Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File: CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier: EonWz1LozaH9bsAVQw1Hqr2SPsU1DlkHvvwE6TPTaOU=
Subject key identifier: A8:85:40:51:5E:67:02:AD:BB:7E:D4:64:3A:22:FD:98:95:59:1F:F8
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial: 019D33755AB594D228574D9155FBE318CC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number: 1528
Signing time: Sat 28 Mar 2026 08:00:22 +0000
Manifest this update: Sat 28 Mar 2026 08:00:22 +0000
Manifest next update: Sun 29 Mar 2026 08:00:22 +0000
Files and hashes: 1: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: qj1k2XOV4D/bIPD23/kS+EqBMaWJ3FyES6aVsfA+ATA=)
2: QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa (hash: eKp6GN6lOfR9UrD6nqU3foj29LSJ6HMnSsJ3VnYQEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:5a:b5:94:d2:28:57:4d:91:55:fb:e3:18:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Validity
Not Before: Mar 28 08:00:22 2026 GMT
Not After : Mar 29 08:00:22 2026 GMT
Subject: CN=a88540515e6702adbb7ed4643a22fd9895591ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:d8:f4:9b:fa:c8:61:a5:90:f2:e2:5b:61:
7d:16:2a:5d:f4:bb:f1:c7:85:98:a8:b3:9e:8a:90:
35:37:c0:93:3c:9b:fb:49:98:9b:11:cc:02:21:18:
c4:c3:91:46:35:1a:da:30:8a:a0:7e:5f:6f:82:5c:
60:4b:53:46:93:39:62:19:df:ad:3b:21:88:0c:5c:
8f:d9:99:e7:29:06:30:e4:15:c1:10:1a:30:d6:5e:
e8:78:af:b0:87:ba:f8:48:4b:a6:35:e9:03:52:7e:
97:b3:01:96:89:a9:bc:a2:f0:5c:3b:08:f9:d3:dc:
12:b4:c4:24:db:24:95:e1:5b:dd:a8:24:a6:68:1e:
0d:6b:9f:b4:32:fc:18:6f:b9:7e:fa:51:da:82:3d:
2c:92:7e:e4:de:8c:46:95:6b:65:51:a7:f1:8c:3a:
2d:6d:58:97:8f:98:e5:e3:b2:e4:1c:9f:3a:36:60:
b5:9b:c1:0a:62:d8:f0:39:e1:f5:88:ff:48:c3:d1:
e6:60:f7:6c:3f:10:2e:73:cc:d7:b1:95:9c:e1:06:
1f:c7:3f:f5:a0:79:6f:53:6b:b9:63:dd:65:07:42:
b8:1d:c8:d5:9c:1b:bc:51:0d:f2:d8:45:47:a8:7d:
70:54:e7:46:13:18:5e:e3:9b:36:2d:b4:8b:4f:52:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:40:51:5E:67:02:AD:BB:7E:D4:64:3A:22:FD:98:95:59:1F:F8
X509v3 Authority Key Identifier:
keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:6d:7a:06:42:54:fa:3b:d9:29:d9:84:df:08:52:82:a5:
9f:11:a5:ed:7c:21:15:7f:1d:92:0d:c3:b4:00:8f:03:92:c8:
b8:17:a4:b9:51:4a:03:14:c2:01:5d:73:7d:0f:fd:df:d8:af:
98:c3:8b:91:6c:43:26:a5:f5:7b:0b:fa:9b:c6:0a:6f:54:97:
f1:20:fd:e4:83:00:a7:a5:ea:c8:f4:36:cd:f1:0c:3d:63:a8:
27:0f:9c:d5:15:23:4d:76:f3:07:43:a2:8c:e7:d2:7f:fa:eb:
dd:18:bc:95:91:77:20:cf:df:61:ef:fb:c2:a9:a6:48:8e:1c:
cd:55:a7:57:8a:bc:48:b0:cf:e7:e8:c7:ab:0b:54:81:93:73:
b5:32:91:bc:b9:76:64:c4:ae:66:03:5f:e4:6c:f9:af:0e:bf:
ee:9b:9c:da:34:a2:4c:76:2b:81:b2:fd:f4:72:7b:6e:df:4f:
52:77:e3:fb:b7:2c:b1:f2:cd:d8:fc:cd:f1:c1:5d:4d:b3:b6:
0b:70:88:67:9d:7e:53:ec:2e:32:e0:37:10:97:17:90:d3:9a:
c0:df:af:77:d7:2b:31:90:43:e1:a7:9c:d6:94:8d:d5:be:60:
ca:07:9c:6d:7d:ac:18:b0:47:ba:ab:7d:e4:3f:38:9f:a1:0f:
86:23:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:10 2026 by rpki-client