Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: xauLi1fNcyZXl0DaFW/6XQSOQ9cL+mzjmdVvOyHQFhw=
Subject key identifier: 75:E6:ED:12:8C:6B:15:10:C1:29:67:9E:1D:50:90:C3:71:13:CD:3E
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 01A0D314E9D6F21CA5EB28F98D03783305CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 11:02:38 +0000
Manifest this update: Thu 24 Sep 2026 11:02:38 +0000
Manifest next update: Fri 25 Sep 2026 11:02:38 +0000
Files and hashes: 1: 1X2sgvq2OfT6Jdo40rIKwx5gDV4.asa (hash: VL+5JuAwjiAZeewO3OjhChR2ymlOyYa+cwBCn8pjvhQ=)
2: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
3: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
4: Bk2PVhSldiADwMhbVtnkp9pryqY.asa (hash: hx24E0I0fhbwVZplZBmeDNsFPlc70EP9j2DAqKTvSZA=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: sfiyg+X/WFB7ybWDzpN1QbmjY2ABlP/3RvMhvcqo3Ns=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:e9:d6:f2:1c:a5:eb:28:f9:8d:03:78:33:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Sep 24 11:02:38 2026 GMT
Not After : Sep 25 11:02:38 2026 GMT
Subject: CN=75e6ed128c6b1510c129679e1d5090c37113cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:af:cf:c2:63:52:32:9d:25:0d:0b:6a:ad:
f1:0b:c0:3d:33:5b:6f:45:57:62:18:38:06:87:83:
4d:77:b6:50:da:43:8a:29:52:b6:37:3d:06:bd:5c:
3d:90:7d:1a:7e:75:32:95:09:1b:8a:52:a4:5e:1e:
b9:aa:5d:04:57:52:4e:fb:06:86:c8:b3:48:f8:9b:
40:d1:1c:c9:d5:99:ea:01:12:2a:41:a9:17:5b:26:
f5:a9:e1:de:dd:35:c0:4c:1b:8c:a3:36:de:48:17:
de:35:2f:9a:a2:99:9e:0a:80:12:96:ca:17:1e:75:
3c:fd:c6:4b:3c:a7:22:c1:5b:f1:38:51:82:4d:64:
ec:6c:32:2f:87:fd:e9:e4:05:38:07:99:45:a4:f0:
e9:96:c4:fa:7d:f3:6b:46:b2:42:d5:a0:84:f1:4d:
fd:d5:f6:bf:bf:0d:48:11:5e:ad:5c:ba:11:6f:6f:
fe:22:c7:26:9d:8d:db:9c:09:75:21:36:e1:a0:5b:
25:84:b4:a2:3b:0d:e9:ad:08:d5:08:b2:b0:36:d4:
80:9e:e0:a1:fa:ad:79:5a:c0:75:1d:ef:7f:fa:87:
ec:cf:97:c7:d3:91:3d:3d:a5:62:bd:43:9e:24:9a:
0c:71:5b:b1:9a:25:7b:eb:26:1a:ab:4e:b2:d0:3f:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E6:ED:12:8C:6B:15:10:C1:29:67:9E:1D:50:90:C3:71:13:CD:3E
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:02:37:7e:03:85:c9:4e:75:05:ed:f2:1d:3a:02:f3:14:31:
59:04:bf:d9:bf:39:29:39:5b:30:6e:ab:df:c7:96:bb:51:24:
8e:b9:7b:f7:a1:83:7d:9e:54:79:de:77:6e:c7:89:46:68:67:
16:54:60:8b:bd:39:0f:ac:dd:33:79:4c:00:0a:8f:09:b1:4c:
1a:0c:a2:0c:60:f6:27:23:a4:d2:18:fd:9d:d0:e0:3f:9c:a7:
02:6a:ee:14:82:d2:c5:fa:01:e6:4a:7c:cb:f6:96:49:a9:ac:
58:9d:3c:d8:a8:8c:78:52:e3:21:7d:be:f6:be:89:9a:ca:b3:
75:c7:6a:6e:4d:b2:99:1c:c1:a0:f6:be:10:ec:ea:bc:d8:7d:
3b:9c:6a:dc:1c:96:a0:7e:f0:23:34:f3:7f:29:49:14:34:43:
ac:65:47:a0:87:ca:17:3e:59:ab:0e:1f:2f:a8:6a:95:84:cc:
c4:3e:ce:31:cf:0a:d5:88:81:02:18:a1:09:ab:67:a1:eb:65:
14:37:c7:76:fe:91:30:1d:07:15:cb:a8:20:09:ad:dc:ce:f6:
80:9b:9a:a4:5e:62:57:7b:1c:67:64:5b:84:30:30:11:70:f5:
b5:10:f2:b2:58:01:d5:74:9c:5a:47:92:00:ca:29:29:68:06:
74:b8:e9:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFOnW8hyl6yj5jQN4MwXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj
NDM4YWMwHhcNMjYwOTI0MTEwMjM4WhcNMjYwOTI1MTEwMjM4WjAzMTEwLwYDVQQD
Eyg3NWU2ZWQxMjhjNmIxNTEwYzEyOTY3OWUxZDUwOTBjMzcxMTNjZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHOvz8JjUjKdJQ0Laq3xC8A9M1tv
RVdiGDgGh4NNd7ZQ2kOKKVK2Nz0GvVw9kH0afnUylQkbilKkXh65ql0EV1JO+waG
yLNI+JtA0RzJ1ZnqARIqQakXWyb1qeHe3TXATBuMozbeSBfeNS+aopmeCoASlsoX
HnU8/cZLPKciwVvxOFGCTWTsbDIvh/3p5AU4B5lFpPDplsT6ffNrRrJC1aCE8U39
1fa/vw1IEV6tXLoRb2/+IscmnY3bnAl1ITbhoFslhLSiOw3prQjVCLKwNtSAnuCh
+q15WsB1He9/+ofsz5fH05E9PaVivUOeJJoMcVuxmiV76yYaq06y0D8YhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXm7RKMaxUQwSlnnh1QkMNxE80+MB8GA1UdIwQY
MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt
OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2
LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAI3fgOF
yU51Be3yHToC8xQxWQS/2b85KTlbMG6r38eWu1Ekjrl796GDfZ5Ued53bseJRmhn
FlRgi705D6zdM3lMAAqPCbFMGgyiDGD2JyOk0hj9ndDgP5ynAmruFILSxfoB5kp8
y/aWSamsWJ082KiMeFLjIX2+9r6Jmsqzdcdqbk2ymRzBoPa+EOzqvNh9O5xq3ByW
oH7wIzTzfylJFDRDrGVHoIfKFz5Zqw4fL6hqlYTMxD7OMc8K1YiBAhihCatnoetl
FDfHdv6RMB0HFcuoIAmt3M72gJuapF5iV3scZ2RbhDAwEXD1tRDyslgB1XScWkeS
AMopKWgGdLjp0w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:51 2026 by rpki-client