Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: vnpt/lQOohlgj6TLJRwMhknNqY4HYHy9KhjRgeRbflY=
Subject key identifier: 8F:FF:5E:72:FA:88:9B:C4:17:4C:8E:5E:FA:4C:F8:EA:70:1F:39:EE
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01A0C255FB4869412F1861830E3E1FB7ADB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 05:00:09 +0000
Manifest this update: Mon 21 Sep 2026 05:00:09 +0000
Manifest next update: Tue 22 Sep 2026 05:00:09 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: rPuXurKBrfX4hnQiM/M1bApXhzQB8R6IMw9s+rSTXyQ=)
4: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
5: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:55:fb:48:69:41:2f:18:61:83:0e:3e:1f:b7:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Sep 21 05:00:09 2026 GMT
Not After : Sep 22 05:00:09 2026 GMT
Subject: CN=8fff5e72fa889bc4174c8e5efa4cf8ea701f39ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:8e:1d:16:e7:71:89:2e:98:39:68:ae:92:
a2:5d:3b:44:c7:aa:fa:4c:10:91:33:cc:81:56:c0:
4d:19:c2:84:99:8d:90:af:c7:d6:a6:fa:a5:87:a1:
60:ba:f2:99:87:23:e3:b9:e8:90:97:1b:64:43:39:
e7:7c:6e:1f:18:b5:d5:26:f1:cd:a9:a4:0f:6e:34:
c3:c8:6b:fe:ca:f8:63:96:3b:dd:19:f4:bc:9d:de:
e7:ef:46:53:53:e4:f8:81:38:5c:b2:21:d5:8b:87:
d1:2d:b6:9f:79:03:63:cf:b1:bc:4d:44:d3:36:c5:
51:e1:ff:be:fc:85:64:b8:ed:e5:21:ba:5b:13:c6:
6d:3b:13:1a:a1:dc:92:71:a6:11:9f:39:ae:48:c5:
dd:52:27:6a:da:ca:2d:b8:1e:a5:da:e3:87:6c:9b:
f6:95:8e:12:2e:46:3f:d3:82:00:2c:b0:77:aa:48:
80:3f:7d:f6:da:61:97:60:03:26:14:2f:43:6d:da:
7a:3c:79:b2:f8:b2:c6:fc:c0:79:6a:fe:9e:80:2f:
ee:d1:bd:0c:21:91:67:3c:5b:43:de:16:b7:3d:08:
58:a4:78:e7:f6:f6:2b:61:e0:25:84:f2:99:aa:a7:
db:3d:9f:6f:d7:f4:90:ff:81:ad:d7:be:5e:1d:86:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:5E:72:FA:88:9B:C4:17:4C:8E:5E:FA:4C:F8:EA:70:1F:39:EE
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:af:e9:2f:c9:78:df:45:e0:d3:81:35:3a:bd:9c:7f:1b:
d5:cf:ff:cb:18:95:99:5d:9a:de:a4:59:d7:e9:df:01:0c:e5:
60:c2:8f:5a:2e:ef:c9:87:e4:31:5d:c6:ca:38:2f:e1:98:00:
22:2f:10:7f:67:da:df:dc:8f:93:5b:9b:11:e0:e3:e7:39:00:
56:54:d9:84:95:07:10:86:90:b8:ec:6c:b9:6f:36:3c:40:c4:
0b:bf:11:c6:bc:cd:79:44:43:3b:03:42:b6:70:58:02:58:f3:
1f:86:44:c4:61:42:a9:e4:a5:f5:18:f1:cc:02:d2:d3:ec:1b:
9f:ed:dd:91:ea:8f:b8:fe:41:3d:e2:66:06:ec:9c:3f:a1:60:
3b:9e:10:f0:d4:4c:54:39:db:f4:5a:c1:5e:41:a2:3b:d6:77:
17:d9:2d:cd:8d:19:d4:38:34:68:bd:a6:85:ab:d5:92:6d:5e:
2f:7f:e6:17:58:c1:db:de:55:ef:4c:52:f3:37:f7:c2:0b:4a:
69:81:59:e0:ac:c0:dd:1f:c2:5d:06:91:9f:19:60:3c:67:7c:
19:50:ab:b4:db:02:84:ea:ff:32:9e:db:7f:4f:58:77:78:c7:
ab:91:a6:2b:b6:73:2c:8c:99:27:d3:ea:f7:69:6a:33:86:17:
af:fb:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:03 2026 by rpki-client