Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: ErpGB4MyolxZqULOTIucWPkYsizO4ZijREcsweEW73M=
Subject key identifier: 49:97:AC:BF:4D:10:9E:C8:F2:AD:D7:A9:20:56:FB:82:77:1B:0C:FB
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019CA8A0D3421A5C88436237D242D1B00A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 09:00:37 +0000
Manifest this update: Sun 01 Mar 2026 09:00:37 +0000
Manifest next update: Mon 02 Mar 2026 09:00:37 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 3JjriyVb7sedVQguy6Iu1uDmRhDwj3xfAA+NdhELlDk=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:d3:42:1a:5c:88:43:62:37:d2:42:d1:b0:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Mar 1 09:00:37 2026 GMT
Not After : Mar 2 09:00:37 2026 GMT
Subject: CN=4997acbf4d109ec8f2add7a92056fb82771b0cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:c2:85:4f:df:2a:19:ba:69:b4:45:e1:87:
a5:83:22:42:b7:3e:69:ea:d5:dd:73:de:7b:6c:8b:
c9:4d:a1:9a:1a:b7:b9:3a:5f:92:8b:7f:a9:25:45:
0b:c2:d0:b7:eb:9e:4f:fa:e3:41:a8:00:0f:64:c2:
e3:9e:7e:01:0c:fa:ec:6e:d7:52:b2:65:a7:f9:06:
ce:64:7d:38:fe:15:84:00:79:09:87:37:e9:19:0d:
84:8c:a5:1a:20:53:ac:af:17:db:3d:86:05:fb:f3:
a7:27:5a:0a:85:a6:dd:38:2f:c0:de:d2:70:e1:c2:
6e:73:db:cc:31:f8:ab:eb:b8:04:3d:1f:e5:99:51:
19:93:2e:0a:82:ba:9b:18:fb:ea:c0:35:b1:0b:1e:
24:c3:96:99:58:38:b4:ee:de:fd:3d:7a:af:cc:9a:
9d:f6:62:7a:ac:41:65:98:53:74:46:a0:54:fc:d2:
2a:6e:da:66:cc:04:4b:25:2d:bd:2f:70:4f:8a:c0:
b4:59:d4:ce:9c:0c:82:aa:f5:f8:73:4d:99:67:d3:
1e:c6:03:23:1a:7d:b4:62:25:3f:44:aa:14:ca:50:
da:a3:72:75:ea:cb:63:20:81:f6:0f:5c:5e:ff:b1:
72:51:bb:ce:88:de:d4:d6:af:7f:1f:a8:ff:15:a1:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:AC:BF:4D:10:9E:C8:F2:AD:D7:A9:20:56:FB:82:77:1B:0C:FB
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:c1:7c:58:b9:73:25:27:34:21:9e:71:30:96:94:cb:ee:
a0:c7:84:ef:81:ad:d0:a6:b6:0c:7a:30:05:86:1b:46:d7:15:
63:27:d9:b4:d9:6d:ec:5e:38:63:c1:25:85:3e:03:c7:d2:06:
72:a1:d4:c0:06:1d:0e:38:d5:c9:7e:6d:af:0d:d4:08:90:ed:
15:68:9b:37:1d:d3:32:79:f9:0c:90:b6:d2:64:7e:a5:fa:ff:
85:7c:90:34:6d:6b:c1:df:18:86:09:aa:b4:46:b1:a5:40:87:
a8:35:51:9f:c7:cd:e4:ea:a4:4f:14:74:23:46:90:15:6b:bc:
ac:50:59:ca:97:df:0f:31:13:af:69:01:86:5b:7d:b7:16:0a:
9e:2c:a3:74:31:2f:b9:72:5a:72:d3:8b:a2:14:3f:f5:ac:62:
84:eb:61:92:c3:ba:da:0e:b7:7f:f2:0a:99:8e:a5:62:b4:7d:
aa:44:4a:03:72:4f:85:b4:e4:6a:69:53:bb:46:81:44:ab:4a:
31:b8:1b:e4:6c:f2:7f:9e:15:76:17:90:8a:b8:20:ba:ee:00:
ef:5a:89:2c:48:35:7c:12:7b:34:e7:48:c3:9e:04:6e:f6:6d:
e9:ca:e8:dc:21:75:39:52:17:4b:d6:bf:77:68:06:17:05:34:
92:24:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:53 2026 by rpki-client