Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: Dfr421vqohds0q7IE5kw1+Rf/gTL4HRXvCNi5h50VHQ=
Subject key identifier: D2:33:51:D5:66:86:09:2B:C5:AD:57:AC:31:C1:E0:89:9C:8A:C5:C5
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 019D999970C33264826D58FC9397C5FEB166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:02 +0000
Manifest this update: Fri 17 Apr 2026 04:01:02 +0000
Manifest next update: Sat 18 Apr 2026 04:01:02 +0000
Files and hashes: 1: EdPdMzgnPs41cXxU2dcI-fVK9_o.roa (hash: VU+rMMG4Ct00NxP8HYLLqEFuKnv7Lx/dqWlvPJ9BsVI=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: QkgUdy0ioSzde+eY4JGXpvg7NM3EteUiNUMIXwOm364=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:70:c3:32:64:82:6d:58:fc:93:97:c5:fe:b1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Apr 17 04:01:02 2026 GMT
Not After : Apr 18 04:01:02 2026 GMT
Subject: CN=d23351d56686092bc5ad57ac31c1e0899c8ac5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:3c:cf:75:0a:ee:56:d9:5c:f0:56:e6:c8:
bb:5b:c9:17:74:a0:55:ef:d3:29:c2:45:a1:c6:23:
39:50:92:83:b6:e5:6e:e7:1c:15:83:72:5f:94:a9:
64:e4:48:51:e4:b9:1a:86:96:ba:87:ee:8c:dd:dd:
5f:2d:8f:c1:d5:dd:11:32:1a:83:3d:bd:66:81:77:
db:f2:9a:0c:8e:93:27:db:0b:c1:cb:d3:35:02:e3:
47:23:5c:4b:00:fc:47:52:65:91:5c:94:55:b8:17:
aa:61:b1:1b:70:6c:7c:df:ec:76:50:94:35:bc:5a:
34:d3:ca:bd:f4:ea:05:53:e1:04:f6:93:7f:04:88:
37:87:54:22:6c:2c:08:85:95:84:b3:40:9d:75:a2:
52:f2:4f:eb:8f:7a:98:d2:88:94:58:c5:db:dd:3c:
c7:7b:e9:59:ab:52:de:5c:7c:ec:98:68:8c:76:25:
fb:ba:c5:59:af:ad:94:1f:e3:76:52:72:da:0e:9b:
a0:ba:0a:a3:72:d6:a0:f3:77:45:7a:a5:ee:6c:c3:
9e:9d:63:4f:81:8b:87:7c:04:54:de:ff:71:be:1a:
1b:04:15:8d:45:19:09:c8:6f:7f:56:96:34:3d:94:
e7:08:6b:3d:2f:ae:23:5f:33:22:13:8e:4c:ca:7b:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:51:D5:66:86:09:2B:C5:AD:57:AC:31:C1:E0:89:9C:8A:C5:C5
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:41:23:34:59:be:36:08:53:83:f5:17:0d:10:7a:cf:bb:
b6:a5:8f:78:9e:36:a4:98:9b:b4:5a:f4:27:a8:2e:07:a2:8e:
d8:1a:8c:b6:54:31:71:20:c2:eb:ee:6f:c5:71:4a:e7:1e:b5:
d1:52:c3:c2:d2:84:95:f0:e2:f6:71:45:e9:e0:9b:05:cc:3e:
87:52:b9:b5:c0:94:cb:5a:c3:08:ce:a9:e0:c9:92:3f:9d:c3:
52:39:e4:61:1c:d8:06:44:2f:ca:20:59:22:f6:b7:e6:20:34:
68:c5:44:40:96:5e:eb:6d:3e:99:af:7b:75:88:77:3e:6f:9b:
2e:39:8b:23:dc:a3:ed:b9:ed:b8:b8:b5:73:34:d0:5a:af:af:
23:a8:8f:17:c3:cc:e7:6c:74:75:31:ec:64:c6:f2:eb:9e:d7:
6f:6f:67:e0:a9:f5:63:53:8a:26:73:0a:bd:a7:a2:35:11:fb:
7d:07:12:0e:19:e7:b5:96:59:4a:89:a8:e2:43:1f:34:ce:59:
89:32:6d:d8:03:6e:50:16:58:9e:b7:e2:a8:8b:c1:4b:d4:46:
57:2e:c9:75:f2:8c:a3:1c:a6:e9:66:3d:35:1a:96:8d:9f:56:
17:a2:49:77:a9:90:b8:30:b4:c8:c8:d1:7f:54:a7:cd:8d:b2:
18:97:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:44 2026 by rpki-client