Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: k7Ke7WOAXHCNvSgUuJUtVcWEEObZl3iZBoJB82XaXL0=
Subject key identifier: D8:1F:47:B6:1A:0C:0D:B4:B9:2C:02:43:32:E8:0E:1C:6F:D8:44:A5
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 019F91DAA6E2EC2A950D8796130D759ADB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0EF6
Signing time: Fri 24 Jul 2026 02:00:53 +0000
Manifest this update: Fri 24 Jul 2026 02:00:53 +0000
Manifest next update: Sat 25 Jul 2026 02:00:53 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: KD3jdcPvo0qlhyP/Cv1LGsbyh+HF3VuzRVOBPIxfQXg=)
2: Zf-GmgiBzSbR55Zd6Ei_4JqwWTE.roa (hash: Pc7yuk7MXVsuOwRC/78JETsXN/BJH5ZBzUEwkk/otDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a6:e2:ec:2a:95:0d:87:96:13:0d:75:9a:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jul 24 02:00:53 2026 GMT
Not After : Jul 25 02:00:53 2026 GMT
Subject: CN=d81f47b61a0c0db4b92c024332e80e1c6fd844a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:5e:3c:0a:7b:4e:e1:66:02:2d:8f:be:41:
1c:a8:b4:a3:4d:f8:88:c9:f8:bd:c4:0e:bd:fc:ca:
77:78:5e:38:02:3f:77:b7:6c:35:74:37:6a:a5:8d:
30:cc:46:f1:43:74:b1:cb:dd:d0:58:e4:3b:bd:cd:
51:4d:07:54:47:bc:f0:6f:f2:9f:39:21:83:8b:35:
94:61:99:0b:95:50:61:18:44:1d:43:46:89:fa:9e:
11:f3:9d:ea:02:f3:0b:5d:48:32:a6:9d:a0:0a:32:
b0:dd:9b:19:80:95:cc:18:00:e9:5e:38:15:a1:61:
9b:0c:41:19:88:5c:b7:99:11:fa:ba:29:45:5c:ba:
d0:15:a9:30:dd:a1:ff:4e:d9:c5:87:ad:39:bc:65:
1b:ee:24:2a:9e:13:ce:f9:9a:b6:22:37:82:2e:84:
2f:38:e0:92:09:23:9d:ed:6a:48:14:32:08:1c:79:
fb:1d:78:5c:a7:3f:f4:7e:0f:4b:af:25:2b:6e:ac:
e5:36:c2:dc:70:8c:d1:f0:68:98:45:de:7f:68:97:
36:ec:13:5d:90:12:3d:24:06:6c:e6:43:8f:f1:05:
5d:b5:24:89:c5:6e:42:cc:92:95:46:83:1e:07:aa:
47:83:da:8d:5a:48:eb:21:e9:bd:43:eb:48:a9:2a:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1F:47:B6:1A:0C:0D:B4:B9:2C:02:43:32:E8:0E:1C:6F:D8:44:A5
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:00:cb:3f:04:85:08:f6:1c:5d:53:cf:08:5b:aa:fe:8c:b7:
74:aa:a4:6e:85:bb:89:45:4c:23:5a:61:73:6d:2d:42:89:40:
a0:46:22:15:ed:ad:71:fc:a1:54:c1:e1:fd:0d:1a:8f:32:9c:
05:a6:eb:fb:67:c3:0b:0b:8d:30:6e:e0:e8:74:14:99:ea:86:
f3:75:c9:14:c2:f8:08:82:a9:44:cc:88:9f:cd:8d:82:d5:ca:
b3:4c:7a:0c:3d:f0:02:c4:e2:4d:72:50:4a:e4:8b:3d:c0:9b:
73:73:26:f4:b1:03:23:cd:00:01:00:71:e5:79:5a:19:9b:4b:
0d:c2:2f:0f:24:d8:9f:1a:4e:ef:d7:50:20:dc:13:92:71:cf:
ce:b6:fc:88:4c:55:02:0f:16:5a:6c:8a:28:46:b6:88:42:6f:
32:b0:23:00:79:e1:b0:22:b7:2f:15:cd:ff:a0:ef:50:e1:06:
5d:be:8a:64:3f:60:a4:73:c7:a4:6d:78:27:9c:9e:6e:0b:37:
25:7e:b2:e6:e9:e6:7f:31:09:62:89:f2:31:c2:78:6d:9d:be:
43:f5:9d:1c:1e:3c:5f:81:c6:6a:4b:c1:bc:04:4e:77:3f:78:
ee:3a:53:ee:b6:8f:05:a0:97:d5:c7:17:d6:ae:17:7f:4b:58:
02:45:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:39 2026 by rpki-client