Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: ycv12OZvGn0PCwSO3/oEcXeISVr2cXuC+YQY7SIlxD8=
Subject key identifier: 3A:29:14:A3:88:E8:A4:C7:9B:12:C6:22:71:D2:1C:27:F0:8E:30:93
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 01A0C6D79C3DB0946DAF466607625D89EE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 04C2
Signing time: Tue 22 Sep 2026 02:00:14 +0000
Manifest this update: Tue 22 Sep 2026 02:00:14 +0000
Manifest next update: Wed 23 Sep 2026 02:00:14 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: Pxi/A3eOGgCtjhcl4rg8YWDwzSEMLVf9+yyt7SviH64=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:9c:3d:b0:94:6d:af:46:66:07:62:5d:89:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Sep 22 02:00:14 2026 GMT
Not After : Sep 23 02:00:14 2026 GMT
Subject: CN=3a2914a388e8a4c79b12c62271d21c27f08e3093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:b2:95:1c:86:72:fa:72:fe:bf:44:9d:fa:
c4:fa:8f:08:b1:05:bb:b7:f8:31:d7:a7:a6:3d:6b:
3c:4a:00:cb:d1:22:7a:bf:36:92:c8:88:fa:33:7e:
f1:aa:5b:d7:01:a4:83:ef:cf:42:ce:53:93:d2:50:
e8:f9:97:3d:e3:58:39:e2:7e:d5:f7:f3:84:53:38:
db:a1:a9:14:5f:b9:99:4a:b4:b1:4f:c9:43:8d:92:
36:af:97:57:8e:0f:6f:36:56:f5:f4:f7:18:b5:ee:
ac:6c:bb:5c:20:5a:6d:70:41:4d:6b:ce:2b:ae:7c:
12:4f:68:6a:7e:68:5e:74:ed:0e:42:85:3c:b7:78:
e5:76:b6:ea:70:a8:74:1a:d4:9b:82:d7:9d:b7:a3:
2d:65:62:85:76:b0:f3:b1:6d:db:19:33:01:07:fe:
ee:a7:5f:04:e5:cd:62:24:a2:63:ee:7f:55:c2:e2:
c4:ff:bb:57:7a:b5:c2:46:87:88:54:df:6b:51:67:
ab:a0:c7:0b:b1:e6:bf:6f:e3:fe:88:b9:05:4a:c8:
ed:fd:1a:ad:1d:d8:fa:ce:21:7f:9d:a4:46:02:05:
8d:7c:bc:e1:88:94:82:6c:de:06:f3:64:3c:ef:da:
36:88:89:29:25:98:04:80:a6:8e:52:fa:ea:6a:46:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:14:A3:88:E8:A4:C7:9B:12:C6:22:71:D2:1C:27:F0:8E:30:93
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:71:5e:81:5a:1c:e1:3e:b3:61:17:4a:64:35:83:ef:2c:
c9:5a:ff:be:80:b7:53:56:a9:bb:57:af:10:5c:ae:22:76:4c:
54:b0:bf:40:c4:19:0f:8f:2a:d6:83:68:19:e6:5c:56:31:e4:
c5:f3:36:00:24:38:34:5e:0b:fb:75:e1:9c:c0:69:55:e8:2f:
49:37:e6:bd:d4:75:69:03:53:d6:16:09:51:3e:19:49:11:e2:
3d:b3:99:c0:47:22:19:ac:be:37:25:2f:f3:9f:79:a0:b4:b6:
56:b2:2c:f6:7e:5b:34:da:6b:e3:9e:bb:00:88:8e:d0:6d:ca:
ac:67:ca:38:60:c9:24:fd:5a:fe:0c:1b:34:b5:b1:bc:f1:b5:
61:b4:45:87:52:44:16:83:2f:d4:35:2b:61:65:fd:db:a6:d2:
d4:f0:76:07:0c:f1:7b:b5:2a:b0:a4:e5:dd:b3:ec:f0:4e:70:
45:05:71:e2:03:69:e8:ec:65:c5:d9:97:1d:48:75:31:e4:a9:
59:bd:a4:3c:17:1d:af:90:cb:1b:55:68:9d:f9:dd:98:cd:0f:
88:4a:ac:2f:cd:3a:42:4a:47:85:09:10:58:bd:e2:5b:30:24:
02:4c:2e:9f:c7:db:08:9b:df:0f:80:b7:a7:e0:2b:b5:c9:52:
72:3c:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:22 2026 by rpki-client