Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: LqSpRfajaxz947WVIgM9MHDcQ15BhLzWTlqULhHhQi4=
Subject key identifier: D5:F0:53:AF:2D:3C:8A:AC:41:06:21:3D:2D:2F:A8:80:4F:DA:DA:DD
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019FAB9AC58B4D9787FD046AE31BC5926195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0855
Signing time: Wed 29 Jul 2026 02:01:14 +0000
Manifest this update: Wed 29 Jul 2026 02:01:14 +0000
Manifest next update: Thu 30 Jul 2026 02:01:14 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: bBrhUEFDvQ18i8+l24bI8CkTWLuU446TKeoqO/VUK1E=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c5:8b:4d:97:87:fd:04:6a:e3:1b:c5:92:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jul 29 02:01:14 2026 GMT
Not After : Jul 30 02:01:14 2026 GMT
Subject: CN=d5f053af2d3c8aac4106213d2d2fa8804fdadadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:b1:33:e3:05:51:f3:23:97:71:46:3f:ac:
1c:d2:91:3d:16:ab:e7:ef:ce:26:4f:25:c7:f5:25:
4c:07:6b:2a:e4:85:9d:13:87:93:d7:a8:d0:6f:09:
19:e3:56:74:f9:ff:f6:50:54:5d:47:b3:26:2d:72:
52:24:73:e7:65:43:8d:55:be:e5:c5:5a:ce:cc:06:
81:34:3d:b1:e3:14:05:76:b7:ee:17:b1:3f:13:63:
05:1a:a0:ca:07:7d:d9:ef:c1:e1:29:d9:49:31:8c:
16:6c:70:59:d1:54:25:ed:87:5e:5d:2e:61:1f:86:
aa:0b:7e:c3:53:64:17:d0:1e:cb:2c:6f:13:24:20:
62:26:05:b6:27:61:aa:24:d1:54:b7:a7:8a:85:07:
77:39:2c:2e:ac:9c:7b:83:4b:5a:ce:97:f6:70:7a:
03:ef:ff:5b:12:e4:39:48:0d:74:96:bc:18:bc:8f:
ec:1c:7e:0c:9d:7e:61:82:61:ca:ab:16:6e:40:c5:
77:1d:10:66:5c:a4:b9:3d:59:f3:ed:36:aa:d3:46:
ec:79:42:6f:10:43:42:31:62:b1:df:ee:49:8b:c8:
08:e6:69:1b:6d:9c:08:2a:d4:11:8d:f6:b9:2a:00:
46:03:d1:46:56:e3:d0:73:b2:ec:3e:f1:10:32:e8:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:53:AF:2D:3C:8A:AC:41:06:21:3D:2D:2F:A8:80:4F:DA:DA:DD
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:ae:1d:06:48:42:8b:d3:c4:1c:35:33:52:46:73:f4:c7:
28:c0:f4:c8:48:dc:d8:f7:0e:b7:6b:85:e7:b9:91:0a:3c:af:
5b:ac:47:8b:5b:ce:d7:67:cd:2a:b4:0e:54:4c:81:5d:55:8d:
25:e4:51:70:65:9d:91:78:c9:60:17:03:b2:a9:75:0e:cd:88:
63:10:ca:17:75:ab:0d:41:ce:bb:f7:a1:72:2c:fc:b2:88:61:
33:9e:c7:f8:7b:3f:a8:96:a2:6d:b4:0c:b1:e3:5d:a1:28:91:
ab:76:f0:41:42:8a:df:ff:96:40:40:9c:ae:7e:23:81:03:fd:
54:09:28:ee:91:62:29:0e:99:87:bd:db:c8:c6:50:db:50:7e:
55:11:15:6a:f3:33:66:e9:30:5b:e3:f7:e0:41:8a:06:92:9e:
e7:08:6f:71:7d:47:19:ed:3d:98:fe:b7:c0:fe:3c:86:b3:55:
a3:42:b1:b8:19:95:4c:4f:62:13:4b:5b:e3:f1:8f:92:0d:70:
be:ee:cc:44:6d:6d:53:69:c9:27:53:e1:96:a8:bb:9a:fc:37:
11:b9:20:67:ad:65:ef:9e:ee:36:94:02:e4:b0:f5:ba:f6:31:
9d:b1:ea:fa:3e:f8:a0:1c:01:27:9f:94:1a:f5:22:17:28:76:
28:9b:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:59:07 2026 by rpki-client