Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: 4u8Rw/e2fQUqwUTj0RPNPlCT3KRQ6MW/ArDuNqsb3wI=
Subject key identifier: 67:DA:98:C9:CD:8E:34:02:73:C1:B4:6A:AE:88:C7:22:72:81:F1:2E
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01A0E4ABC4DF4FB72782B7DCD3A9BFD56676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 19DE
Signing time: Sun 27 Sep 2026 21:00:57 +0000
Manifest this update: Sun 27 Sep 2026 21:00:57 +0000
Manifest next update: Mon 28 Sep 2026 21:00:57 +0000
Files and hashes: 1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=)
2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: /rP4rPgjqRlUaM7yhgsp2a/vVuRszBe0zRsEdAlh55g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ab:c4:df:4f:b7:27:82:b7:dc:d3:a9:bf:d5:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Sep 27 21:00:57 2026 GMT
Not After : Sep 28 21:00:57 2026 GMT
Subject: CN=67da98c9cd8e340273c1b46aae88c7227281f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:b4:6e:3a:92:3f:7e:94:bb:81:e6:00:e3:
02:8a:ae:3d:d3:e0:07:73:f6:34:3b:62:74:71:b1:
d5:73:2e:04:b3:99:18:f8:4f:f3:fd:26:cf:eb:28:
1b:e4:fa:c8:86:6b:8e:ba:b0:d6:0f:1d:99:57:57:
bd:b7:0c:90:41:ab:27:4b:5e:c1:48:8f:7f:b8:90:
51:0c:4b:8e:48:32:c6:d7:33:db:89:90:25:26:63:
d1:8b:99:2d:51:85:15:e0:26:c3:34:db:09:9a:cc:
3d:d7:09:66:37:1a:e0:73:90:ce:ce:e6:32:81:e7:
80:12:91:0f:a0:4e:70:57:29:9b:a9:31:c8:42:69:
1e:0f:82:e8:18:f8:02:b5:7a:5f:14:a5:d3:3d:7d:
98:ba:7b:35:36:17:52:fd:11:42:04:a5:ee:68:4c:
d2:1e:a1:62:d3:b4:a8:ee:24:cd:2e:5c:3f:29:d9:
d3:6e:a9:15:98:2f:f0:a1:d2:68:e5:c6:68:0a:5c:
72:8a:11:66:36:54:99:e6:63:38:67:ff:d3:87:46:
ad:8c:a1:ba:00:e7:eb:16:c4:05:16:8a:ca:f6:32:
f1:31:7c:a5:05:42:24:b5:9c:b2:63:82:10:aa:b5:
02:26:05:28:ab:ab:22:2a:64:88:7d:87:b1:13:6a:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:98:C9:CD:8E:34:02:73:C1:B4:6A:AE:88:C7:22:72:81:F1:2E
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:95:bf:8c:4b:41:b0:27:fa:dc:10:00:72:83:dd:c2:cf:
35:73:83:59:da:6d:4e:8a:2c:dc:52:ee:31:42:89:f5:94:a7:
e1:ff:dc:53:22:75:30:f9:5a:3e:fe:f7:d5:c5:87:9c:db:d2:
11:28:dc:84:c8:4e:f3:bb:a9:5d:f0:78:04:8b:f9:4a:76:d0:
45:4d:67:9b:42:42:95:38:ca:c7:c6:50:91:be:52:60:1f:9d:
78:e1:b8:22:03:99:1d:35:9e:48:38:ae:38:53:a8:d9:95:7e:
cf:ea:c6:69:2e:85:cc:eb:70:d6:71:44:17:b6:68:88:82:86:
fa:3f:5c:16:51:9a:7b:1f:18:0d:50:02:ae:46:dc:b5:a2:7d:
b8:13:4e:af:fc:4d:28:60:07:a7:02:6c:c9:81:ed:c4:8f:33:
23:c4:c8:91:52:07:ac:0e:1d:81:fe:4c:8b:bc:23:ba:3d:f3:
00:04:b0:3e:44:7e:4b:b0:14:25:23:fb:90:d7:7a:f7:17:81:
1d:c4:6b:97:a4:22:b4:e4:1c:ad:f0:89:b9:01:56:36:bb:9a:
4c:dd:de:f9:a4:b0:b1:76:ec:22:f1:0c:60:fb:9d:62:52:33:
80:0d:20:bc:4e:95:32:9a:0a:d5:24:20:d1:84:a6:00:b3:22:
06:a8:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:45:30 2026 by rpki-client