Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: RmV23o6bfX+bCd+L9qmO6bGK6/XR3oGWEHjbMSUNV+c=
Subject key identifier: 46:C9:3C:BC:3B:CA:2B:AF:EB:AA:E7:89:29:5C:45:D6:58:BC:E9:B9
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 019D27A8875E39C4557FA07C5FD57B2F11E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: EdPdMzgnPs41cXxU2dcI-fVK9_o.roa (hash: VU+rMMG4Ct00NxP8HYLLqEFuKnv7Lx/dqWlvPJ9BsVI=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: q3HexfltsfyuQGbPi7Jbczv2VcQTRelDrMXnt0mwE3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:87:5e:39:c4:55:7f:a0:7c:5f:d5:7b:2f:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=46c93cbc3bca2bafebaae789295c45d658bce9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:45:98:63:fe:3d:61:74:3c:40:39:71:b3:
72:03:9f:e2:29:40:6f:2b:93:7b:24:d5:80:de:eb:
15:ba:15:42:00:c0:91:c0:58:87:5e:08:d4:e3:d6:
12:3b:45:64:60:4f:c5:6c:57:51:0f:04:ad:51:ef:
cd:f6:b3:33:20:42:e6:64:16:05:99:f0:88:ff:37:
ab:c2:02:f0:10:c4:ef:93:9a:cb:76:e7:ab:ed:b6:
b2:2d:49:7f:63:91:a9:88:0a:b4:3b:2a:d8:91:a9:
53:2e:13:7b:97:ad:6c:a2:2d:44:67:8f:23:6a:37:
65:bb:a2:c3:ca:ec:d9:6b:f3:1f:17:f7:57:b8:b2:
56:0d:03:1a:f7:1d:e1:58:83:03:8c:39:21:95:4e:
15:f9:54:43:43:c4:10:9c:ee:c7:bf:61:0d:35:f2:
d8:00:15:57:3b:d1:6e:67:10:72:9e:d2:ea:fd:4c:
bb:df:d6:85:fa:5c:6a:66:1b:85:a8:b3:40:45:57:
51:30:f8:9b:02:17:ad:e8:ba:46:12:f9:dc:04:00:
67:e2:1d:7b:05:6a:0f:db:22:b9:72:51:30:53:00:
1c:2a:32:30:45:f1:f0:17:e5:e9:3d:75:88:de:07:
36:8b:c6:b8:93:3b:75:cc:5a:7c:9b:8a:0a:e4:09:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:3C:BC:3B:CA:2B:AF:EB:AA:E7:89:29:5C:45:D6:58:BC:E9:B9
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0b:60:8c:e6:41:2c:43:03:20:04:68:a9:09:de:38:2a:5c:
56:b2:62:9d:35:f6:12:20:52:3e:a1:0d:f2:42:e8:83:c4:d4:
33:82:2f:de:ea:fb:2d:6d:cd:64:d5:20:c8:70:8a:be:35:fd:
82:7f:38:c1:ca:e8:4d:9c:11:09:99:cb:a4:58:cc:bb:3e:34:
a8:15:f0:ae:7c:36:22:91:a4:66:28:06:f3:06:dd:e0:d1:e0:
2b:9b:1d:1a:46:05:0c:c2:fd:9f:d8:ab:21:11:c1:96:99:45:
ff:90:70:e8:e4:a4:41:5d:23:1c:e1:6a:2d:3f:18:12:47:0c:
45:dd:31:0e:ef:a8:5e:a6:e8:70:7f:b7:d4:ef:da:94:02:75:
ca:68:5a:f5:17:22:4e:30:9e:7b:7d:e2:7a:a9:e7:57:f3:b1:
88:13:1e:3f:30:6d:4e:c1:55:1c:19:2d:95:36:9f:33:ed:66:
3b:b1:97:f0:db:59:27:fd:ba:f2:2d:4f:3d:1c:bc:c2:b4:eb:
ad:c0:06:21:d7:50:aa:6e:8e:cd:32:c1:1d:a5:13:47:cd:e3:
9b:d9:28:ed:70:cb:14:11:4d:e2:b1:64:b0:01:df:e5:ff:91:
f3:ce:ce:3b:b1:bf:3a:29:e2:b1:1b:09:5b:f7:87:19:1a:7c:
d1:db:a2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqIdeOcRVf6B8X9V7LxHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk
NWYxZjEwHhcNMjYwMzI2MDEwMDQ5WhcNMjYwMzI3MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg0NmM5M2NiYzNiY2EyYmFmZWJhYWU3ODkyOTVjNDVkNjU4YmNlOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpNFmGP+PWF0PEA5cbNyA5/iKUBv
K5N7JNWA3usVuhVCAMCRwFiHXgjU49YSO0VkYE/FbFdRDwStUe/N9rMzIELmZBYF
mfCI/zerwgLwEMTvk5rLduer7bayLUl/Y5GpiAq0OyrYkalTLhN7l61soi1EZ48j
ajdlu6LDyuzZa/MfF/dXuLJWDQMa9x3hWIMDjDkhlU4V+VRDQ8QQnO7Hv2ENNfLY
ABVXO9FuZxByntLq/Uy739aF+lxqZhuFqLNARVdRMPibAhet6LpGEvncBABn4h17
BWoP2yK5clEwUwAcKjIwRfHwF+XpPXWI3gc2i8a4kzt1zFp8m4oK5AmAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbJPLw7yiuv66rniSlcRdZYvOm5MB8GA1UdIwQY
MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It
MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz
LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQtgjOZB
LEMDIARoqQneOCpcVrJinTX2EiBSPqEN8kLog8TUM4Iv3ur7LW3NZNUgyHCKvjX9
gn84wcroTZwRCZnLpFjMuz40qBXwrnw2IpGkZigG8wbd4NHgK5sdGkYFDML9n9ir
IRHBlplF/5Bw6OSkQV0jHOFqLT8YEkcMRd0xDu+oXqbocH+31O/alAJ1ymha9Rci
TjCee33ieqnnV/OxiBMePzBtTsFVHBktlTafM+1mO7GX8NtZJ/268i1PPRy8wrTr
rcAGIddQqm6OzTLBHaUTR83jm9ko7XDLFBFN4rFksAHf5f+R887OO7G/OinisRsJ
W/eHGRp80duiyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:44 2026 by rpki-client