Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: YinmoRO9GOBMYWoNHf3sZBU6a0tSGcOddgI2lOd1Ug4=
Subject key identifier: 90:BA:FF:67:9F:66:A0:4E:4F:CA:DA:7F:31:46:BD:59:18:E8:7B:2B
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019F90C78FB8184E7BD5BE8E1DB24FC1255C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:25 +0000
Manifest this update: Thu 23 Jul 2026 21:00:25 +0000
Manifest next update: Fri 24 Jul 2026 21:00:25 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: cLQzIuo5tcT1RTXE0FeyQPkYpPeup6ajUtukSCI8PxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:8f:b8:18:4e:7b:d5:be:8e:1d:b2:4f:c1:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Jul 23 21:00:25 2026 GMT
Not After : Jul 24 21:00:25 2026 GMT
Subject: CN=90baff679f66a04e4fcada7f3146bd5918e87b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:43:04:fb:19:09:7d:b5:b8:64:52:c9:bf:
0a:5c:c0:91:ef:ed:a6:45:c1:04:50:c3:93:53:5c:
9a:b8:d4:84:dd:cf:72:78:b5:4d:42:7f:d7:3e:4a:
c5:72:87:97:10:48:da:55:ff:1f:17:10:75:45:08:
ff:0c:4e:84:71:cc:a3:f6:67:ca:1f:40:61:27:33:
2f:5d:76:25:64:59:d6:f8:de:7a:3a:25:bb:91:ef:
86:d7:23:c8:10:0f:0e:79:e0:6e:3f:80:33:37:da:
98:54:db:91:b6:a0:27:ea:1e:f6:4c:2c:56:95:b1:
6b:06:3a:64:23:e2:08:12:0e:d9:6c:75:a2:55:f7:
95:48:38:5e:ec:ba:d8:ef:82:76:54:6d:70:3e:26:
96:a0:60:55:19:8c:66:56:df:e4:f6:14:5c:fd:43:
58:cd:36:ce:62:e7:8b:b9:4a:fd:ce:ba:9d:2e:ec:
03:12:43:b3:30:94:c0:57:d8:c0:38:82:4c:d0:3b:
9b:d1:01:0a:e1:6e:93:4e:e2:64:b7:03:0e:5b:40:
f4:ca:6f:d2:84:cc:08:d6:1c:04:c9:39:a1:35:6f:
17:f3:01:48:a6:85:43:9d:72:b3:45:cc:d3:e6:1f:
95:87:fc:75:d1:43:eb:65:e0:f0:cd:61:69:04:a7:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:FF:67:9F:66:A0:4E:4F:CA:DA:7F:31:46:BD:59:18:E8:7B:2B
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:43:1c:d6:15:32:c4:8c:5f:02:7e:ea:04:de:48:02:70:
12:3b:1c:64:46:b4:64:a8:37:53:4f:ee:3b:a9:28:1c:85:57:
13:03:68:89:0d:1b:eb:c8:c9:17:1b:1a:a5:eb:05:50:93:c9:
78:ba:61:29:23:c8:84:c8:8d:a9:ea:98:13:cc:53:f5:c9:9d:
1d:8c:e7:08:95:07:0e:7d:a7:75:e7:f1:cc:05:fa:d3:93:a8:
38:cb:eb:ef:c2:7b:91:13:42:7d:dc:3c:f0:28:42:25:d6:15:
90:0e:d5:04:d7:f7:b7:6d:d0:04:79:7a:13:37:7c:df:ba:eb:
b9:72:da:f1:8b:52:c1:9a:ac:b9:b4:76:41:22:fb:96:59:0b:
28:5e:4a:1c:f6:1c:2b:fe:95:90:c9:95:e7:fe:53:da:28:be:
89:69:da:bc:e4:21:8a:32:ad:22:ea:c3:12:5e:4b:86:ca:2e:
03:a3:40:1d:9b:72:e0:a2:a6:9b:fa:ad:a6:6f:19:6a:a0:e7:
97:9a:f7:ea:4d:b1:ac:fc:f5:91:f1:cb:a0:4a:f0:8b:c6:e9:
6f:f0:f2:64:05:79:83:6e:47:6f:c1:24:ab:5c:35:bf:31:c2:
bc:f4:0f:77:ab:0d:7c:f5:46:55:bf:a3:46:ab:aa:a2:62:a4:
89:e9:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:38 2026 by rpki-client