Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: xNQAnRpWoPqDPaQ5CwYfYTGAHRRw4lRu7bl5F2RtnWE=
Subject key identifier: B6:CD:C3:A9:34:B3:56:CA:56:31:AA:E6:81:7D:F3:57:C4:77:33:FF
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019CAB34704B48604A625AE1D8884A6D41DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: uiPIovm5sjcSQNZteV0KhsiPrQfRKnv7siz9lYNFEtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:70:4b:48:60:4a:62:5a:e1:d8:88:4a:6d:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=b6cdc3a934b356ca5631aae6817df357c47733ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:12:d0:b9:e8:d9:b5:e2:d5:f4:6e:5b:13:
41:f7:db:c1:43:dd:92:fe:04:ce:18:de:9e:0e:9f:
c8:82:69:e4:08:f2:6f:b0:2c:6f:c3:7b:ca:24:74:
fc:a3:10:93:7f:ff:67:d3:16:cb:e5:65:96:e9:c5:
18:04:f5:10:b0:53:8b:cb:86:09:7f:a1:fe:58:a0:
38:34:3f:3e:fe:fc:12:eb:97:7b:2b:e8:3e:d0:f4:
ab:6a:c9:5f:ad:3d:20:d0:fc:a8:84:26:e5:21:e3:
30:49:9d:d4:53:42:a1:52:09:fb:84:6a:86:f0:6a:
02:04:de:b8:0f:80:1f:54:31:ec:a8:5c:24:0b:87:
28:eb:d4:ee:18:8e:2d:1c:e1:22:5e:9d:90:ff:9c:
83:78:79:4d:15:0f:6e:42:fe:99:51:1a:ca:1d:2e:
4b:27:2f:b6:e3:96:e4:a7:a6:17:02:a2:9e:90:a2:
51:43:23:88:f2:26:c5:59:2c:5c:75:19:2b:10:9d:
93:4d:30:59:3b:cb:c0:6f:20:95:fb:c3:ae:2d:9c:
b3:ff:60:be:fa:ab:94:e7:68:fb:be:ae:2e:4c:d3:
b7:fc:f6:ef:e9:fc:84:9a:37:b0:c6:7b:07:26:f9:
0a:27:63:b8:93:59:c8:d8:23:6f:a6:9e:7f:9e:a6:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:C3:A9:34:B3:56:CA:56:31:AA:E6:81:7D:F3:57:C4:77:33:FF
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:ec:b7:ea:28:ae:73:c3:43:2d:25:a7:c8:8d:d3:26:a6:
07:36:cd:99:f6:81:83:4c:10:7a:71:6f:19:b4:e5:3c:57:68:
e0:1d:07:45:fe:f4:6b:c9:13:2c:06:42:c2:4e:ea:ca:ad:26:
1c:ab:45:ad:c8:d8:9e:1b:8e:a9:93:59:b5:df:b7:5a:d6:57:
e1:22:b2:16:91:99:7f:7f:9c:3a:21:5f:a9:b3:17:cd:02:78:
3b:8f:a8:85:24:68:3b:01:79:9b:58:57:7b:c8:d7:55:d3:81:
de:d5:12:97:31:65:da:48:6a:55:69:b4:1f:4f:14:2d:8f:56:
e7:c0:c7:0a:de:d0:40:56:99:f7:53:a1:e5:6a:6a:0f:d1:aa:
30:8a:2e:40:e8:f7:96:f4:ee:0f:f8:8b:fb:61:46:04:0e:04:
11:90:ef:8b:3e:91:92:17:a8:48:e5:a7:67:f3:79:73:79:6a:
fc:50:01:f1:f8:63:b5:1e:85:b0:1a:65:69:9b:1d:76:ca:82:
81:bb:8c:3e:8e:60:b4:01:43:2d:b6:3a:8d:4c:3a:5b:32:40:
7c:3f:9a:25:06:4d:90:39:c9:99:e0:aa:a3:1b:ec:a3:6d:7c:
4a:64:f3:cf:7d:00:e2:fc:eb:4c:27:58:83:c6:35:a7:6b:01:
4c:7e:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:06 2026 by rpki-client