Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: 3Q4Y9VsTgRjLkwuOmFwXWBBfxrX3y7Tme33LfCuP1kk=
Subject key identifier: BA:A9:4F:A5:69:0B:73:A9:26:A1:1B:12:9A:24:A9:F4:5F:0E:49:06
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01A0EC2F0B45127AA3FBC4FA1C98E6DE8B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 08:01:40 +0000
Manifest this update: Tue 29 Sep 2026 08:01:40 +0000
Manifest next update: Wed 30 Sep 2026 08:01:40 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: Ofa32lnUb3k3YvzkHDE2ItLaoOzoGQb0lmD/cEklgn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:0b:45:12:7a:a3:fb:c4:fa:1c:98:e6:de:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Sep 29 08:01:40 2026 GMT
Not After : Sep 30 08:01:40 2026 GMT
Subject: CN=baa94fa5690b73a926a11b129a24a9f45f0e4906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:3a:8d:88:8c:53:1b:a6:c3:80:12:ad:13:
f0:85:fa:f9:48:df:c2:e5:6e:8e:76:8d:d2:a1:f2:
2a:c6:c6:78:54:73:ca:79:d5:8b:c9:c9:61:00:63:
da:5d:c6:cb:23:f5:70:a4:9d:84:ca:f5:16:00:04:
32:d8:17:5b:a4:f9:fa:7e:64:0c:cf:e2:5c:3e:12:
45:7f:1d:1d:07:74:04:37:d6:12:a9:3d:77:5e:ee:
17:bc:b5:c6:8d:de:de:ce:9b:10:b1:0b:20:db:0d:
d7:e8:ae:a6:f7:e2:18:5c:5a:e5:71:4f:8a:53:40:
9e:0f:0c:d3:04:e0:08:b0:e9:95:a7:25:88:ec:ca:
cd:72:78:64:a7:e3:87:a7:ff:2a:cd:d9:29:bb:ca:
7c:8d:3b:71:dd:eb:fd:0a:a9:09:07:e7:bf:4e:b3:
e5:74:d7:9d:8a:38:2f:65:cc:d8:71:df:0d:02:5c:
f7:e8:14:20:4b:7d:4d:03:ab:bc:22:db:96:d4:74:
a1:5b:d6:63:67:dd:d5:3a:9f:43:f5:90:33:c8:d0:
c5:29:a9:92:47:d0:5d:4c:84:27:ff:dd:38:c5:9d:
e4:8e:89:23:56:31:69:1d:5a:bc:d5:78:a6:85:f1:
dd:48:fc:3f:4d:27:53:a9:03:c7:f3:b9:5a:2d:0c:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:4F:A5:69:0B:73:A9:26:A1:1B:12:9A:24:A9:F4:5F:0E:49:06
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2f:fb:c6:dc:24:22:79:de:f8:9b:bc:1a:9b:20:69:f4:ef:
25:aa:fe:63:d5:f2:63:3e:37:6f:fb:97:7d:a5:1f:7f:e1:fe:
3e:60:ae:88:f4:e6:43:d4:09:a0:5c:4a:ce:4a:4f:82:03:8c:
b8:2b:25:88:c4:64:aa:c9:55:40:e5:6c:af:59:ab:74:d8:24:
56:a5:4d:42:5d:81:f8:e4:fd:1e:7c:65:21:4d:2b:a6:a9:7d:
68:27:33:35:3a:fa:8d:bb:db:6c:d5:b6:06:b9:1f:42:e4:91:
fa:fa:6c:41:69:65:63:3a:5f:ce:bd:ec:cb:0e:4f:4a:c4:30:
b0:a2:9f:bf:8c:c0:8c:cc:20:56:f9:8f:7c:fd:24:69:c4:60:
2e:f0:1c:25:2c:05:d0:00:16:88:0e:ea:9b:79:34:d7:b0:8e:
e0:57:75:ac:68:83:12:18:67:db:e3:cc:3f:87:7d:3d:0f:c6:
ed:77:50:10:ec:1a:c0:60:42:ca:8e:76:e4:2a:5f:cf:38:aa:
bb:05:99:39:70:87:63:2a:c8:65:53:75:82:73:cf:f0:10:34:
4f:d2:29:71:0e:41:ba:46:b4:e9:68:50:d0:10:2e:ea:35:54:
19:2f:4d:75:1b:5c:de:c7:0a:a2:59:fd:1f:15:aa:2d:49:52:
a0:fb:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:25:10 2026 by rpki-client