Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: XZ9rnYf/Gdxp5vWXCnaVxPjIJfs71e6zqlbQFlD4vxE=
Subject key identifier: DA:41:29:7C:C9:AE:86:77:E8:BA:AA:5D:59:3F:31:CA:AF:78:22:7C
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019DA41C94B2B01529207F0E5F5EDA3DA53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 18CF
Signing time: Sun 19 Apr 2026 05:00:29 +0000
Manifest this update: Sun 19 Apr 2026 05:00:29 +0000
Manifest next update: Mon 20 Apr 2026 05:00:29 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 5mHFGPzX1dmg3pgank09UhOhn6ZlkOwXB8LGgUJLTYg=)
3: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
4: F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa (hash: JxKTOtTPWfWfAAoHri0onXnZQVwputgAWxySJSE326Q=)
5: ZzhGs3xeuqjtegogr3JbD8EGy8A.roa (hash: QzKiuA6J4PH51Dtd4/mrQUF28CyQcdY+pEYCB8jZjMg=)
6: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:94:b2:b0:15:29:20:7f:0e:5f:5e:da:3d:a5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 19 05:00:29 2026 GMT
Not After : Apr 20 05:00:29 2026 GMT
Subject: CN=da41297cc9ae8677e8baaa5d593f31caaf78227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:2e:22:fb:ec:1a:d2:f1:c8:85:16:b3:db:
fa:12:da:ac:ac:18:b6:53:22:52:2a:20:37:ff:8e:
24:f0:c0:c4:74:fc:94:c2:c9:e3:fa:5e:77:06:01:
48:42:89:a0:fd:61:9c:25:db:7f:9e:ea:5e:d8:4e:
de:c3:2f:59:51:cf:4a:5d:b5:1d:2d:f0:f8:8a:11:
e0:09:45:f2:b5:fe:58:6d:4c:e7:a6:a4:f6:9b:86:
fa:0b:0e:72:9e:da:82:aa:d4:4a:33:06:df:2e:53:
cd:04:49:47:52:4d:5e:67:19:59:34:9b:52:c6:9e:
4b:07:b1:b5:15:af:36:b3:2c:12:96:1e:2d:21:c6:
5e:1f:9c:64:67:27:f1:d3:31:96:2a:86:ff:e1:ac:
46:db:1d:e3:5d:99:87:fd:f9:0a:47:41:45:53:29:
04:37:b7:73:54:9a:20:ac:73:ab:34:43:2c:76:61:
ae:5a:67:92:96:11:f6:70:f4:ee:61:93:dc:53:50:
11:36:a5:17:c2:d8:7e:c0:9e:e7:f2:06:5c:83:aa:
38:20:36:78:79:11:b9:b9:47:5f:e8:83:20:e0:30:
bc:e5:d3:71:1f:2a:36:21:b2:ed:c8:52:5e:ea:55:
c6:67:19:96:d7:96:c8:b0:76:e3:7c:ee:fb:a9:68:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:29:7C:C9:AE:86:77:E8:BA:AA:5D:59:3F:31:CA:AF:78:22:7C
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:9f:f1:b8:44:e2:5d:6f:2d:28:c6:2d:20:e0:2a:7f:e9:
56:6a:33:a8:75:2c:07:31:26:3a:2a:de:8c:62:5b:0e:57:1f:
94:c0:ef:8a:7a:a7:19:e8:52:8a:59:55:48:cd:dd:f6:65:7f:
f1:83:64:a2:c2:9e:ac:dd:14:c2:74:5c:42:dd:48:f5:51:ab:
cf:fa:49:7b:bc:4a:26:73:f6:e7:03:cd:0c:c5:8e:c2:42:ad:
7a:01:30:7b:15:00:48:3e:5a:89:ed:1c:9d:17:a4:5f:ab:ef:
b5:71:78:6d:d4:b7:be:f8:5f:b9:2e:c1:25:6b:b3:55:b0:00:
6c:f7:a2:08:e8:ff:96:0e:4c:77:37:0b:b2:54:31:66:1e:f2:
7e:d6:cb:0a:3c:59:ae:7c:ba:41:56:5c:ea:32:18:e3:5b:75:
ac:37:91:ec:ee:19:47:f8:40:8e:5d:ec:e4:00:5f:a1:7e:83:
c5:a8:8f:11:ff:32:c1:69:a5:62:37:2f:7e:c7:82:01:b8:07:
68:f4:8b:f5:f5:c4:0b:05:bd:68:d5:24:0e:ac:ba:15:f2:0f:
32:2a:9a:01:9c:ce:99:0a:12:09:cf:32:66:18:18:44:b6:86:
c8:03:26:70:92:94:28:97:42:3a:d0:f0:e0:bf:43:e4:f2:eb:
a7:b4:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:26 2026 by rpki-client