Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: UKsumI3yOIxpEB9uaR1+PFGcXP7yAjdnF2bG32fem1k=
Subject key identifier: B8:F4:AD:65:A8:6D:EE:96:CE:FA:1E:0D:E3:FA:B1:87:DA:E2:FE:AA
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 01A0D1932DE91D2569390ACA40118FFD5F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0AE3
Signing time: Thu 24 Sep 2026 04:01:18 +0000
Manifest this update: Thu 24 Sep 2026 04:01:18 +0000
Manifest next update: Fri 25 Sep 2026 04:01:18 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: mM0A2PEzdK5YPX55AyUanEcbmJ6qRNoW+JpFVakuTKQ=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:2d:e9:1d:25:69:39:0a:ca:40:11:8f:fd:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Sep 24 04:01:18 2026 GMT
Not After : Sep 25 04:01:18 2026 GMT
Subject: CN=b8f4ad65a86dee96cefa1e0de3fab187dae2feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:05:f6:d6:be:cc:43:ea:55:e1:27:e7:18:
8c:40:da:9a:ec:a7:ca:83:2a:b2:43:6e:a7:78:48:
6e:cb:7a:2c:ed:d8:cb:bf:30:21:28:27:23:62:2f:
be:a2:cb:ea:d0:7a:48:e3:cd:cb:63:eb:d1:f0:e1:
2f:2b:bb:0d:12:c2:58:12:e1:38:8c:d3:e7:bf:e5:
9b:9c:6e:e9:62:8b:8b:aa:3b:aa:95:5c:7a:eb:42:
1c:e1:27:cc:90:ae:c3:ef:8d:96:20:e1:92:e1:b4:
ff:1e:58:4c:c6:ad:d9:55:8a:03:9c:d1:ef:de:81:
3d:62:c5:8c:36:d1:23:e3:fc:8e:ff:bc:09:34:46:
07:61:ad:70:06:d2:dc:48:85:a3:39:be:5d:6f:bf:
19:11:16:d8:b7:4a:1a:ea:b5:22:0b:fe:6d:2c:81:
6a:39:4e:9b:5a:30:fb:7d:46:f6:d7:9e:55:f7:74:
d9:1b:15:ae:2b:ad:19:21:ca:ca:21:19:57:9e:85:
cc:8f:b6:4e:0e:be:bd:4e:79:2b:6d:f5:b1:6c:f9:
de:97:87:b2:6a:a5:99:f2:73:82:6c:19:4c:94:3f:
94:fd:1d:5e:7a:2e:f6:bc:17:f2:0e:33:52:58:52:
f1:e7:9c:74:d1:0f:71:96:46:e3:81:b2:2d:19:54:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:AD:65:A8:6D:EE:96:CE:FA:1E:0D:E3:FA:B1:87:DA:E2:FE:AA
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4b:79:80:25:ad:89:4c:56:a9:9d:e8:74:88:9c:dd:ba:38:
af:91:3c:3a:11:b5:71:c9:9c:eb:5a:23:06:95:66:e1:a0:02:
dd:8c:37:64:08:78:8a:62:5d:29:d5:9a:76:5c:82:ab:df:dc:
b4:d9:63:a5:1e:de:09:58:42:49:5a:65:22:5c:fd:5d:44:14:
de:f7:37:04:11:2c:09:67:9b:b3:4b:f7:9b:f4:4b:de:e5:15:
77:d1:6f:47:ba:ef:b7:79:37:86:75:4a:36:24:ee:55:67:98:
34:c1:66:e3:8f:d1:7b:89:b9:74:a7:72:35:56:06:d9:9d:e9:
3f:56:10:df:5e:14:73:01:ad:d5:b5:dd:49:be:74:02:89:c1:
6a:81:28:6c:8e:93:81:b0:a7:9a:22:10:83:07:13:ca:36:e7:
f6:51:51:fd:a6:63:b1:08:40:36:8b:f5:41:d1:f3:ab:5c:96:
bd:7e:c6:3e:20:cc:ab:ac:4c:f4:e5:ba:3b:b9:8d:19:16:ce:
77:62:da:14:12:c8:94:a7:15:75:3a:8b:29:88:71:0a:6f:d5:
6d:87:5f:6d:15:29:82:be:4b:c9:d3:d0:81:61:97:89:45:9c:
c8:95:05:3e:b6:01:53:78:88:bd:23:de:0d:e2:5f:8f:7d:31:
8f:f8:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:48 2026 by rpki-client