Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: pRxgQl8rFvy4t+oIfDwtvO0RjxcKMwgHigtu/RuDLmQ=
Subject key identifier: FB:7E:17:A8:B3:D2:C6:94:58:09:D7:06:F2:C9:37:B5:4D:63:B0:8F
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01A0E2871430C9433EA337A42F2B3B645205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 11:01:38 +0000
Manifest this update: Sun 27 Sep 2026 11:01:38 +0000
Manifest next update: Mon 28 Sep 2026 11:01:38 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: jpnvjmVPHUbwxKGFM3vkfxRVR8meQ/Rc2RkfjmiAE/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:14:30:c9:43:3e:a3:37:a4:2f:2b:3b:64:52:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Sep 27 11:01:38 2026 GMT
Not After : Sep 28 11:01:38 2026 GMT
Subject: CN=fb7e17a8b3d2c6945809d706f2c937b54d63b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:bf:3e:9a:7d:00:37:97:b4:d1:f2:cc:7c:
48:1c:42:cb:f4:e2:25:45:1b:4b:83:47:75:62:1b:
aa:98:e2:af:02:9e:04:a5:3a:ce:5f:8e:26:c5:35:
69:72:9d:b8:c1:bc:54:c5:4d:1c:e5:1a:57:e3:a7:
11:13:ac:95:9a:89:e7:81:38:cc:06:78:16:f2:41:
ea:f7:7e:3f:35:e1:bf:d1:8a:2b:95:d7:26:af:66:
d8:fa:57:62:39:f9:53:34:fc:af:7a:0e:cd:f8:00:
76:d1:ef:50:d9:ef:4d:ac:ca:d2:94:3e:aa:05:5f:
ad:84:0e:6e:39:ed:4a:37:93:59:ea:d5:b0:93:ef:
26:0d:1a:7c:f5:04:cd:79:0c:5e:b6:86:c8:51:cb:
93:63:f4:c3:1a:52:3b:df:d8:f6:37:ba:4e:87:1b:
bd:63:22:be:9c:d6:07:ee:f8:7a:0a:44:c4:30:bb:
05:88:00:98:2b:50:4a:0b:26:2d:a0:fa:1b:76:b5:
77:9d:5c:07:00:57:02:11:bd:e3:08:92:4f:24:58:
00:37:9e:3d:f7:5a:b6:87:8e:d1:00:89:0b:ba:7f:
27:c7:21:5b:79:e7:76:51:fb:e1:fc:7a:b9:e9:bb:
97:69:1d:8c:24:2c:6c:d2:d8:74:b4:9b:f9:73:01:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:17:A8:B3:D2:C6:94:58:09:D7:06:F2:C9:37:B5:4D:63:B0:8F
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:02:10:aa:3a:58:78:c8:37:b9:3e:98:94:a6:c1:13:f4:62:
55:96:9a:28:f1:5a:b8:20:46:4f:e0:74:91:15:ee:70:30:f4:
7a:8e:4b:27:c8:f7:2c:84:2d:4e:2a:c5:7e:9d:bc:b4:c7:d9:
c0:d1:b0:86:d9:3c:ba:c5:93:12:93:5f:06:eb:ad:ad:2c:72:
88:63:a8:3f:4b:80:ff:72:7d:46:13:a1:0b:c1:24:da:82:2f:
5f:44:ad:4a:91:b1:55:01:19:f5:46:f4:f5:d3:4a:62:5c:19:
b1:2b:aa:46:ec:97:61:ed:20:ab:c4:08:45:09:8d:0c:51:3b:
47:16:40:48:c7:46:c2:2d:6b:c0:b6:aa:bd:69:ae:43:06:40:
a2:49:97:13:06:2d:53:ad:1e:8f:96:8a:79:b0:2e:7e:f7:b5:
b8:9d:73:85:8c:3e:d9:58:68:d0:49:45:6d:45:4a:f8:dc:26:
b4:e6:21:ba:c4:64:fe:f9:c7:1f:47:4d:4c:4a:55:64:1e:1c:
a7:e7:63:a9:cc:d4:91:c6:c2:1b:ea:5e:07:42:eb:43:bd:fa:
c2:00:c3:7c:81:3b:e8:08:05:e0:41:80:35:fe:84:8f:a2:f9:
c9:43:fd:74:03:a2:a2:76:0e:a2:98:43:48:21:13:23:59:13:
37:e4:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:34 2026 by rpki-client