Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: oCchSEhJkQBwjaaLNy7t2rHPIvWVw5E7qv0fG6/6tJY=
Subject key identifier: FB:B8:0F:9C:95:8E:33:A6:22:25:53:AB:EE:F0:92:3C:E4:E4:C3:B6
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019D9962389133DD2EDA591630A7FAB49BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 09BE
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: BUd4MQ4edwvQX/QshmwBlg90JD/ImCSSXylTcu/dIuI=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:38:91:33:dd:2e:da:59:16:30:a7:fa:b4:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=fbb80f9c958e33a6222553abeef0923ce4e4c3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:0c:f5:02:31:b0:e0:40:ac:83:90:b8:71:
bd:4a:6c:a1:c2:68:61:42:26:bb:11:c4:00:df:c4:
fd:d7:d9:23:57:22:2e:c4:b4:9a:d5:72:da:95:0d:
3a:9d:3e:e7:fd:2c:4a:07:af:ca:92:41:41:82:54:
bb:ad:36:d3:84:98:61:24:91:4f:12:60:a8:e0:d2:
5e:da:62:10:3e:44:b0:d6:31:7c:85:20:2e:fb:31:
14:0d:58:3f:a5:8e:45:e3:6f:23:83:ae:20:9e:87:
3f:45:f0:a6:f3:ca:81:19:d6:00:11:22:e5:91:e9:
ec:6d:2f:b4:05:73:e2:6b:3d:28:c9:6c:4b:08:e8:
37:65:bd:18:f2:c1:e1:e1:ac:0b:eb:91:80:90:05:
b5:df:2d:a9:fa:fc:f2:2e:4a:e6:06:ae:9e:fc:55:
11:44:f8:ea:51:da:b8:6e:0d:b4:53:10:2e:69:f3:
a3:bd:c8:88:70:3f:a0:0f:8d:46:da:81:ca:e4:c5:
d1:e1:b0:0e:b7:99:6b:f4:23:3c:c9:18:df:f7:02:
0a:4a:ff:fc:3a:10:ca:ac:24:d8:ad:70:3a:22:3f:
72:47:8e:57:02:b3:96:d6:f3:71:76:4c:f6:66:58:
1d:53:2a:dd:a4:19:e8:5b:b9:34:33:28:c7:54:bf:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:0F:9C:95:8E:33:A6:22:25:53:AB:EE:F0:92:3C:E4:E4:C3:B6
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:c5:3a:39:f6:2f:bb:c9:58:66:95:ec:d7:65:34:e0:84:
28:f9:30:ca:82:82:b3:eb:8c:09:90:5c:33:0d:d1:2c:b9:3c:
06:66:56:f9:7f:d9:6a:1a:20:89:7d:c8:7a:df:58:fe:b0:da:
09:5e:d3:1d:7c:b0:26:7e:60:b2:5d:46:91:5c:6a:79:a2:81:
fb:0d:d4:7a:9d:6b:d8:af:e6:0d:3e:a4:66:3c:52:65:dc:59:
af:27:d6:89:4d:0a:2b:b2:85:04:37:f3:54:e7:ce:59:72:73:
41:ce:0b:b7:80:3b:b3:39:ab:bf:58:c6:71:9a:de:4e:11:e6:
fd:7d:2c:83:be:0f:67:76:73:4e:f5:ac:cb:0b:e0:48:05:4a:
70:14:68:72:7a:e6:7a:63:1a:95:1e:fa:b6:a7:0e:50:cc:7d:
07:b2:f7:75:73:ce:6f:0c:1e:69:1f:8c:85:d9:a6:25:63:3c:
71:25:4f:82:0a:5f:88:3a:08:70:12:29:f7:b3:83:a1:4c:b3:
61:67:f9:7f:4f:1d:3b:30:d0:fe:04:e3:97:8a:b6:bf:68:60:
af:de:fb:7c:5f:86:7e:f5:5f:5a:8c:e2:96:1c:7d:27:1a:27:
e8:d6:6a:bd:58:4f:cf:ad:eb:cc:ea:0f:a7:77:6c:0f:80:77:
3f:98:27:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjiRM90u2lkWMKf6tJv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh
YzJmN2EwHhcNMjYwNDE3MDMwMDQ0WhcNMjYwNDE4MDMwMDQ0WjAzMTEwLwYDVQQD
EyhmYmI4MGY5Yzk1OGUzM2E2MjIyNTUzYWJlZWYwOTIzY2U0ZTRjM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzMM9QIxsOBArIOQuHG9Smyhwmhh
Qia7EcQA38T919kjVyIuxLSa1XLalQ06nT7n/SxKB6/KkkFBglS7rTbThJhhJJFP
EmCo4NJe2mIQPkSw1jF8hSAu+zEUDVg/pY5F428jg64gnoc/RfCm88qBGdYAESLl
kensbS+0BXPiaz0oyWxLCOg3Zb0Y8sHh4awL65GAkAW13y2p+vzyLkrmBq6e/FUR
RPjqUdq4bg20UxAuafOjvciIcD+gD41G2oHK5MXR4bAOt5lr9CM8yRjf9wIKSv/8
OhDKrCTYrXA6Ij9yR45XArOW1vNxdkz2ZlgdUyrdpBnoW7k0MyjHVL9bPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu4D5yVjjOmIiVTq+7wkjzk5MO2MB8GA1UdIwQY
MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt
OTVkMTYzNjRkYmI5LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5
LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYjFOjn2
L7vJWGaV7NdlNOCEKPkwyoKCs+uMCZBcMw3RLLk8BmZW+X/ZahogiX3Iet9Y/rDa
CV7THXywJn5gsl1GkVxqeaKB+w3Uep1r2K/mDT6kZjxSZdxZryfWiU0KK7KFBDfz
VOfOWXJzQc4Lt4A7szmrv1jGcZreThHm/X0sg74PZ3ZzTvWsywvgSAVKcBRocnrm
emMalR76tqcOUMx9B7L3dXPObwweaR+MhdmmJWM8cSVPggpfiDoIcBIp97ODoUyz
YWf5f08dOzDQ/gTjl4q2v2hgr977fF+GfvVfWozilhx9Jxon6NZqvVhPz63rzOoP
p3dsD4B3P5gn3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:54 2026 by rpki-client