Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: opQYt8Fb4Ou0huKMN/TyB+a6LlN1bSiRDxuI77QgPa8=
Subject key identifier: 34:17:46:83:65:A9:05:EA:45:E4:A0:CE:0C:BF:EB:78:C9:2F:EC:9C
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01A0C96AC20E37B71A3F0A83588278537642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 08E9
Signing time: Tue 22 Sep 2026 14:00:11 +0000
Manifest this update: Tue 22 Sep 2026 14:00:11 +0000
Manifest next update: Wed 23 Sep 2026 14:00:11 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: jCAGX5IE4VC+rH82FVRLnGcsK00BMomabtK/pmujWqQ=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:c2:0e:37:b7:1a:3f:0a:83:58:82:78:53:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Sep 22 14:00:11 2026 GMT
Not After : Sep 23 14:00:11 2026 GMT
Subject: CN=3417468365a905ea45e4a0ce0cbfeb78c92fec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:d6:27:9e:aa:3e:bb:58:16:a1:a2:71:f7:
2b:b4:3a:ae:7a:6a:ee:2c:94:f0:0d:f6:39:e1:2e:
89:62:d7:8c:e9:a7:cb:ee:e2:ad:55:88:4c:01:9e:
ee:29:09:3f:b4:2a:6b:fd:f2:57:b5:ea:3e:8e:82:
8a:a5:11:be:63:1b:7e:c1:d7:cf:6d:9f:70:92:3f:
95:8c:0f:0d:0f:bd:f4:0c:46:8c:c4:3a:cc:3b:5e:
58:ff:d7:54:0f:1f:bd:2c:0f:a3:85:35:c3:67:68:
5a:7c:0b:45:8d:0f:66:05:8c:e4:e1:94:a1:1d:32:
c8:c2:e0:26:c6:b0:73:10:ee:08:cf:c6:5a:e5:e3:
99:23:5e:e2:f2:2e:2d:08:de:ff:ea:b2:4d:61:e5:
e0:cf:a4:5f:e7:b1:4f:1f:6b:b1:88:5a:77:0e:a1:
09:9d:4e:8b:de:2c:a7:01:01:29:1d:8d:80:14:5d:
80:55:85:23:d0:a1:d7:70:8a:6d:8b:7f:5d:16:f9:
68:a4:3c:ec:fe:6a:eb:e1:1d:3f:ec:a3:d3:55:c5:
2d:b3:d0:96:96:6a:bc:59:54:e2:d2:4a:bf:ba:0c:
48:7e:bd:0d:8d:65:ef:47:b9:8f:c4:c3:22:a9:b7:
9d:ef:19:f1:81:48:c8:33:6d:e3:cf:53:50:52:ea:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:46:83:65:A9:05:EA:45:E4:A0:CE:0C:BF:EB:78:C9:2F:EC:9C
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:65:9a:4c:cb:c0:c7:2d:da:72:50:6d:ff:09:b5:c2:15:
15:39:82:57:83:e2:fd:30:cd:76:c4:bd:b4:fe:7c:f9:82:1d:
cd:89:ff:cf:bd:ae:29:67:96:65:68:a2:8e:bc:db:14:07:b8:
3f:f5:37:19:28:8c:f5:c4:a4:4b:bc:24:e0:0a:a4:ef:8d:95:
df:5a:04:30:6e:20:9c:99:d5:6a:a1:08:6c:81:e8:2e:44:e3:
b7:d7:ca:7b:61:fc:72:fe:03:f2:bd:80:99:e4:1c:99:85:af:
45:1e:38:ca:c0:71:4f:b3:b2:c0:99:66:49:37:ac:45:e1:c4:
e8:a0:8e:0e:2d:c7:fe:09:d1:68:f5:dd:b4:d4:10:14:2d:08:
7b:4d:24:c3:cd:64:30:a1:02:97:31:bd:b1:ff:6e:9b:75:23:
9e:9d:59:06:32:17:24:1a:de:f3:84:b6:34:80:4c:4a:8c:7c:
d5:20:3f:c9:36:6f:52:3c:f2:71:4e:85:ca:7c:ed:86:1c:49:
e6:43:46:c3:d3:9b:51:ca:92:31:4a:27:03:82:f8:38:e6:3a:
5e:68:61:61:39:0f:71:d4:37:2f:12:ca:f6:5d:3d:22:46:30:
e6:8b:99:bd:12:3d:88:af:8c:9a:31:fa:5b:58:9e:02:65:0f:
8a:a4:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:54 2026 by rpki-client