Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: CSKPIfj0CWWI5rroTf6feeDge27GdxZ2QszzJdek2uY=
Subject key identifier: F2:AF:F7:3F:1C:ED:48:FC:19:B2:B6:E0:C9:92:77:F2:E4:47:07:83
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019E1F6C124E871D92D58751758932526957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 06
Signing time: Wed 13 May 2026 03:40:36 +0000
Manifest this update: Wed 13 May 2026 03:40:36 +0000
Manifest next update: Thu 14 May 2026 03:40:36 +0000
Files and hashes: 1: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: 1km0XO4QrS/042cNBP4RypM5LWunuW6PXt07PYZvwU8=)
2: GNtJnUYKkvUG0vQvp0s38o620-k.asa (hash: xY+2n0Vs5E7zC3FkgRzrAntWns61U0pP0bTVQzH5z6c=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:6c:12:4e:87:1d:92:d5:87:51:75:89:32:52:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: May 13 03:40:36 2026 GMT
Not After : May 14 03:40:36 2026 GMT
Subject: CN=f2aff73f1ced48fc19b2b6e0c99277f2e4470783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:0c:1d:5b:13:ad:64:f6:20:79:80:b6:ab:
79:71:4d:a2:60:cf:b3:73:1e:a9:96:30:37:a9:12:
8b:b1:2c:2f:9e:8f:f9:5e:7c:27:d3:b9:df:2b:ab:
12:85:3d:38:27:d5:55:4e:25:88:2c:af:2f:11:6f:
5f:ea:56:43:4f:f8:6e:15:8c:5d:f9:54:23:c6:57:
e4:c8:33:ff:09:9a:c0:a9:11:be:52:57:e1:ad:6c:
41:f6:73:7d:f1:61:52:db:48:2e:32:5b:69:c9:ce:
b0:6b:2b:d3:18:87:7e:79:36:4c:69:7c:9e:3e:f3:
ff:03:c4:53:c4:dd:ef:74:7f:e9:a7:09:97:95:9d:
41:63:f0:ee:cc:15:22:14:ff:b3:03:1b:0d:d5:63:
89:38:c7:5b:7b:ec:84:bd:d3:d4:34:99:59:fa:be:
63:61:3c:0f:a1:2e:0a:9f:e1:03:9e:1f:60:42:19:
fd:80:1c:c8:bf:2d:8a:fa:32:bd:ae:70:65:32:34:
38:17:d1:54:53:37:3d:92:19:d5:5c:fc:a5:f4:61:
e0:1c:12:e2:44:69:2c:78:e8:ff:a6:0e:9d:df:c5:
35:a8:fb:82:b6:07:ab:4f:8d:52:f7:c5:ec:d5:1d:
77:8e:3b:e3:06:8e:8c:4e:9a:1e:3e:91:7e:4b:05:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:F7:3F:1C:ED:48:FC:19:B2:B6:E0:C9:92:77:F2:E4:47:07:83
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b1:45:b6:48:64:ea:ff:c5:cc:3f:58:e9:c7:f1:21:76:b3:
87:3a:ec:4a:b0:c5:a6:04:85:f2:77:8d:27:5f:aa:9f:83:51:
44:1a:54:7e:e2:ce:92:89:52:bb:b6:6f:8f:97:31:c0:8b:14:
55:b3:86:95:76:75:e6:f0:fa:73:21:dc:de:e6:9b:26:3e:17:
83:3f:4b:ac:21:94:22:d1:05:49:0b:b0:f4:7f:d0:3f:ac:a5:
b1:75:00:ad:52:e5:90:cd:00:2f:6b:55:48:7b:f2:7b:4f:c8:
36:31:e0:5a:a0:fc:a9:ad:d6:0b:28:0d:b9:7c:5f:a8:f8:05:
e1:a8:e3:d2:91:25:e2:c4:04:1c:31:d8:3e:92:9a:4f:8b:14:
50:ee:21:f7:4b:bb:7d:b7:e4:e7:0c:93:6c:c4:79:f1:52:4d:
0f:4f:63:ce:32:63:6a:4c:07:d2:b0:2c:2f:1f:d3:56:b9:c7:
a8:c3:9b:ea:f3:1b:b6:39:b9:93:3a:86:df:e9:e5:a7:81:d6:
41:cd:77:8b:7f:a9:92:a4:ca:0e:82:2f:50:5f:73:6f:39:a5:
e4:75:78:a0:6e:b9:74:80:00:ec:b5:f0:39:16:e1:ca:00:3a:
12:0d:5c:11:8d:49:84:c7:16:c3:a1:40:40:b5:cf:7c:c5:0f:
38:b5:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:33 2026 by rpki-client