b9:09:ef:24:8a:ba:5d:27:f2:63:f4:21:23:
d5:c9:23:d3:6d:a4:68:07:db:a4:80:82:a6:82:df:
d2:4a:10:c4:f8:4f:60:fc:4e:e0:b7:6b:24:f9:31:
a5:f7:fd:2a:a5:94:05:70:75:8f:41:c4:1d:07:5d:
d3:08:b0:01:d1:75:e5:a0:a1:42:e4:6d:8b:8e:bb:
42:46:8b:d3:13:e8:4f:ea:61:33:8d:08:94:9a:57:
45:c0:50:20:25:3e:bc:91:cc:f6:c7:2c:08:ea:93:
3b:7d:2c:af:48:dc:8b:29:e2:8e:06:eb:cb:0a:6e:
ae:dd:b6:50:17:fc:2f:77:19:d1:bf:19:ac:bd:6b:
7d:0a:5c:0b:d6:c4:82:1c:b5:c4:e7:4d:55:22:3a:
34:95:d7:28:1d:89:34:c6:95:2d:f8:9a:94:ac:9e:
44:40:cf:93:ff:be:b2:bc:33:ba:0a:e1:38:c4:f7:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:7F:A3:BD:D2:61:26:62:9D:A3:F7:27:14:BF:30:FD:DE:0B:7C
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:23:d9:65:e6:ff:6d:70:26:3e:f5:c5:63:50:12:3c:d3:e7:
0a:e1:fc:4c:f9:8e:a5:ae:0a:be:e3:79:c6:47:eb:d4:77:83:
75:bb:cb:cf:cd:ba:5a:45:f1:33:fb:8e:7a:93:13:f7:9a:c8:
6a:35:db:cc:5b:5a:62:2a:e5:3b:43:28:b6:8f:37:79:c2:80:
a2:91:c0:a1:ce:72:13:4b:4c:c1:b4:14:ed:39:7c:31:17:68:
3f:35:de:36:16:79:e7:fd:84:a9:2f:42:3a:12:e8:34:4d:10:
7b:51:af:76:fa:60:67:7d:d2:9e:32:90:8c:e8:24:cd:d2:97:
7a:f1:3e:19:3b:b5:c6:d4:5f:f5:df:ac:b2:71:71:dd:be:04:
7b:c9:19:d5:10:ef:7a:6d:54:37:74:f6:3e:77:8b:72:e0:5b:
38:4f:0a:7f:b2:3a:39:72:73:24:36:0c:e3:62:d6:43:54:ad:
01:40:69:e8:f7:49:2d:f9:70:8f:b6:97:9f:6e:21:c6:f0:0e:
74:3c:bf:45:b9:bd:d4:8a:0f:f9:80:1f:3b:3e:ae:b2:a0:18:
59:86:e9:09:db:eb:c6:35:3b:db:0c:8e:93:4b:6e:6d:ab:c5:
9d:9b:75:dc:ed:d0:80:49:7f:11:fc:98:31:14:a7:e2:3b:56:
b6:ea:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:31:46 2026 by rpki-client