Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: +Jj3QuvK4vFQQU5BY3swyo9tRc6fOu7EPcIXDoy8jLM=
Subject key identifier: 8A:0F:6A:7C:7A:7B:63:DD:4A:E8:FB:4A:D9:07:EB:46:D1:79:B7:94
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019D28BBAC6106171324F1C89D980C42FD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: c09dEzPYJt6MdTgVl87QBnx3adQLdvJGgH/AVlBnGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ac:61:06:17:13:24:f1:c8:9d:98:0c:42:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=8a0f6a7c7a7b63dd4ae8fb4ad907eb46d179b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:56:de:8c:bc:71:1a:0b:25:f8:f5:35:46:
86:22:31:1a:4f:f9:52:0f:fa:b6:b0:e0:d2:35:67:
53:f2:cd:22:1b:36:f4:78:5f:0e:a0:13:55:ff:ae:
97:b0:0e:f5:68:36:6e:84:ec:40:3d:0c:3c:b6:d7:
37:26:11:c2:29:05:53:13:1d:c6:67:6b:d5:ed:0c:
75:5f:25:da:2a:54:01:18:e6:96:ab:c6:e4:40:4b:
13:01:a7:83:e1:2c:ad:99:65:9a:16:22:55:4d:ff:
58:e2:c9:66:96:ca:33:87:37:3c:8c:37:be:10:c3:
c5:24:d3:91:e9:95:b4:5d:f3:f1:da:b3:a0:c7:1e:
7c:e1:f3:32:e2:22:01:73:4c:ba:8c:c8:10:08:92:
a5:e4:bc:6f:be:99:9d:2e:8a:5a:0b:93:8a:78:48:
f4:71:d8:a6:21:c2:de:32:1e:9d:1c:03:cd:b8:14:
fe:23:29:56:8a:21:29:6a:25:50:c8:73:30:3f:f3:
d1:f4:5b:3e:4c:22:86:82:2a:cc:a6:73:ac:78:fe:
96:12:25:64:12:4d:ca:4f:2a:a8:b4:eb:d6:cd:3e:
3d:18:5d:b3:94:b9:52:ea:19:ee:86:c1:1b:78:a4:
a0:17:88:41:00:59:6b:dd:6f:42:00:e6:a5:a2:68:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:6A:7C:7A:7B:63:DD:4A:E8:FB:4A:D9:07:EB:46:D1:79:B7:94
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b0:40:94:25:cc:27:13:41:52:83:fd:3c:1b:90:65:8e:ea:
64:97:c2:d2:46:e7:ab:ff:63:48:59:91:6d:a0:4d:09:73:20:
9a:ea:c8:9a:29:65:cf:d2:5c:50:d1:2f:bd:ac:77:0f:63:06:
e0:8c:e8:9e:27:45:5f:c6:31:bb:54:c9:22:8d:9c:0a:98:35:
68:38:9e:21:a5:2e:f2:27:0d:91:1c:34:df:7e:c2:1d:61:80:
be:09:fd:e6:f3:ec:15:4c:0b:28:34:26:29:bf:41:d1:d7:a6:
34:ec:1c:07:a6:44:81:00:a5:f0:15:6e:51:91:bf:e1:2f:c1:
af:f6:c8:d9:a4:2a:69:8c:f2:9a:af:a7:67:17:5c:37:c6:0f:
b9:7a:c5:51:d6:32:33:65:73:d5:bc:15:5c:fd:46:f1:32:1f:
78:ab:45:2e:6f:d1:87:5a:c2:f9:7a:45:7a:74:ac:d0:5c:f9:
87:6a:0e:20:23:e3:a4:40:28:7a:c3:25:be:9b:3e:34:0c:40:
d4:36:c0:49:29:d7:4e:22:cb:7f:b5:4a:0e:c2:9e:12:31:32:
fe:bf:ab:e9:bb:68:6e:73:10:de:1b:bb:79:1f:4d:a6:05:8b:
04:01:dd:1d:04:02:4d:ed:70:98:e0:65:41:ff:34:1f:08:a9:
8f:20:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:02 2026 by rpki-client