Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: ZaCrW9ett816oJTrOD4rVSQwh2Le804Hpw7deYqVOtw=
Subject key identifier: AA:32:00:1B:43:2D:DC:85:41:80:55:81:10:8B:8B:57:12:B5:32:CB
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019FAB99DBE2A99F73FE37346DA402D46F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:00:14 +0000
Manifest this update: Wed 29 Jul 2026 02:00:14 +0000
Manifest next update: Thu 30 Jul 2026 02:00:14 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: wwPDlmcCyITPkfNLBy8r/vfQ45drSllufpghLDWmyWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:db:e2:a9:9f:73:fe:37:34:6d:a4:02:d4:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Jul 29 02:00:14 2026 GMT
Not After : Jul 30 02:00:14 2026 GMT
Subject: CN=aa32001b432ddc8541805581108b8b5712b532cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:26:48:5a:34:65:be:66:80:03:da:ed:a2:
2c:a9:e4:41:ad:15:bf:11:30:e4:34:31:ad:c1:43:
2a:18:59:db:e5:c2:91:58:90:a1:ec:b2:e9:c9:3f:
53:1b:b0:ea:a0:bf:d4:f8:36:8d:e2:9f:6e:26:2f:
01:60:87:b6:d8:80:e4:f3:93:a7:02:04:8d:a3:4d:
73:cd:96:2f:37:51:7c:79:ff:b7:fd:63:68:57:bc:
ab:f6:84:88:b5:c9:90:87:e7:d3:74:dd:1b:15:19:
a0:f8:30:9d:9e:de:40:6e:7c:29:f0:ae:bb:18:f9:
76:94:f2:1a:af:b8:23:fe:0c:d8:03:5d:80:43:01:
2d:6c:bc:a9:69:3a:c6:76:fc:3b:9e:89:b3:46:74:
62:d2:08:a8:66:d5:dd:f5:8d:8c:7f:7b:48:38:32:
23:ff:2d:15:e1:31:dc:b0:b1:09:80:34:f7:e3:85:
f1:5f:45:80:06:b8:cd:3d:d5:1c:bb:5b:f3:34:d1:
40:d5:a1:8c:83:07:d2:d1:75:e7:4f:f9:75:de:06:
44:01:f1:51:c8:22:40:3a:45:62:16:7c:38:4d:67:
c4:8f:b5:d1:5b:1b:01:25:d1:2c:8e:37:49:61:40:
ea:2c:19:d2:56:b4:00:a8:88:47:f2:12:d6:9b:a0:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:32:00:1B:43:2D:DC:85:41:80:55:81:10:8B:8B:57:12:B5:32:CB
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:d3:11:fb:c4:ff:3d:fd:09:b2:ee:d6:a2:68:94:6c:09:
a4:52:22:56:2d:cc:6c:54:dc:d5:84:40:a7:ec:12:42:bb:92:
81:30:0a:ce:4b:bf:7f:44:cb:1f:b0:d1:32:d3:95:a1:1e:26:
61:93:c5:d1:de:ec:1a:b9:21:47:22:8c:b0:86:6e:84:cf:cf:
d7:c1:ef:38:4a:e4:a8:ec:33:2b:55:62:34:7f:38:58:4b:8f:
55:3c:32:4f:cb:a2:05:4d:be:67:c9:8b:d2:ee:18:08:92:95:
75:02:36:15:c9:3c:94:d8:ae:a2:2e:56:f5:dd:00:79:7a:b5:
ad:7f:4f:f7:30:15:3f:ff:19:08:0e:f2:d4:be:79:a2:51:62:
da:ee:fc:33:c3:dd:5d:7c:1b:fe:ed:9f:83:b9:fd:be:1c:54:
9b:07:e4:6f:1d:7d:bb:97:d1:f2:6a:80:d5:c2:5c:32:86:9e:
f8:f4:7e:9c:06:7b:42:cd:53:82:f4:cf:92:a6:a6:d4:a2:9b:
c6:f0:0d:19:da:ee:eb:ce:4d:0c:50:71:b1:5e:24:ed:61:ca:
08:3d:b7:a6:bb:dd:75:32:b7:1b:1b:1d:ca:4f:2d:fa:38:4c:
0b:a5:1d:c9:0d:63:0d:cb:77:53:c4:95:f2:8b:cb:20:a6:46:
6d:bb:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:45 2026 by rpki-client