Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: fWeyiZN+Ialvu9exHvWqi7KUX7qtcmq5Om8RWGIVZ70=
Subject key identifier: 1B:8E:95:3F:72:29:DD:F7:16:AC:CC:01:02:AA:52:06:B6:77:3E:4B
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019FA9E28DFCF86B9477D82B9D47887331F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:24 +0000
Manifest this update: Tue 28 Jul 2026 18:00:24 +0000
Manifest next update: Wed 29 Jul 2026 18:00:24 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: hSpvLVEIZWkASh+4kz0VoheJPVE8/qnYHQvwYbqLfZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:8d:fc:f8:6b:94:77:d8:2b:9d:47:88:73:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Jul 28 18:00:24 2026 GMT
Not After : Jul 29 18:00:24 2026 GMT
Subject: CN=1b8e953f7229ddf716accc0102aa5206b6773e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:09:9a:e3:cd:a9:37:24:99:28:5b:77:98:
c6:da:62:0f:6e:17:22:e2:32:8f:33:ca:56:8a:02:
5b:dc:63:c7:9c:c4:58:dc:cb:7f:dc:76:c9:a6:fa:
fb:96:53:17:2c:be:6a:bc:66:fe:58:dd:d5:ff:06:
03:65:67:28:5a:65:b2:f9:e7:57:74:08:46:f5:e4:
7c:c7:2b:00:99:76:b8:fb:cf:5c:af:ad:3b:d9:39:
2f:db:c7:71:13:08:28:34:9d:e0:c6:c6:b8:da:f5:
55:a1:72:8d:a5:eb:82:e5:dd:5c:21:f0:00:dc:75:
9a:7a:0e:ee:69:c6:b3:9a:a9:7d:48:9b:99:f7:3d:
a2:e3:2b:b2:ee:60:1e:2f:62:63:4c:82:2f:c4:70:
fd:ac:67:f9:bf:e6:b9:20:3a:20:b8:49:0d:e6:cf:
79:d3:10:ef:1c:ee:40:a4:4b:a5:70:05:70:9a:48:
8a:05:1e:28:74:89:45:da:80:e9:87:ae:28:c8:44:
43:c7:08:d4:df:3f:23:04:87:1e:f7:69:bc:fc:ec:
c9:3d:55:f9:13:b1:95:2d:0d:33:07:ab:1d:07:7a:
6b:8e:67:a1:3b:bc:3d:2a:f7:66:a6:15:30:7f:f7:
e9:f4:db:ac:d9:cb:24:a4:1b:cd:ff:3d:97:cf:94:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:95:3F:72:29:DD:F7:16:AC:CC:01:02:AA:52:06:B6:77:3E:4B
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:bf:c8:5c:c0:65:c9:4e:fc:f6:de:b4:19:21:ed:f0:01:
1b:00:f0:d3:fe:ce:16:20:37:b8:c8:df:13:16:cf:3e:2e:b3:
25:34:56:04:f2:87:6f:8f:74:3c:9f:36:46:c7:0d:23:ea:5e:
11:fb:e1:32:c7:f9:6a:b2:71:59:38:ac:f1:2e:8e:4e:d9:c3:
ad:41:f2:f5:31:60:01:f6:c4:30:e3:94:dc:37:07:de:d6:cf:
cf:b5:55:19:e3:b3:90:8c:a5:bd:9c:1c:3e:1b:8b:3a:db:34:
df:e5:ab:9e:11:28:da:50:21:00:1a:4b:be:5c:bf:12:b1:0a:
48:5d:c2:13:0f:2b:87:31:22:38:28:17:43:db:03:b6:c4:f6:
e1:68:ea:c5:e9:02:66:02:19:9f:09:22:25:da:6f:2c:4e:c8:
c2:e9:6e:7b:ce:54:8e:56:90:2b:e2:f3:83:60:ad:fd:92:16:
f0:4d:ff:d9:46:b7:f2:b6:90:f3:bd:6f:8d:b2:d2:65:20:08:
81:d2:f2:b6:1c:55:3b:d7:c9:39:c3:ab:d7:4d:12:64:a2:6c:
5d:ca:0b:fa:e2:02:56:f3:42:08:fa:c0:13:00:b2:a2:bc:9b:
94:48:76:cd:73:91:ba:98:b6:e6:dd:1a:de:e0:d7:89:7d:4b:
5e:fa:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:29 2026 by rpki-client