
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: 1k/IyOLPYycRZjK/CRM5Il1IVF5S7unoKtpj6jYXRIQ=
Subject key identifier: 3C:DF:45:11:26:10:68:39:0F:7E:E1:F5:52:38:17:F2:E3:B4:91:D9
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019E1C10201F03939316E96AA815DDE1ABF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:01:19 +0000
Manifest this update: Tue 12 May 2026 12:01:19 +0000
Manifest next update: Wed 13 May 2026 12:01:19 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: uRafp4RHZ4/ybOLvBVh6htDLgJfHtc4VQCU1RT5NJIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:20:1f:03:93:93:16:e9:6a:a8:15:dd:e1:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: May 12 12:01:19 2026 GMT
Not After : May 13 12:01:19 2026 GMT
Subject: CN=3cdf4511261068390f7ee1f5523817f2e3b491d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:74:01:2f:80:66:a8:27:7b:c1:78:2a:e3:
45:7a:ce:d6:51:af:43:19:d0:44:69:26:86:0f:f4:
f0:4e:ef:7e:6e:ec:88:f0:6a:ce:2b:20:c6:a1:fb:
83:4e:1b:5a:6a:b9:38:ee:4c:1f:50:d9:6f:68:05:
7d:6c:c2:db:96:d9:0d:07:9c:36:b6:d6:5e:6c:61:
db:92:eb:f7:fd:b0:78:52:28:7e:05:53:f8:1d:fb:
72:04:fb:12:ef:a8:9f:58:fb:c1:75:bd:46:cf:aa:
00:b3:e8:53:51:a0:ac:d8:f5:95:bb:2c:d1:23:a8:
88:8a:12:59:67:c2:43:e1:1d:7e:24:51:62:51:e5:
01:ca:43:7a:c1:24:22:c8:ec:04:55:bb:9b:86:6f:
84:7b:01:e0:32:68:3b:90:2e:b3:4d:81:dc:3b:87:
0d:48:3c:9f:bb:bf:54:af:7d:83:87:fd:1e:9e:cb:
c7:29:18:29:bb:19:9b:68:d6:a3:39:76:08:14:c1:
6e:3e:a7:79:68:bc:d8:68:8c:1c:db:59:28:5d:2d:
ad:81:61:92:1d:ab:56:75:5b:7e:6c:3e:1b:6c:a6:
cc:d5:bf:88:ab:f5:14:b1:98:f7:89:22:84:51:64:
d7:46:1f:e9:a2:08:63:ca:92:c6:dd:a7:b2:0c:9c:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:45:11:26:10:68:39:0F:7E:E1:F5:52:38:17:F2:E3:B4:91:D9
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:10:e1:e9:db:1d:f8:22:57:d8:7a:d2:5d:1c:d8:6d:48:91:
35:e9:1a:5a:76:a5:e9:5a:a3:cd:55:1c:6d:84:50:44:c9:ef:
ba:e7:ae:74:26:69:47:4b:f6:64:6a:c4:1c:b6:58:d0:dd:a9:
b9:01:d9:d0:fd:43:bf:1e:4b:d2:ed:5a:72:3e:6b:3a:b7:06:
c6:e0:30:27:48:38:62:71:0d:ab:9e:95:7d:d5:fd:7a:5f:cf:
bc:50:99:d2:0f:09:36:38:d2:11:1e:51:7f:14:a3:49:e7:b3:
a6:ab:4d:61:e4:37:99:3d:25:e2:66:ce:92:99:7c:90:13:c1:
8b:c6:93:14:94:dd:90:36:a7:02:ac:8d:5c:b1:87:e3:cf:00:
fe:6e:8f:20:2f:9f:09:3b:ce:1a:2f:a6:25:ee:17:f1:e6:e8:
0f:8c:1e:19:ee:b8:a0:8f:e3:ad:90:e9:c3:2c:b2:fd:e6:47:
8d:8c:37:5e:75:16:a6:29:23:e4:60:07:bf:cf:43:e4:84:80:
b2:34:82:d3:ac:c8:69:d6:ef:12:35:c2:b9:a3:98:4c:68:97:
57:53:42:db:2c:4f:2a:7a:ae:28:21:8c:48:38:24:70:93:4a:
22:6c:8c:02:fd:6d:7a:79:0e:86:fa:9c:5d:40:f8:82:84:40:
ce:5a:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:18 2026 by rpki-client