Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: 9Dhy6bPPAL3ckeizNgQdFnGgV8o1g9N9O3+mFKzeyXM=
Subject key identifier: E9:CB:93:D8:38:4E:44:00:EC:A9:15:17:D2:B3:3E:BD:5F:B2:8F:61
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019CABDA07623D569B67F350E63C6BA13225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0943
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: ygYvsVwQkZmKbJelZm58qvip++W/MnIQIpJcwSxZShM=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:07:62:3d:56:9b:67:f3:50:e6:3c:6b:a1:32:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=e9cb93d8384e4400eca91517d2b33ebd5fb28f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:46:44:df:61:27:02:44:39:54:53:cd:75:
9d:a2:79:03:55:d3:17:10:e0:85:23:71:8f:f7:f5:
20:93:f6:7f:51:82:4a:46:6e:b3:70:65:e6:1f:60:
7d:5a:c4:81:36:3e:ab:ea:88:b5:e7:ee:e1:4c:1b:
54:c6:88:7e:49:a2:d2:77:82:26:5c:f9:8f:87:69:
6e:49:34:a5:3d:d6:2f:76:34:f2:18:27:73:69:ce:
82:b3:ec:c3:31:98:09:31:8d:40:52:52:74:b9:bc:
5e:13:26:ef:1b:8f:63:e2:b5:4d:92:57:19:28:10:
22:69:25:e3:0f:24:b0:cb:b3:75:76:60:63:5e:d4:
49:f7:18:6c:8c:44:63:0e:68:52:a7:17:67:57:36:
39:35:52:df:0b:cc:d6:62:57:ce:9e:c3:e8:2b:17:
29:64:4b:de:30:49:ca:da:90:d3:42:49:7d:a2:02:
c4:da:fb:c8:48:a0:52:c7:41:c0:de:be:7f:5c:72:
f0:8c:ac:19:f6:4f:5c:52:a9:1a:85:40:3d:67:3e:
80:8a:8b:77:16:b9:cf:a4:72:4d:a7:59:af:31:ed:
0b:00:a3:1e:5f:23:e4:1c:3d:d1:69:b0:54:2d:1f:
bc:21:10:41:f7:90:1c:71:af:83:e8:e7:07:03:91:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:93:D8:38:4E:44:00:EC:A9:15:17:D2:B3:3E:BD:5F:B2:8F:61
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cd:ff:fd:61:ee:55:e8:ae:98:9b:aa:c4:2a:7e:6a:16:83:
11:5a:73:8f:30:6b:1e:37:28:90:55:af:7f:af:09:fe:74:24:
34:2d:bc:1b:fa:9e:f9:88:d9:b0:b6:6c:4d:54:82:92:42:0d:
c7:ef:1d:95:54:63:10:20:99:6f:b6:21:e4:fd:a4:80:1e:d7:
4b:fb:6b:d9:9f:7c:16:46:42:f9:ea:32:4c:ed:f3:5c:0c:a6:
45:63:57:84:8e:47:bd:d1:0c:c6:c0:11:d5:55:67:21:48:89:
01:ad:a2:21:f7:2d:45:2d:ee:98:db:7c:09:2b:ab:9b:49:4a:
48:38:a3:af:6f:00:cb:1d:ba:0c:23:41:6e:ee:8d:4e:08:fe:
cf:af:61:0e:72:ba:3f:ca:dd:9c:eb:e0:d6:5c:ae:61:12:6d:
a2:1d:ba:cb:a1:90:65:a8:b8:d7:22:72:61:27:19:05:b2:0d:
f0:b8:f5:8e:81:bc:e8:5d:58:c2:34:e3:f9:98:1e:81:9f:82:
54:0c:ce:15:85:c3:e1:ea:ec:1a:56:3e:96:5d:dc:ce:9c:f9:
44:5d:75:3c:78:34:01:4e:38:9c:6d:10:67:95:69:87:6f:e6:
27:de:52:7c:77:8f:c5:47:da:95:a9:85:89:08:81:42:f6:2f:
ba:ee:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:59 2026 by rpki-client