Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: KPmM5kURwQpkoYLKrBMOIfsKYDn43g7OyRENa4NKXWA=
Subject key identifier: 9D:F3:68:2E:9C:83:00:CB:DF:30:81:19:6F:15:DE:4B:4C:94:3A:9E
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019CABD93C439F7FE08EA0DADF9F799C6FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 02A1
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: 5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa (hash: 9IUpayNc4cHMCExpEQCneCFfKtid6K9WyA/rVze7dHc=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: W51qrxV/U84W3K9DC3eI99aq6u5sLjWI604iYRbraLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3c:43:9f:7f:e0:8e:a0:da:df:9f:79:9c:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=9df3682e9c8300cbdf3081196f15de4b4c943a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:57:3c:59:b0:61:b7:cf:5c:89:df:61:ad:
7f:fe:7d:88:74:c1:14:5b:5d:ff:62:c6:5b:14:03:
9e:f7:2e:b0:76:65:f3:66:2d:fd:aa:33:b6:f7:d0:
11:e8:e9:35:46:ed:95:f7:44:87:79:f9:8b:ff:36:
f2:10:88:36:07:c2:22:c9:2d:82:9a:aa:b9:bc:32:
02:cb:c8:66:7d:ba:2f:92:b2:32:46:80:9d:95:f0:
20:37:ed:b7:c0:b9:07:46:27:06:1e:96:c8:5c:71:
02:d7:b1:1d:10:9b:1d:df:02:8c:05:72:59:ee:f8:
d0:f4:8e:0e:f7:a6:d7:8b:cb:a8:f4:c3:c1:e3:3f:
73:22:56:9f:55:dc:b1:d8:17:3e:7d:dd:f0:f9:b7:
e3:4c:62:39:62:74:6c:3c:f5:f6:90:78:09:72:e7:
33:40:7e:45:5a:56:1e:fc:a0:c6:cd:b4:1a:9f:98:
21:a0:ed:03:88:cd:7d:9b:c2:1b:74:55:37:51:e2:
82:8c:26:1a:69:98:51:1e:ee:6f:85:5e:c5:04:1e:
bc:0e:73:55:7b:f2:02:9c:ff:b9:93:fb:ab:3e:d9:
bd:28:b6:10:a6:89:ba:46:44:c7:be:c5:65:a1:ca:
05:b5:fc:ed:6e:b0:38:36:14:ce:0f:d0:05:16:75:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:68:2E:9C:83:00:CB:DF:30:81:19:6F:15:DE:4B:4C:94:3A:9E
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:c8:11:fe:1f:6d:a8:89:08:f3:c5:55:d1:5a:d0:c9:60:
c2:fc:cd:72:21:86:51:b9:47:53:e4:12:b5:92:57:ed:06:95:
95:93:08:ac:10:9f:ea:cc:a2:26:ba:0d:37:a5:dc:55:51:53:
a2:49:d2:a7:f2:9e:19:7f:dc:6f:1f:49:98:8f:85:5e:86:71:
08:64:cf:ef:54:f5:d8:b4:95:7e:83:60:58:81:49:b8:6b:96:
71:80:c9:72:4a:23:5d:ae:91:b5:32:94:04:ea:4b:c5:83:8f:
d1:9e:99:9e:c4:2c:ca:eb:85:16:d5:aa:00:73:48:79:2c:4c:
60:9b:c0:1a:38:fa:ac:07:fb:c1:db:52:b3:51:aa:f0:61:48:
c4:1f:d1:71:3f:f4:9e:c8:7d:f0:68:27:21:97:02:09:db:18:
16:18:ed:7e:4f:a9:c6:70:ea:5a:39:32:93:da:46:3a:c5:42:
fc:a4:57:9a:97:01:3f:38:24:5b:32:5f:38:86:da:e5:25:cb:
99:52:e8:fa:bd:85:2f:01:16:5a:12:6c:af:8c:9c:e3:df:c6:
b7:9b:7b:2c:54:5e:28:df:6f:38:35:d3:08:a0:9b:4b:ce:8e:
2d:0a:70:fb:dd:76:b8:83:d0:8b:93:4b:91:87:0c:a8:71:7d:
3c:e2:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:10 2026 by rpki-client