Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: mo7DjgGM0GMu76zdOXcQxU02qH0sCTFvTnqZNBoT3e8=
Subject key identifier: 6A:F2:12:F3:03:AE:03:71:03:74:8D:80:48:A1:6C:81:AE:9D:DF:B5
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 01A0C3D67DEEE862C0F754F0A2248F42C358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 12:00:09 +0000
Manifest this update: Mon 21 Sep 2026 12:00:09 +0000
Manifest next update: Tue 22 Sep 2026 12:00:09 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: URtXdRrJ05J6fplA+Bv41Yswh7dy+VgVEvlumAOkF2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:7d:ee:e8:62:c0:f7:54:f0:a2:24:8f:42:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Sep 21 12:00:09 2026 GMT
Not After : Sep 22 12:00:09 2026 GMT
Subject: CN=6af212f303ae037103748d8048a16c81ae9ddfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:a7:8d:be:16:b3:be:32:ad:72:fc:3d:4c:
c1:a9:70:69:24:04:66:9f:f4:f7:2d:bc:1f:61:2a:
bb:be:87:92:04:5f:68:9b:a3:55:76:bd:fb:c1:78:
bd:c6:fd:42:2d:fe:15:04:27:15:7d:0b:5c:46:0f:
e9:4c:33:a1:61:71:fd:86:85:ab:24:db:36:c9:eb:
b2:05:e0:fa:cf:b3:fc:2d:a3:03:40:aa:13:26:c4:
af:66:fd:83:d7:6c:49:d3:36:fe:b4:55:f5:2a:88:
dd:c2:1e:61:7f:e9:b5:e2:e1:9e:50:df:00:01:31:
4f:76:cb:59:a3:5a:85:bb:9e:41:11:60:0e:9a:8b:
cf:16:20:6d:b9:c1:c5:e0:18:de:3b:1f:f9:ae:94:
c3:84:1d:38:8b:0c:78:b6:e2:42:3d:e6:cc:10:bf:
ce:84:02:95:04:ce:87:80:bb:a2:39:36:12:cb:8e:
88:1d:b9:5f:d1:53:7e:ac:48:98:cf:fe:13:a5:70:
99:ce:fc:80:c1:8b:37:cf:97:62:08:6b:bd:7e:61:
a0:18:9c:07:97:aa:b0:89:60:ac:4b:74:8f:16:52:
71:09:1a:42:2d:5a:c9:78:ac:2e:15:99:a0:39:db:
2a:36:53:58:33:47:23:41:a4:8d:5d:90:db:96:69:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:12:F3:03:AE:03:71:03:74:8D:80:48:A1:6C:81:AE:9D:DF:B5
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:07:e3:20:74:e4:05:81:14:39:cf:ec:a7:2e:2d:c7:88:
c5:40:98:48:91:2e:21:45:c8:e9:21:0e:94:29:13:9e:c7:27:
58:c5:3e:45:26:44:e8:23:2b:a3:75:46:69:f7:d6:4a:6f:f3:
fb:91:16:a1:09:b2:5b:44:e6:0b:48:1d:3c:bb:14:79:3f:ae:
91:af:fa:f8:66:0f:7c:9e:c3:b7:02:f0:54:91:50:d2:56:d1:
07:b4:cf:b7:1c:e7:23:02:7e:9e:4d:de:f1:bd:b0:f3:83:2f:
3d:6f:2d:2c:71:a2:68:21:b4:0d:c1:70:e1:e6:d0:6c:c4:ec:
85:0c:77:f9:68:b0:e0:cf:e2:d5:f2:d5:2f:f2:fa:6b:1e:75:
c6:19:e6:72:81:8d:52:41:86:a7:88:14:3c:6e:be:16:a6:94:
df:38:92:68:b3:5b:6f:18:98:53:6b:b0:66:25:87:a6:ca:ae:
e4:e0:08:33:4f:9c:93:90:b6:43:37:9f:6e:18:35:c9:eb:eb:
13:78:04:a9:0f:26:2c:8f:68:f8:31:83:08:d2:81:c7:f4:b5:
a2:98:12:3b:fb:ef:6b:54:14:e5:19:ab:20:ef:e0:d1:28:65:
fe:89:d3:bb:d0:d3:20:6a:f1:f3:9d:6d:8b:2f:9f:36:e0:21:
59:0b:c4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1n3u6GLA91TwoiSPQsNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2
ZTU0NGUwHhcNMjYwOTIxMTIwMDA5WhcNMjYwOTIyMTIwMDA5WjAzMTEwLwYDVQQD
Eyg2YWYyMTJmMzAzYWUwMzcxMDM3NDhkODA0OGExNmM4MWFlOWRkZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k6njb4Ws74yrXL8PUzBqXBpJARm
n/T3LbwfYSq7voeSBF9om6NVdr37wXi9xv1CLf4VBCcVfQtcRg/pTDOhYXH9hoWr
JNs2yeuyBeD6z7P8LaMDQKoTJsSvZv2D12xJ0zb+tFX1Kojdwh5hf+m14uGeUN8A
ATFPdstZo1qFu55BEWAOmovPFiBtucHF4BjeOx/5rpTDhB04iwx4tuJCPebMEL/O
hAKVBM6HgLuiOTYSy46IHblf0VN+rEiYz/4TpXCZzvyAwYs3z5diCGu9fmGgGJwH
l6qwiWCsS3SPFlJxCRpCLVrJeKwuFZmgOdsqNlNYM0cjQaSNXZDblmnZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGryEvMDrgNxA3SNgEihbIGund+1MB8GA1UdIwQY
MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt
MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj
LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRIH4yB0
5AWBFDnP7KcuLceIxUCYSJEuIUXI6SEOlCkTnscnWMU+RSZE6CMro3VGaffWSm/z
+5EWoQmyW0TmC0gdPLsUeT+uka/6+GYPfJ7DtwLwVJFQ0lbRB7TPtxznIwJ+nk3e
8b2w84MvPW8tLHGiaCG0DcFw4ebQbMTshQx3+Wiw4M/i1fLVL/L6ax51xhnmcoGN
UkGGp4gUPG6+FqaU3ziSaLNbbxiYU2uwZiWHpsqu5OAIM0+ck5C2Qzefbhg1yevr
E3gEqQ8mLI9o+DGDCNKBx/S1opgSO/vva1QU5RmrIO/g0Shl/onTu9DTIGrx851t
iy+fNuAhWQvEVw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:00 2026 by rpki-client