Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: G9yh4rJZSR0+mSZidRUQF3JI7Y2+JK4uXDWcW8Mbj6A=
Subject key identifier: 23:FC:08:4C:03:B4:0B:0F:75:AB:9C:8B:71:EC:BA:46:53:FE:19:0C
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019CA9EA9113136CA3B21FB7E785F38F8918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 02A0
Signing time: Sun 01 Mar 2026 15:00:47 +0000
Manifest this update: Sun 01 Mar 2026 15:00:47 +0000
Manifest next update: Mon 02 Mar 2026 15:00:47 +0000
Files and hashes: 1: 5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa (hash: 9IUpayNc4cHMCExpEQCneCFfKtid6K9WyA/rVze7dHc=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: uIEiXqbyji/43vJq9zSzU7JbqXhoWtM/i8X/hpMP5rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:91:13:13:6c:a3:b2:1f:b7:e7:85:f3:8f:89:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Mar 1 15:00:47 2026 GMT
Not After : Mar 2 15:00:47 2026 GMT
Subject: CN=23fc084c03b40b0f75ab9c8b71ecba4653fe190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:11:16:80:4c:f2:19:e9:97:17:ff:30:c9:
c6:d6:21:68:c8:12:e7:95:56:a3:83:23:78:16:35:
4a:29:a2:b1:4c:1b:e0:c0:5d:11:cf:e2:5c:60:d2:
24:95:72:59:18:6d:9b:ea:2b:2c:51:82:f0:b8:92:
30:46:47:0a:99:15:ab:de:21:82:0f:01:d4:04:4f:
ab:8e:df:15:b1:8e:52:a0:86:a9:ba:cb:9d:06:c6:
b2:a3:af:45:26:cf:dc:cd:04:c6:91:94:af:1c:65:
e0:f2:5f:b5:c6:b8:e2:92:da:35:16:72:93:6c:58:
c7:b6:b6:c7:88:c4:8e:ef:5a:7b:c0:f5:0b:d6:08:
45:f9:b3:9b:cc:96:9c:2c:86:55:58:c7:eb:2a:a7:
2a:03:69:bf:aa:c8:b4:bc:5f:d3:1f:12:e9:60:a2:
85:aa:88:dd:a5:d5:0c:b0:fa:99:5f:55:d1:8b:a2:
4c:c1:b7:16:d4:1c:81:52:ac:74:29:0c:2a:bc:d8:
7e:5b:a6:40:3d:86:13:12:be:7d:78:93:ad:a2:d4:
05:e8:6d:14:1a:f4:2e:5c:99:6b:23:2d:e6:f8:27:
e9:81:66:2f:33:f1:6b:4e:61:55:60:25:16:db:51:
64:6f:ac:57:07:7d:36:fa:58:d9:07:43:85:bd:fe:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:08:4C:03:B4:0B:0F:75:AB:9C:8B:71:EC:BA:46:53:FE:19:0C
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ed:ed:94:6e:19:6a:66:95:36:ae:71:8c:be:3a:3a:c5:7b:
3c:54:2e:fb:50:09:53:34:34:64:ad:0d:fe:63:bf:f3:75:64:
bc:50:f6:a9:4d:09:d8:b4:e4:c6:ad:a3:76:35:42:ac:44:5b:
b0:65:fa:a9:0f:cc:be:20:e8:95:9d:19:fa:64:22:4f:2f:2e:
ea:cb:c0:39:1b:29:3f:36:d3:c8:bb:5d:b4:0f:a5:59:b6:f1:
2f:68:3c:da:7e:dd:2d:bf:7a:51:3c:72:2a:0d:4a:7a:d0:b1:
f4:5b:3b:c3:65:e7:9f:be:bb:45:0f:71:e9:45:2c:fa:51:3c:
0c:1f:45:84:99:af:94:0a:38:10:98:9f:0b:1c:10:df:ae:9f:
e6:b5:d0:dc:54:16:99:4d:48:8d:fb:df:95:f0:42:b1:48:95:
ba:7d:a0:6d:56:f6:21:61:55:bc:a6:77:12:df:2b:95:8d:88:
2a:40:75:df:11:7d:a7:ee:3b:09:75:26:b5:f6:58:ee:fe:f6:
fb:10:b0:74:76:7e:1f:43:98:34:fd:01:83:f9:8a:87:4a:08:
0e:aa:c2:ad:88:d9:06:e6:f8:14:08:1b:0b:38:d4:1f:51:7d:
f6:f4:16:0d:62:15:57:1f:31:4b:b8:35:06:a8:51:4f:72:d5:
19:df:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:31 2026 by rpki-client