Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: daspA01SL/p9MSDe5K7q12x+gVmzB2u116g2n8/fJJs=
Subject key identifier: F9:CA:05:C4:38:CA:79:B8:E1:BC:16:23:EB:CC:F0:4E:CA:64:88:A5
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019D9A74F9385D5B24D3596809914F1248B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0743
Signing time: Fri 17 Apr 2026 08:00:50 +0000
Manifest this update: Fri 17 Apr 2026 08:00:50 +0000
Manifest next update: Sat 18 Apr 2026 08:00:50 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: vvnKd76EWDhX+Z/YE6kAXTZ6p1c2/VtKd8w6jWvhkX0=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f9:38:5d:5b:24:d3:59:68:09:91:4f:12:48:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Apr 17 08:00:50 2026 GMT
Not After : Apr 18 08:00:50 2026 GMT
Subject: CN=f9ca05c438ca79b8e1bc1623ebccf04eca6488a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:7e:b2:1b:37:a5:6a:34:0c:86:1c:6f:c8:
59:6c:c0:d9:58:7d:99:e9:ac:1e:6f:e1:a4:c5:db:
b8:fa:21:cc:1d:8e:a2:9c:ef:8a:9a:67:0c:16:36:
91:c7:57:83:58:94:cd:6b:3b:4d:6d:0a:c8:ce:78:
c7:ac:88:36:c3:3e:63:ad:3b:84:3c:bf:b9:d8:33:
fa:64:f1:86:ba:a9:34:9b:05:f3:1c:02:26:fe:59:
87:a0:ee:e1:84:3d:1f:b7:cd:86:4c:95:64:4b:04:
2e:88:a6:c0:8c:01:b0:15:ca:07:a7:c0:7b:f1:9a:
3a:7b:09:6f:67:22:dc:54:3f:e5:56:47:52:ff:40:
5a:ab:d1:d9:74:8b:4e:ef:46:80:60:21:60:c0:fa:
48:1f:95:7e:72:81:f9:16:58:0c:a4:15:2e:a4:a5:
9c:e0:74:43:3d:09:2a:17:9c:0e:35:7e:b7:0f:c2:
72:27:b1:28:a4:3e:f8:03:f3:12:da:99:7e:c0:c9:
bc:a3:d1:e9:f4:94:e9:fa:d5:98:34:05:2c:13:f7:
81:b8:ec:02:d0:b9:e3:bf:b9:3b:2d:97:6c:6f:b3:
f3:37:21:45:68:1c:6d:55:40:a3:b1:f4:09:37:34:
6d:c6:44:db:06:72:75:0c:08:97:b4:bd:cf:56:e5:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:05:C4:38:CA:79:B8:E1:BC:16:23:EB:CC:F0:4E:CA:64:88:A5
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:df:8a:fe:b6:90:21:11:b8:e4:22:d9:c1:b4:00:82:16:5a:
22:6d:3a:73:3b:ee:fe:ac:05:87:30:c5:88:5e:69:0d:87:ee:
75:44:b3:1d:6b:24:40:f1:1b:17:68:92:67:4d:a1:5e:6e:0d:
45:c3:7f:0b:58:ee:7d:9d:2b:d5:85:4c:57:f1:05:9f:25:1e:
02:9f:3a:41:d4:99:01:c5:17:ae:c7:3a:45:25:d2:ee:ee:01:
67:aa:7e:4b:1d:dc:c3:7f:5e:14:8f:2b:21:10:49:5a:2e:90:
01:66:77:48:47:7f:9b:f2:93:99:a0:38:59:fe:b6:df:02:d1:
8b:32:86:57:82:d1:94:92:be:b5:03:1f:c5:12:55:95:20:43:
66:21:d5:3a:5b:4b:78:7b:e2:2d:2d:4a:1a:d5:df:55:03:88:
c4:cc:39:78:84:a2:ab:59:36:81:fc:62:00:14:8e:d8:76:ca:
97:03:69:f0:f1:78:26:b0:a7:66:d3:6b:f9:bb:66:b1:54:7e:
ff:1b:9b:20:47:25:1e:8e:fa:e6:27:e3:d6:84:e3:25:af:14:
8f:20:8f:9e:46:7f:0a:92:b4:6c:6c:42:6c:5e:49:de:00:21:
d8:1d:06:3b:09:8e:97:e3:ea:d6:ca:e9:1e:e1:0e:60:ca:ac:
ea:b6:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:03 2026 by rpki-client