Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: h8XjAS3a4V/rUPRan78sR9ecpjUerY6fORcAFO+2PxQ=
Subject key identifier: BC:6A:AC:DF:98:5E:DD:9F:D0:F6:D4:D2:5A:7F:0E:32:50:A2:C4:C8
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019D25F1B8A5B76F48DE12E6B4F0B30A33E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 02E1
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: wu8Z+eOJ38G6tFmfg6eYx6hVU0Yjkct+WraniWq3lZI=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b8:a5:b7:6f:48:de:12:e6:b4:f0:b3:0a:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=bc6aacdf985edd9fd0f6d4d25a7f0e3250a2c4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:f6:3b:96:35:45:bf:c3:95:55:f5:2f:b6:
0d:3a:7e:5b:c5:36:ba:da:c9:15:d5:07:dd:70:81:
4e:f0:65:d1:91:14:e7:e5:a1:8b:60:c3:04:06:67:
b6:2f:97:bd:8d:ec:67:c8:19:0c:ed:09:ad:20:32:
d5:05:53:e1:fe:05:4d:1c:13:d8:68:f3:7e:7f:ca:
45:8a:c9:3b:38:0a:67:8a:75:59:d0:ad:87:85:a1:
81:81:b6:41:55:af:54:e1:30:37:58:52:9a:9a:e2:
ca:fc:d7:88:42:30:f9:cb:41:c1:b9:ae:ef:e5:7e:
6b:2a:52:47:fa:be:3e:5b:7a:c5:27:fd:50:0d:18:
99:db:ef:9c:04:b4:a9:1c:a2:36:5f:e8:0b:1e:d5:
08:1d:5a:e8:d4:a1:a1:c0:04:e9:35:72:67:e5:ed:
4e:e9:48:9c:67:55:04:51:d9:11:5d:b2:1f:f5:df:
46:9b:ef:de:1e:49:ec:fd:5f:da:0f:de:af:44:d7:
92:e2:f7:33:32:6c:93:eb:61:ff:d6:86:67:c0:7c:
64:8a:a2:8b:13:6b:27:17:40:04:7d:51:03:ef:42:
f1:fd:eb:cb:12:83:90:96:3f:38:6c:6c:ca:76:f6:
47:c5:3c:37:64:14:37:20:9f:25:ae:a9:d9:f0:e5:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6A:AC:DF:98:5E:DD:9F:D0:F6:D4:D2:5A:7F:0E:32:50:A2:C4:C8
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ae:68:3c:7e:15:70:56:b6:e6:89:72:32:9e:f8:f2:9f:45:
19:a5:88:d5:c4:df:03:c0:26:54:e4:de:17:b4:7a:07:f9:4b:
10:09:4a:85:b1:ed:7f:cb:f4:99:c0:30:42:6c:d7:60:3f:7e:
b5:f8:ec:75:82:f6:b9:c2:b6:ff:ab:74:ac:67:23:9c:83:10:
ff:51:41:33:47:75:3c:b1:76:93:4a:75:b6:0a:4f:8d:5f:2c:
35:8e:1e:f9:24:52:ba:ee:30:f1:65:59:f2:6c:c0:0b:48:7e:
41:e2:d8:66:2a:f7:6d:60:40:f9:e1:d2:30:75:c6:2e:65:29:
b5:d3:7c:04:dc:08:0f:80:c9:17:18:f0:ab:23:56:75:d9:e8:
45:30:32:27:cf:7d:0c:d1:4b:79:35:de:f1:de:df:35:26:7e:
70:20:08:3a:53:89:3d:4f:91:44:ff:37:72:57:57:6d:04:d7:
c4:0e:47:b2:c9:bb:d4:12:ac:55:3f:43:69:da:5e:36:95:58:
ff:f3:14:8d:82:68:32:c1:9c:61:cb:d4:98:c8:f6:4d:04:9c:
a6:ae:b3:95:97:9a:3e:41:6e:73:7a:c1:03:91:db:9b:8e:c7:
fe:b4:0c:6c:37:ce:6b:55:a5:3e:23:d9:d7:7a:96:28:76:8f:
e9:ef:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:14 2026 by rpki-client