Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: /R51q0E/G/dCrsMWswsOIU81Acz1a2wLYtU98uuFQ+4=
Subject key identifier: 1B:52:F0:24:02:1E:1B:B7:D4:CA:D2:29:FB:D6:6F:67:AA:6C:10:76
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 019D27DF6862B2E20EEA0364BD19AD6FA5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0DB6
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: qRsMWLU5Jjvba2WUYNsDGJpDX4v8VbDSK5iTD22EoJI=)
2: Zf-GmgiBzSbR55Zd6Ei_4JqwWTE.roa (hash: Pc7yuk7MXVsuOwRC/78JETsXN/BJH5ZBzUEwkk/otDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:68:62:b2:e2:0e:ea:03:64:bd:19:ad:6f:a5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=1b52f024021e1bb7d4cad229fbd66f67aa6c1076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:7d:f7:79:d9:22:7c:e6:18:49:1a:4f:67:
c6:e9:25:21:9f:b9:b9:2e:39:4b:f4:d3:72:2a:c8:
69:85:9e:fb:5f:bf:b6:ae:6a:b1:5d:14:b3:39:7d:
fc:91:c9:86:56:1a:cc:d2:72:47:bb:8d:ab:1c:03:
1d:d8:e7:f9:40:20:4c:7d:e1:46:ac:a3:db:72:0e:
ba:71:ac:85:34:38:19:7b:a2:20:2c:c6:dc:df:69:
45:88:7a:0b:13:f7:18:33:ea:e4:e9:05:2a:ad:fb:
a1:7b:e6:9b:c7:b8:86:85:3a:4e:75:5b:69:82:af:
50:b0:b0:9f:58:1e:48:4f:9d:56:f2:7c:d9:e1:c2:
9f:49:96:b4:89:d5:95:56:c5:1b:68:d9:38:81:20:
68:30:5d:99:ba:1b:6b:03:f4:b0:88:f3:4a:00:bf:
d3:fb:56:31:18:7e:25:0e:8f:a9:82:fa:20:0f:a7:
36:31:04:0c:2d:17:ae:ba:dd:c6:80:96:cf:0d:96:
a4:cb:a6:23:34:3d:14:fc:b1:78:96:12:40:2d:4c:
05:4b:e8:e0:14:e2:64:9e:e2:f7:eb:7c:8c:22:f5:
b8:97:5c:8d:bb:8a:35:d4:d4:73:5e:9d:24:ec:b3:
38:a8:c9:65:8f:64:d3:15:cb:65:6b:32:8c:99:3d:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:F0:24:02:1E:1B:B7:D4:CA:D2:29:FB:D6:6F:67:AA:6C:10:76
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ce:10:9d:26:8a:f9:7d:28:cf:f7:f7:5c:5f:f5:eb:e3:9b:
8c:88:5e:38:89:47:dd:77:5c:9a:a7:d2:5e:ef:07:f4:8b:ef:
64:85:67:09:b5:89:b8:25:45:42:38:8c:d4:dc:9b:77:da:d1:
b9:2a:84:92:fd:01:ac:d2:ca:cb:32:d6:63:d2:dd:7a:f5:0b:
29:f5:e8:96:da:ec:cd:e3:3e:78:18:69:31:a9:93:f2:ab:ea:
1e:49:b1:c4:9f:e6:6a:2f:80:bb:b6:15:f4:e8:6d:39:33:95:
4c:8d:e5:89:1b:9f:81:5f:a4:0b:40:4a:6b:04:6d:d4:51:43:
11:62:3b:f2:05:6c:06:31:95:3b:ea:86:61:22:98:b1:ad:03:
97:a5:51:92:51:4e:0a:04:b6:bd:0e:32:53:28:7e:b0:0f:30:
bc:40:37:ec:37:6d:47:03:d8:9d:ad:4f:0e:20:05:87:ad:34:
78:53:4c:8b:1c:6f:68:fc:72:91:7a:77:31:9c:db:2c:87:fe:
f7:c0:c8:7f:61:fa:06:8c:b5:3e:9e:a1:ed:db:76:5a:70:79:
af:a3:1e:ef:0e:eb:1d:59:78:9e:6c:2a:13:d5:b1:9e:da:a7:
eb:64:6c:1a:d8:e1:2f:8e:0a:c1:94:a2:47:9e:47:8c:59:49:
e3:89:f6:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32hisuIO6gNkvRmtb6XIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzgxN2ZlNDg2YWM3N2JlOTRlMjk3YWNlM2E5NWNmMjdk
ZmZiMWEwHhcNMjYwMzI2MDIwMDQ1WhcNMjYwMzI3MDIwMDQ1WjAzMTEwLwYDVQQD
EygxYjUyZjAyNDAyMWUxYmI3ZDRjYWQyMjlmYmQ2NmY2N2FhNmMxMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Th993nZInzmGEkaT2fG6SUhn7m5
LjlL9NNyKshphZ77X7+2rmqxXRSzOX38kcmGVhrM0nJHu42rHAMd2Of5QCBMfeFG
rKPbcg66cayFNDgZe6IgLMbc32lFiHoLE/cYM+rk6QUqrfuhe+abx7iGhTpOdVtp
gq9QsLCfWB5IT51W8nzZ4cKfSZa0idWVVsUbaNk4gSBoMF2ZuhtrA/SwiPNKAL/T
+1YxGH4lDo+pgvogD6c2MQQMLReuut3GgJbPDZaky6YjND0U/LF4lhJALUwFS+jg
FOJknuL363yMIvW4l1yNu4o11NRzXp0k7LM4qMllj2TTFctlazKMmT17bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtS8CQCHhu31MrSKfvWb2eqbBB2MB8GA1UdIwQY
MBaAFArIF/5Iasd76U4pes46lc8n3/saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEt
ZDdmYzhjNWQwMGFhLzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEtZDdmYzhjNWQwMGFh
LzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms4QnSaK
+X0oz/f3XF/16+ObjIheOIlH3XdcmqfSXu8H9IvvZIVnCbWJuCVFQjiM1Nybd9rR
uSqEkv0BrNLKyzLWY9LdevULKfXoltrszeM+eBhpMamT8qvqHkmxxJ/mai+Au7YV
9OhtOTOVTI3liRufgV+kC0BKawRt1FFDEWI78gVsBjGVO+qGYSKYsa0Dl6VRklFO
CgS2vQ4yUyh+sA8wvEA37DdtRwPYna1PDiAFh600eFNMixxvaPxykXp3MZzbLIf+
98DIf2H6Boy1Pp6h7dt2WnB5r6Me7w7rHVl4nmwqE9Wxntqn62RsGtjhL44KwZSi
R55HjFlJ44n2hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:16 2026 by rpki-client