Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: uiyz5Z5aPbUkSGDSfiXXizymzqIU8uWI/gQg0x/+bR8=
Subject key identifier: 14:25:BC:19:A3:6B:0E:A0:23:E2:BC:9F:81:A9:83:2A:4D:33:6B:C9
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 01A0CFA45515FFEC94F8EBC8EEDE318F863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 17A3
Signing time: Wed 23 Sep 2026 19:00:48 +0000
Manifest this update: Wed 23 Sep 2026 19:00:48 +0000
Manifest next update: Thu 24 Sep 2026 19:00:48 +0000
Files and hashes: 1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: vAY10+a15PMRQy+UXHSs7t0vbEQGCjksuXHDdVrBNYA=)
2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:55:15:ff:ec:94:f8:eb:c8:ee:de:31:8f:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Sep 23 19:00:48 2026 GMT
Not After : Sep 24 19:00:48 2026 GMT
Subject: CN=1425bc19a36b0ea023e2bc9f81a9832a4d336bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:36:96:96:7c:08:0e:cb:05:07:a1:39:7b:
40:8f:9d:af:3d:2c:5f:79:17:7f:f3:e1:c9:ec:8c:
ef:75:92:e4:39:71:f4:b2:6e:92:41:cc:8e:f1:d3:
52:49:84:ca:9a:38:71:ff:47:e3:eb:3e:cc:a8:e1:
74:13:00:95:ef:a4:f5:26:39:20:c8:dd:64:bc:c7:
d9:88:a2:6c:a8:e9:e2:d1:1d:ea:c4:1e:2b:5e:de:
44:a8:36:05:a5:8a:64:47:1f:a7:92:f8:bd:57:4c:
fd:a3:16:3e:cc:0d:b4:0d:54:00:f4:f3:a1:89:eb:
e5:95:04:8c:62:1e:87:c2:00:7b:d1:79:24:73:60:
8c:22:86:f3:8c:a3:02:70:31:9d:02:36:c0:f1:1f:
dd:2d:a7:61:46:2b:5e:ad:a8:4f:de:3c:c3:36:af:
74:a2:28:d1:78:31:67:58:0f:3c:60:7b:a7:c6:ac:
ca:c4:50:75:33:4f:5f:c8:fe:b0:dd:a8:76:79:c8:
10:7f:27:78:c5:56:2c:ff:9b:68:e2:6e:98:87:ca:
61:38:35:1c:fc:e2:4e:c7:d5:08:44:5a:7d:9c:5e:
ab:0b:74:db:e9:6c:be:34:fc:57:e9:ff:d4:d5:2f:
1c:33:e8:4f:7a:a5:80:05:40:16:65:7c:94:af:7a:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:BC:19:A3:6B:0E:A0:23:E2:BC:9F:81:A9:83:2A:4D:33:6B:C9
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:59:89:f0:fa:2f:3a:0f:c1:b4:56:0f:85:d2:eb:8e:84:40:
27:fe:95:8f:d1:6e:bf:46:b1:f9:5a:8a:a7:a7:b6:9d:ec:0b:
77:ba:d8:31:4d:3a:e4:08:5a:a1:de:a9:ef:f6:8b:40:0a:c3:
e1:29:b8:76:8f:d5:ae:24:d4:8c:03:4a:52:30:96:1b:95:4c:
fb:97:c0:71:eb:bd:46:ce:f5:04:f1:3c:ca:25:5f:2a:d9:c5:
c1:10:1b:f3:f9:4b:9d:59:61:7f:01:a6:53:37:cf:3a:8b:7c:
fd:3e:4e:27:20:35:b6:c3:08:8f:4c:59:a7:d2:cf:a7:7a:a8:
d8:0b:9e:e9:7c:12:d0:fe:69:2f:37:36:a8:b9:1c:e6:30:2f:
0e:ea:7e:5d:36:e9:3a:9c:d6:e2:f7:ee:b3:6e:dc:1a:e0:e2:
3b:0a:0c:30:16:fc:83:0d:c1:44:cb:ac:58:d4:1f:f8:47:ac:
6a:5f:00:4c:8c:56:0e:7b:77:6b:50:69:1d:81:8a:ae:f5:9a:
3b:70:92:42:cb:8f:32:c4:dc:c4:7e:88:f7:38:12:36:d3:af:
54:06:84:a8:f6:d3:31:90:9f:6b:0f:49:b6:d1:75:1e:3d:6b:
0d:73:4f:e5:95:3e:1b:1a:32:80:0c:a5:78:ea:a0:67:af:60:
df:f3:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:51:11 2026 by rpki-client