Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: p5rVh3CTTt4Q82+Nn94FGV9661TpAAb/UcRGP2DIpf0=
Subject key identifier: AC:0B:91:C6:79:FD:D6:E3:B1:FF:BA:8A:18:0D:21:E6:2D:3F:AF:2F
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019D9A74DC63303891EE53BD8D50BA9BD21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:42 +0000
Manifest this update: Fri 17 Apr 2026 08:00:42 +0000
Manifest next update: Sat 18 Apr 2026 08:00:42 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: y1tQmyb8h0Y6ZsEXWO5zJKWU4F+8P6h0/evzT6dkSnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:dc:63:30:38:91:ee:53:bd:8d:50:ba:9b:d2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Apr 17 08:00:42 2026 GMT
Not After : Apr 18 08:00:42 2026 GMT
Subject: CN=ac0b91c679fdd6e3b1ffba8a180d21e62d3faf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:a8:b0:b9:f9:52:3b:c0:31:35:1b:81:55:
2e:44:fe:60:01:89:17:c1:47:de:c8:94:b1:ee:cf:
49:bc:49:0f:12:6e:c6:6b:86:6a:c1:27:aa:2d:9b:
8e:64:2d:5f:99:37:ae:1e:01:0a:5f:3c:c5:ca:29:
88:77:38:ba:56:27:be:0c:b1:48:71:99:36:96:93:
5c:cb:a7:38:c0:d5:fd:e8:1d:43:84:3d:70:af:80:
0c:b7:f0:78:94:a6:5d:0d:05:fe:22:0d:b4:2e:c6:
61:6d:11:2b:d3:a2:ef:62:b3:cd:86:a5:d1:5c:c4:
90:db:d6:fe:13:e1:24:74:5f:a3:ad:b8:11:d8:98:
f2:f3:51:d3:5a:92:b1:a7:c7:25:78:75:31:da:18:
42:c9:05:d7:7e:3d:ec:90:b0:71:5b:c8:8a:b0:ce:
0c:54:11:c8:e5:c6:86:20:58:92:d7:19:3c:11:7a:
3b:43:58:86:84:c8:1f:b8:45:37:c9:84:90:ec:eb:
a9:22:9b:29:7b:95:ed:c0:d5:86:24:5e:27:14:0a:
ed:fe:36:88:80:22:be:65:d0:63:b4:6b:dc:88:b0:
10:56:f6:7a:b0:cc:c3:f7:ab:c1:cf:d0:7f:d6:de:
2d:41:0f:27:1b:ee:20:d7:60:8f:5a:c3:a1:54:46:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0B:91:C6:79:FD:D6:E3:B1:FF:BA:8A:18:0D:21:E6:2D:3F:AF:2F
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e0:36:fe:22:3e:c7:04:3f:19:c4:8f:fd:77:f6:ac:d6:af:
ff:ef:b3:99:f1:18:f9:94:cb:59:81:09:25:eb:24:e0:10:53:
68:f8:e5:8f:19:d4:47:04:1f:71:0f:50:da:46:e5:6b:26:78:
1a:12:ef:f7:5f:c5:ac:44:90:7f:50:eb:fe:24:46:23:7f:ec:
8b:6d:08:7e:dc:b8:15:bc:57:64:e7:65:c0:d3:39:93:41:c7:
44:32:2e:3c:d0:cd:3c:e1:75:e4:5f:b0:3d:30:37:04:fb:f6:
2b:41:11:3e:fc:c2:8c:aa:81:75:a9:53:69:7f:b1:f4:fd:16:
e5:c2:54:e9:5e:95:8a:24:10:00:c7:a0:2c:e6:fc:57:e2:80:
7a:00:d4:da:58:ea:26:28:69:79:24:50:6d:f4:a9:a0:89:c3:
a3:2e:75:cf:28:a4:b8:2d:27:8e:44:4a:a7:a4:89:87:fd:a0:
12:6e:8b:53:6c:73:1a:0e:7d:6b:84:7c:83:a6:76:a9:97:72:
20:67:3e:92:c6:60:73:3b:b0:5a:ee:7d:b1:cd:1d:5a:86:5f:
3f:a4:54:12:c5:8c:ca:2a:a8:ba:07:da:90:b5:00:da:28:52:
48:9a:65:41:3d:8e:ac:ae:46:f4:1e:29:77:1e:00:a3:8a:b8:
c7:65:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:31 2026 by rpki-client