Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: wBshFgx184LfjlEvfpgMTx1TCimuX8MlkJ1JNLH1fRM=
Subject key identifier: 84:8B:FB:5A:BB:F1:31:43:14:29:96:FC:40:8A:CB:5C:25:8B:2E:46
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019F8FEC0A36605EBB113901E9C7894FDB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 0421
Signing time: Thu 23 Jul 2026 17:00:38 +0000
Manifest this update: Thu 23 Jul 2026 17:00:38 +0000
Manifest next update: Fri 24 Jul 2026 17:00:38 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: bned9t8L0qAgnZgDBMm3hEAveXg3w/rpZATLjVpUlMs=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:0a:36:60:5e:bb:11:39:01:e9:c7:89:4f:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Jul 23 17:00:38 2026 GMT
Not After : Jul 24 17:00:38 2026 GMT
Subject: CN=848bfb5abbf13143142996fc408acb5c258b2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:fe:f6:37:17:7b:49:e9:b0:3f:65:ee:b1:
7a:70:38:97:15:95:4b:46:c5:4c:b3:94:72:74:6b:
cc:d2:47:8b:22:6a:40:c7:ed:52:94:da:24:59:9b:
35:a4:76:b1:e8:07:71:4a:5f:2e:da:b1:7d:c4:3b:
a0:c6:61:7f:54:31:a3:72:3c:1f:8f:3e:99:89:6f:
bb:47:91:fe:23:8a:f5:03:f6:9d:97:c6:1c:2c:0c:
ca:c6:40:6c:5e:2f:e1:0c:e7:51:2d:e0:db:4a:94:
d3:6e:f1:30:a6:36:bd:92:1f:24:00:3d:ae:bf:7d:
4b:75:f2:ff:44:36:6d:38:db:c8:64:1f:48:e7:4f:
da:f9:b2:a4:3c:48:04:58:5f:69:59:f0:49:9f:b1:
39:9b:94:5f:43:fe:72:27:32:06:b3:8d:01:f7:58:
28:c7:45:1d:ab:23:eb:4b:71:5e:89:61:2c:e9:43:
3e:0b:e2:f9:22:8b:6e:63:2f:a7:95:9c:e9:ac:42:
be:5d:48:49:81:7d:12:0d:f1:67:16:5b:fa:db:6f:
2b:8f:c4:8f:51:e5:73:1e:f0:2d:f9:98:8e:37:a9:
9f:d1:01:42:f1:f5:af:6c:57:97:8e:b6:90:c5:04:
6b:6c:cf:b0:5e:7a:09:af:aa:a0:5a:7c:72:06:d3:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:FB:5A:BB:F1:31:43:14:29:96:FC:40:8A:CB:5C:25:8B:2E:46
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:eb:62:af:ce:5d:fb:f0:bc:69:f1:04:43:1f:49:d3:16:
0f:ce:ef:70:ab:dc:08:bc:a8:ed:85:b2:da:4d:7a:36:3d:d8:
ad:d7:cf:87:b3:95:91:07:06:dd:9d:0e:c0:17:4c:72:b9:67:
cf:6f:74:32:70:62:5e:76:4b:a7:53:46:9a:3d:38:92:75:91:
ff:5f:ec:33:21:84:29:8b:b1:d6:1e:a7:37:54:7e:57:d8:83:
5c:c3:d0:30:9b:fa:a6:55:ef:2d:09:42:39:12:a7:f0:45:2d:
a5:f4:6d:71:d4:34:6e:82:14:5e:2c:61:f8:9a:76:28:a1:7d:
21:19:ea:86:7d:37:68:dd:57:02:be:b5:5a:ee:6e:91:48:fb:
8a:c5:ea:d9:69:4d:98:f0:0f:9b:e1:e9:8e:e8:42:5c:c3:71:
43:77:db:a0:a3:25:8d:85:56:37:e6:99:12:66:3b:00:35:8d:
fd:2c:82:f2:75:33:2e:ec:af:92:06:7a:0f:90:5c:e1:0f:dc:
99:6d:5a:6c:36:bb:88:15:d4:87:32:dd:21:8d:e8:2b:68:25:
2d:91:88:ec:13:17:31:32:a9:85:61:6b:2b:13:96:3d:bd:b6:
ee:49:65:15:79:bd:91:ca:65:4f:e4:ec:c7:37:c8:da:5c:73:
bd:8d:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:35 2026 by rpki-client