Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: pOfQd87Ct1W6o1AHvy0NJFtC7+pWR5qLoHe8u1Ivbig=
Subject key identifier: CE:0E:FF:0C:CA:96:73:24:DE:59:22:FB:91:CE:DA:FE:A8:B0:D7:BD
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019EBFFF7C7CB8DB383EEC40026DDBCD76E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 07DB
Signing time: Sat 13 Jun 2026 08:00:52 +0000
Manifest this update: Sat 13 Jun 2026 08:00:52 +0000
Manifest next update: Sun 14 Jun 2026 08:00:52 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: cX+MJjfzHFKJHIWyM3XIXkXMkDkB+NxSB0mhXc7hXOE=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:7c:7c:b8:db:38:3e:ec:40:02:6d:db:cd:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jun 13 08:00:52 2026 GMT
Not After : Jun 14 08:00:52 2026 GMT
Subject: CN=ce0eff0cca967324de5922fb91cedafea8b0d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:09:d1:5a:3a:3f:95:8c:1b:d7:7d:68:4b:
14:39:f6:78:d5:cd:f9:60:6b:d8:d3:4d:a5:38:71:
55:af:24:82:4c:d2:92:10:63:f6:be:2a:58:06:75:
56:5e:d6:f8:f7:a0:25:69:8f:67:13:eb:44:67:51:
0f:15:1d:0a:98:2f:81:38:86:e8:7c:31:a2:cd:29:
d1:07:b9:d2:4c:d5:c3:cb:2d:86:da:16:8c:fe:ac:
9e:64:a0:d2:18:a4:4f:20:53:35:7b:80:43:36:20:
89:0e:18:56:fa:b1:39:a4:cf:4a:e0:a8:8e:c7:cc:
47:69:ca:fe:36:24:ab:1d:97:55:b7:f4:0c:09:5d:
2f:72:32:6b:bd:fc:b9:66:34:af:76:ae:67:b7:4a:
fd:5a:4b:4d:ec:9c:cc:da:5a:b0:ec:ae:aa:5e:08:
74:24:03:94:10:a3:9c:6b:33:f9:e0:2a:a7:0b:df:
98:1f:16:c7:87:0a:d3:53:70:4f:05:19:eb:e1:3c:
6d:3f:a7:92:e0:ce:d8:f0:ee:82:23:1f:7a:19:e1:
5d:de:29:be:12:bc:d7:20:03:79:ba:6e:f9:40:56:
91:57:6c:6f:5f:6a:86:0b:22:3a:27:27:6c:02:77:
dc:40:30:41:e7:3d:d4:48:f7:47:fd:6e:2e:f4:3c:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:FF:0C:CA:96:73:24:DE:59:22:FB:91:CE:DA:FE:A8:B0:D7:BD
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:14:98:02:d3:65:75:4f:48:5f:bc:44:a3:f7:3e:84:49:d8:
d3:a1:16:51:42:11:cc:bb:70:3f:eb:38:af:42:dd:4d:95:bb:
b5:40:e9:52:5d:fa:be:de:ee:44:53:ac:3b:08:58:b1:26:1b:
42:f7:94:2d:0b:49:f7:02:69:49:3a:8f:02:b8:d2:e7:60:00:
1e:00:88:46:da:9d:8d:09:d6:b8:59:cc:d4:9b:d9:a0:44:6d:
43:57:d0:db:d7:8b:cb:46:04:b9:ff:f8:b1:89:fd:88:14:5c:
27:be:13:d8:9e:88:ba:06:3a:8a:51:3c:1d:a7:48:71:b7:c6:
14:e1:25:16:f2:ff:65:dc:5c:f1:be:5f:0d:81:9e:cb:cb:26:
aa:3d:4e:2e:c6:4a:08:e5:11:1d:fc:93:d4:63:b1:11:d5:3c:
ad:12:78:2c:08:c2:bb:af:22:14:5d:6e:70:ee:13:ef:3b:48:
80:2f:d2:1a:5d:90:62:0e:2c:bb:c0:6f:ba:d3:b8:aa:3b:e8:
19:26:a7:65:00:f7:a0:e9:e6:ca:8e:e6:29:eb:2d:f3:44:c2:
a5:9d:bb:58:55:32:b3:9f:1c:b6:f9:2d:32:8c:1a:c7:d7:a0:
d3:71:be:da:7f:8e:18:7b:28:7c:c1:47:fb:33:77:59:b5:85:
75:36:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:04 2026 by rpki-client