Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: xoazT4vNtz+56XgF0Nltxvh63HCSUj2yT5CfsAcEqqI=
Subject key identifier: 47:7B:28:A7:E7:08:6A:79:EA:80:31:C9:F7:3F:7F:94:63:F4:53:E3
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019D265FF5A9601E1ED26B7D5B4295407255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 1173
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: UnK6pOJTZWuX2UJAS2xhhCDyyYm0ehiBsrL9pkM5kxI=)
2: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (hash: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f5:a9:60:1e:1e:d2:6b:7d:5b:42:95:40:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=477b28a7e7086a79ea8031c9f73f7f9463f453e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:43:55:fb:84:a1:61:19:a9:b4:90:ad:9a:
98:23:6e:f7:78:1d:81:9c:2d:0a:54:1e:90:2d:dc:
98:a3:ad:88:5f:fc:6e:01:83:5b:c6:3f:c1:64:75:
a9:f9:13:0d:10:cc:4d:ce:b8:2f:a3:9e:8f:41:fe:
f4:76:21:cd:6b:b3:2e:0f:84:89:1b:ea:d2:52:83:
d6:09:23:f1:8e:a1:ee:2a:97:7b:11:9a:99:43:60:
bb:cf:94:7e:3c:41:fd:8f:ad:d0:63:62:14:6a:64:
3b:87:80:8d:0e:8f:ea:6e:51:9f:2a:67:71:22:f7:
c4:bc:7d:b2:20:a2:f7:84:5f:9a:2f:1b:25:cb:6f:
29:d3:d5:58:ab:8a:26:59:2c:e0:71:18:c8:0a:88:
3a:76:53:6b:1e:95:7b:b1:cc:d3:5b:1e:c5:9a:16:
61:46:34:07:20:36:0d:0f:89:6a:67:cb:27:f9:21:
59:98:f9:f1:12:df:67:2f:48:7f:66:1c:28:a5:7d:
79:b0:92:73:37:ac:7e:db:d2:ed:a2:56:8d:a6:60:
d5:7c:c9:f5:22:da:34:85:7b:a0:93:a3:31:7f:5e:
90:51:62:46:ca:ea:28:cb:2e:c7:ff:be:2a:68:71:
a0:cd:4f:6e:d9:0e:25:f1:01:1f:62:64:a6:7d:8f:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:28:A7:E7:08:6A:79:EA:80:31:C9:F7:3F:7F:94:63:F4:53:E3
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:79:aa:dc:2e:88:1b:7f:af:cb:f3:29:1c:0d:7f:45:4c:ff:
60:50:49:d6:25:83:d1:99:b4:0f:6c:48:03:ca:10:8e:fb:e6:
41:29:fe:13:28:6e:3c:60:59:d7:9b:fb:5e:5d:6c:95:6b:92:
91:ee:8e:58:2b:07:23:25:ae:a3:df:bd:7b:50:28:4c:0a:a5:
22:74:96:d7:40:5d:8b:4b:be:fd:61:ba:9b:99:a2:85:76:c5:
38:0d:7b:c3:8d:9e:31:93:e0:a2:57:ca:92:03:35:18:3a:2f:
37:0d:00:b0:b2:0f:b8:aa:ca:89:f1:45:78:f6:4b:9d:e0:ec:
05:8c:e9:ff:a6:39:34:da:f8:00:15:e9:38:d7:31:8f:13:21:
38:1c:a2:0e:ee:53:c9:73:98:d9:42:c9:82:53:b9:ed:5c:20:
a1:f7:1c:2a:db:5e:9d:7c:8d:73:d0:9e:0f:c2:ba:7a:d9:c6:
3a:69:17:4a:e7:d6:a6:60:aa:6c:81:05:30:b1:8d:9e:73:fc:
dc:e5:26:0c:92:72:20:ab:06:27:5d:98:bf:6e:3b:3e:c5:2d:
fc:3c:a5:d0:38:8d:30:cb:de:78:19:82:44:a5:e1:fe:82:a5:
fa:d0:df:3a:09:95:1a:37:74:0d:06:fa:c7:e7:19:09:f8:21:
b5:9d:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:22 2026 by rpki-client