Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: bVkCT26FdQyNA5y4oNlWn95q5N8q5GZR+3WzCQrO7n0=
Subject key identifier: 89:43:62:65:18:C6:7A:14:30:C1:E9:A0:DB:47:10:3D:AB:7D:17:71
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019D2996EE19538AE2BA0BFCD4BC05CAF490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: 4hwTHZBBjZZscxcg1lTCDGwVZHiKK3cF/SpjoOCb4+o=)
2: v89NCrFwQeDvFifuIbe7lcr1Vdg.roa (hash: 8lNS9jprfqrQ4KnCohT8hKELj4DY0q7OpHWa2tkRvdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ee:19:53:8a:e2:ba:0b:fc:d4:bc:05:ca:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=8943626518c67a1430c1e9a0db47103dab7d1771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:ed:da:25:19:13:f4:0b:1b:72:59:f2:5f:
5c:2a:8c:cd:84:34:5a:25:8b:bc:7c:d5:9e:1f:da:
68:d5:17:6a:f6:72:58:f1:16:34:97:e5:58:3b:96:
ce:89:12:3f:af:08:5e:91:86:62:34:59:6f:72:8b:
c9:94:4c:31:90:fa:c5:7a:b2:b0:fe:0c:9b:dd:1a:
dc:e6:ff:97:9a:55:54:f5:62:ea:e4:88:b2:a6:a6:
6c:20:31:22:4a:00:3e:97:cf:b3:e6:7e:33:c5:31:
52:93:0d:1d:11:bc:60:e5:92:45:dc:c6:d8:31:1c:
41:07:c9:1b:07:fc:05:7b:04:29:92:5a:fa:4a:2a:
1c:3e:06:2b:8f:dc:65:62:af:41:95:38:35:6d:54:
cc:1f:c1:99:a1:6c:32:c5:e5:e2:61:41:ca:5a:20:
3d:e3:a0:4c:2f:e0:18:a7:57:b8:75:35:6f:dc:0f:
33:fa:7a:c1:15:8e:d6:bb:41:71:73:26:70:a5:6e:
13:ee:c5:9f:0c:42:b2:58:ef:f9:ad:76:e0:b4:b0:
ac:20:be:d7:5b:ad:3b:74:72:a5:cd:a9:4d:09:82:
82:b6:63:ed:b0:81:1d:e9:10:c4:56:65:0d:73:9d:
93:21:a8:e3:60:b0:7e:8d:a0:b6:9a:a6:dd:e9:41:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:43:62:65:18:C6:7A:14:30:C1:E9:A0:DB:47:10:3D:AB:7D:17:71
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e1:1c:71:09:04:31:24:f4:2b:39:e6:99:90:b0:51:17:ce:
03:e1:5d:ea:2f:ca:8b:c7:43:58:aa:bf:d6:2a:85:97:a7:c3:
2a:1f:52:fb:da:1f:da:db:a6:42:33:ba:9a:fa:e3:90:df:a1:
ff:a5:74:a5:2a:ce:25:e0:e5:8d:e7:f2:6b:43:1d:b5:2b:e4:
6a:a5:f4:49:d0:6e:f2:6d:79:d1:8a:c1:b9:55:ba:1a:eb:e1:
32:1b:5d:28:81:93:37:58:de:86:0f:e2:33:bc:6a:ea:b0:84:
eb:d6:d1:ac:1c:9a:51:e6:98:58:21:6d:65:13:19:4c:d8:6a:
14:cb:09:66:5e:e3:d2:78:9e:3c:9b:fe:90:8a:d1:16:79:7b:
ea:e8:2a:09:18:bb:66:c4:0e:59:91:5f:09:0b:e5:aa:25:a7:
33:25:1a:e8:d3:6c:90:25:13:7e:ef:13:d5:06:a1:70:b9:ea:
22:1e:bd:ab:b3:8a:78:18:9a:58:a5:c5:eb:1f:eb:77:eb:46:
ca:b6:5f:e8:33:21:62:10:b1:24:29:10:a4:ca:e1:96:72:e2:
ab:f7:35:c1:89:39:ac:ac:e0:e9:dc:b6:33:95:09:a9:89:80:
80:73:70:1f:c5:b9:9b:a0:31:47:53:5e:9d:94:ea:04:b9:69:
12:6d:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:24 2026 by rpki-client