Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: Bp4Vo+jOkZNobeeKAwd6mkRuf13Xn2ikCU2PevlV9kc=
Subject key identifier: CB:70:1C:82:39:BF:18:23:F1:DE:55:F7:E9:65:B8:8D:14:40:BF:B2
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019D262807487F92D07536B15B781D962BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 18:00:50 +0000
Manifest this update: Wed 25 Mar 2026 18:00:50 +0000
Manifest next update: Thu 26 Mar 2026 18:00:50 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: vjuwvQQBbUANgIBJWxVAOoqa7IuXFeSn7bmknwtAle0=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:07:48:7f:92:d0:75:36:b1:5b:78:1d:96:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Mar 25 18:00:50 2026 GMT
Not After : Mar 26 18:00:50 2026 GMT
Subject: CN=cb701c8239bf1823f1de55f7e965b88d1440bfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:5b:ee:05:0f:1a:37:1d:72:bd:eb:4c:08:
dc:f5:9a:74:90:a7:7f:d2:ed:13:43:7d:31:c3:11:
e9:88:be:61:54:24:7d:cc:c9:f9:ce:57:33:9f:4a:
16:b8:46:65:09:25:3f:b5:a8:75:fb:04:42:8a:0f:
2d:69:64:ee:b3:f8:f4:8e:0e:ed:e3:eb:3a:6a:f1:
b4:02:c4:32:a4:5e:6b:7e:0e:95:1d:8b:4d:8d:f5:
2a:09:66:37:3b:5f:81:61:48:bd:b7:65:72:42:91:
a0:c8:2b:7d:e2:61:7f:11:a8:3d:a6:77:f1:8d:33:
77:d8:9a:8b:30:89:51:0c:df:6d:a9:b3:b9:2a:d5:
00:07:01:a0:45:d9:8f:a1:f5:fb:b4:da:98:b0:61:
ca:60:8c:26:8c:3d:0d:bd:01:83:fb:ff:59:6a:04:
53:9a:24:0d:46:e4:e9:2c:43:79:62:1f:b8:e4:b8:
d9:85:d6:9f:e4:cb:27:cb:74:02:ca:a0:9e:9c:51:
9e:7c:00:45:67:e8:ce:f2:85:a4:4d:98:79:b9:be:
51:4f:0a:a8:d2:6d:12:ff:39:6d:7f:5f:1b:3e:9b:
f4:18:7f:87:7d:98:95:35:b3:b2:41:b0:4a:85:56:
66:a1:c8:a5:46:39:1c:46:00:77:49:bc:0c:17:e6:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:1C:82:39:BF:18:23:F1:DE:55:F7:E9:65:B8:8D:14:40:BF:B2
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:d1:99:35:f0:18:77:d5:a5:4b:bc:ad:f3:fc:49:7a:6e:
45:97:2d:d2:71:70:ea:f9:a2:16:08:36:0f:17:24:e1:9b:8e:
6f:ea:9e:3c:12:41:6e:11:cf:65:c3:9e:49:8d:14:6c:b0:a3:
1c:ed:80:b3:ea:bc:2f:59:39:1a:0b:3d:e1:36:96:8a:58:18:
37:cb:1f:b8:6b:a4:9a:e2:24:78:1f:8c:6b:f9:78:78:97:af:
77:43:8d:b8:da:c4:da:85:76:91:7e:55:08:eb:3f:6e:e3:00:
31:b3:7b:62:96:5f:f8:8a:8d:c3:72:14:cb:cf:11:0b:58:ef:
8b:63:e9:a1:42:d4:08:9b:e1:f6:4d:a1:29:ce:b9:8b:c1:c0:
b5:12:73:15:ee:c6:ee:30:e0:5c:29:33:4c:3c:84:a5:fe:a5:
cf:f3:9e:23:10:d7:c4:9c:82:cf:30:1b:31:6b:f5:d3:34:df:
c9:e2:6e:a9:53:c8:bc:40:00:f3:a6:64:7b:3e:cc:ce:1d:c5:
38:52:57:ea:09:06:97:13:26:00:23:f0:8f:40:db:52:60:81:
7b:f8:b5:cf:26:cc:74:0e:4d:15:1d:25:22:06:9f:57:d0:0a:
9d:62:6c:82:6b:ba:7f:64:01:9a:d6:40:c8:08:99:c1:7d:6a:
79:6c:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:52 2026 by rpki-client