Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: U2QKlPf4wKzjJCFRFmwwaBlhxvCQyTpgAsZCFsGZ/PY=
Subject key identifier: 63:26:2B:6C:97:7C:1A:25:C5:B9:BB:B4:EE:90:1F:6C:A4:BC:5E:3E
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019D99D0D1791B193B04ED4B58D59E94E0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 031D
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: ku20axWFhir0CLzLRofKmQyuK3nUizjalPYthiJMG9o=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d1:79:1b:19:3b:04:ed:4b:58:d5:9e:94:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=63262b6c977c1a25c5b9bbb4ee901f6ca4bc5e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:74:f9:55:d2:8e:91:e0:fc:6c:4a:92:52:
d9:f7:bd:cd:ff:33:7c:35:66:f7:cb:64:b2:08:c7:
ce:7d:b4:fd:a5:b3:c6:d0:f9:16:c9:88:82:4e:ed:
09:d8:b0:81:64:e7:b2:45:83:df:bd:13:f5:07:29:
76:b9:99:86:45:cc:2a:b8:67:eb:db:27:7e:d6:19:
d4:e1:db:8e:12:57:0a:13:f8:14:a2:dd:fb:5b:97:
c6:ad:c5:9f:65:96:ad:de:11:4e:dc:40:9e:55:24:
de:a6:38:a3:b2:b9:39:35:df:2a:be:40:b2:c9:96:
53:5d:7f:fd:9d:f0:76:a2:08:09:1c:dc:57:aa:da:
aa:83:1e:2b:39:bc:9e:64:54:10:ca:91:53:e4:ed:
a3:3d:ce:52:7e:39:6b:ce:46:0e:06:bb:61:3a:c5:
a8:79:c3:f9:6a:89:e7:21:32:3f:b1:4a:ce:71:af:
03:dd:d4:90:3e:56:28:f9:2a:cd:04:90:b4:cf:09:
07:37:b5:39:26:5c:48:6b:31:16:c7:d9:c2:20:32:
75:9d:c4:be:ac:2d:93:18:cb:53:e0:9c:15:f1:c6:
d5:8b:f5:a1:28:84:e5:7d:7c:92:2e:76:c3:7b:f9:
d7:98:49:42:cb:53:ec:4d:03:aa:4c:72:c7:7b:34:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:2B:6C:97:7C:1A:25:C5:B9:BB:B4:EE:90:1F:6C:A4:BC:5E:3E
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:12:5b:f8:a6:c3:80:f6:25:4e:b4:9b:28:8b:f4:5d:1e:
76:e7:50:f4:92:1f:72:c2:cf:68:f1:6d:c7:cc:c1:83:ad:c9:
13:87:e4:f0:1e:d7:28:06:6d:40:92:c8:9d:ad:fe:57:2c:1f:
e3:19:10:0f:f9:f9:f2:7c:0a:bc:36:bf:82:86:d9:36:79:9c:
0d:a1:97:d7:40:56:85:d0:9f:80:25:98:2d:d6:bb:f4:5a:c9:
9d:f3:5c:d9:f0:c6:08:27:4b:ef:2d:d6:dd:46:16:fb:f4:9b:
e5:ee:eb:cd:24:f5:07:43:21:2c:31:87:42:e6:94:da:ab:95:
aa:b1:07:90:dc:1d:dc:35:88:be:72:7c:53:96:06:d1:e5:f8:
99:d3:7f:1a:a9:dc:88:c1:b2:0f:7a:b3:2f:bd:0a:b7:b9:e0:
20:e5:de:b8:36:d5:81:58:26:ad:5f:11:cf:12:89:39:ad:73:
53:f5:5f:68:89:fa:55:5c:f1:16:ea:00:d0:52:4c:79:79:8f:
f3:e4:9d:aa:64:bf:8d:4c:6d:b8:a1:45:02:1b:08:3d:b1:74:
97:b4:85:58:25:f4:23:ed:ac:ed:98:8c:8a:5a:f5:48:af:78:
9e:36:cc:88:d9:df:ef:24:b5:ac:97:9e:ec:b5:b8:16:92:ca:
07:93:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:01 2026 by rpki-client