Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: Z9RXAOGceKFbKVMptoiMv7eWGQ03SFvQWYqYkhpC4Jo=
Subject key identifier: FC:97:99:6A:1D:58:1C:FA:B3:E7:18:92:42:DE:2D:BC:87:01:34:5C
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 01A0D57004BD5E42721ABC4742ECAB3B6315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 17A6
Signing time: Thu 24 Sep 2026 22:01:23 +0000
Manifest this update: Thu 24 Sep 2026 22:01:23 +0000
Manifest next update: Fri 25 Sep 2026 22:01:23 +0000
Files and hashes: 1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: 0PIup0nJPtamqqwCsiXpOV+PRrm9foQG4rjR9iJGsZk=)
2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:04:bd:5e:42:72:1a:bc:47:42:ec:ab:3b:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Sep 24 22:01:23 2026 GMT
Not After : Sep 25 22:01:23 2026 GMT
Subject: CN=fc97996a1d581cfab3e7189242de2dbc8701345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:7f:51:30:53:4c:66:68:5f:52:00:1d:e3:
76:17:90:84:b3:01:0f:bd:d7:cf:2b:f6:56:8b:10:
07:3e:97:2b:b6:5e:1a:00:bd:80:3b:3e:fa:f8:74:
70:10:21:53:ba:11:c0:4e:8e:81:93:a7:0f:88:3c:
a8:f1:a1:e0:0d:ca:5c:17:a8:43:7c:a0:27:65:77:
aa:d0:23:1c:53:d2:1a:3a:e5:15:83:80:5d:cd:19:
e6:39:4c:c1:bf:d1:84:7f:27:7c:ee:22:9c:85:e9:
bb:da:5b:73:c7:26:ba:ab:02:2c:b7:28:58:49:60:
45:7e:66:ed:35:21:fa:ef:37:81:26:c7:64:4c:20:
13:30:13:1f:f9:be:7a:88:5c:f9:e3:04:ff:c2:8f:
da:e8:47:a3:b7:b2:9d:53:6c:86:89:a3:4e:38:e8:
27:49:59:41:01:07:40:81:ed:60:df:fd:06:2e:50:
6c:85:51:1e:f3:e2:e8:68:9f:08:68:fe:ad:73:87:
66:d2:1e:16:dd:a6:32:19:28:3f:47:71:20:cf:0c:
20:53:87:95:cb:4d:67:b7:e2:4b:66:ac:44:50:fa:
f8:78:9a:44:d1:87:9f:b6:a0:69:71:1a:ba:8c:f8:
21:61:df:df:c5:e9:9b:bf:da:c6:29:55:84:fa:8d:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:99:6A:1D:58:1C:FA:B3:E7:18:92:42:DE:2D:BC:87:01:34:5C
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:80:d4:f3:d2:31:bc:40:91:3e:30:0a:64:c3:2f:2f:27:0f:
db:7d:17:1d:66:9c:4a:cd:cd:64:aa:17:49:61:31:18:b1:36:
0b:35:b8:16:7b:0c:e7:95:17:fc:96:94:88:ba:af:a1:74:dc:
ae:7e:61:dd:e6:4f:86:74:0b:cd:fe:c7:38:10:b4:47:22:4a:
a4:0b:98:cb:e6:06:50:0b:45:b4:9f:9a:0e:9c:30:d6:3a:37:
69:bd:0b:3d:1e:5e:34:6b:98:24:6c:cf:8e:38:d5:17:29:c2:
79:53:2b:aa:ac:9e:e0:a2:88:e5:60:c6:6a:26:73:24:8a:b5:
76:b3:e3:96:9f:74:a6:c9:b5:68:38:ad:bc:a3:7e:e7:e3:af:
c0:e2:7b:9a:1d:fc:88:09:f4:f8:d6:da:63:74:eb:78:65:02:
56:8e:9b:37:9f:91:cf:e5:2a:1a:26:70:fd:f4:d9:06:6b:3a:
8d:c1:2a:01:83:69:85:c9:ab:ef:f2:23:fc:8e:15:ee:1b:e7:
5e:bc:e4:2c:13:a6:b5:93:ac:4d:9e:af:00:f1:8c:6c:88:6e:
fd:18:fb:c2:f1:45:e7:04:72:bc:cf:b9:b6:87:e9:a6:31:91:
31:4b:51:be:32:ad:86:a3:c8:b5:d4:8b:ab:66:e7:cf:1c:4e:
db:26:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:44 2026 by rpki-client